---
layout: post
title: Main in the Middle (MitM)
subtitle: Week 5-7 - ARP Poisoning
---

## Address Resolution Protocol

The address resolution protocol resolves a IPv4 address to the corresponding MAC address.

## Man in the Middle (MitM) Attack

<https://github.com/jennydaman/twlinux/wiki/Man-in-the-Middle-(MitM)-Attack-%E2%80%93-ARP-Poisoning>

<center>
<img src="https://wiki.wireshark.org/CaptureSetup/Ethernet?action=AttachFile&do=get&target=Capture-switch-mitm-ws.png" alt="Wireshark MitM">
</center>

# Week 5: spying on telnet connections over LAN

`telnet` enables remote access to your computer system.

<https://github.com/jennydaman/twlinux/wiki/System-Administration#telnet>

{: .box-error}
Telnet is legacy software, it transmits sensitive content in plaintext. We're using it for demonstrational purposes. **Never** use telnet in practice.

# Week 6: tracing HTTP connections to the Internet

To compromise network traffic going outside the LAN, we must intercept traffic between the client and the router.

[Wireshark](https://www.wireshark.org/) is a popular cross-platform network analysis tool.

# Week 7: password theft from SSL/TLS connections

Anything with both a CPU and a NIC is vulnerable...
---
layout: post
title: Main in the Middle (MitM)
subtitle: Week 5-7 - ARP Poisoning
---

## Address Resolution Protocol

The address resolution protocol resolves a IPv4 address to the corresponding MAC address.

## Man in the Middle (MitM) Attack

<https://github.com/jennydaman/twlinux/wiki/Man-in-the-Middle-(MitM)-Attack-%E2%80%93-ARP-Poisoning>

<center>
<img src="https://wiki.wireshark.org/CaptureSetup/Ethernet?action=AttachFile&do=get&target=Capture-switch-mitm-ws.png" alt="Wireshark MitM">
</center>

# Week 5: spying on telnet connections over LAN

`telnet` enables remote access to your computer system.

<https://github.com/jennydaman/twlinux/wiki/System-Administration#telnet>

{: .box-error}
Telnet is legacy software, it transmits sensitive content in plaintext. We're using it for demonstrational purposes. **Never** use telnet in practice.

# Week 6: tracing HTTP connections to the Internet

To compromise network traffic going outside the LAN, we must intercept traffic between the client and the router.

[Wireshark](https://www.wireshark.org/) is a popular cross-platform network analysis tool.

# Week 7: password theft from SSL/TLS connections

<https://letsencrypt.org/stats/#percent-pageloads>

Add link to HTTPS line graph
Add link to HTTPS line graph
