Security Plus 701: Man-in-the-Middle Attacks

Toby from Online Security presents a tutorial on man-in-the-middle attacks, also known as on-path or adversary-in-the-middle attacks, as part of the Security Plus 701 course. The video covers setting up a proxy using Burp Suite on Kali Linux, creating a batch script to configure a victim's browser, and capturing traffic to demonstrate the attack. The tutorial emphasizes the importance of understanding these attacks and implementing security measures to prevent credential theft.

What are man-in-the-middle attacks also known as?

• Phishing attacks

• Denial-of-service attacks

• Side-channel attacks

• On-path attacks

Which tool is used in the lab to act as a proxy for capturing traffic?

• Metasploit

• Nmap

• Burp Suite

• Wireshark

What is the purpose of setting up a proxy in Burp Suite?

• To perform a denial-of-service attack

• To encrypt data

• To capture and analyze traffic

• To block unauthorized access

What is the role of the batch script created in the lab?

• To block the victim's internet access

• To install malware on the victim's system

• To redirect the victim's traffic through the attacker's proxy

• To encrypt the victim's data

What should be done if the initial attempt to capture traffic fails?

• Restart the computer

• Use a different browser

• Change the IP address

• Disable the firewall

What HTTP method is used to send data to a web server?

• PUT

• DELETE

• POST

• GET

Which of the following is a security measure to prevent man-in-the-middle attacks?

• Sharing passwords

• Using encrypted protocols

• Disabling antivirus software

• Using public Wi-Fi

What should users be cautious about to avoid falling victim to such attacks?

• Updating software regularly

• Downloading files from unknown sources

• Using strong passwords

• Executing scripts offered via email

What is the main goal of a man-in-the-middle attack?

• To install software updates

• To improve network speed

• To capture and manipulate data

• To block internet access

What is a key takeaway from the lab regarding security training?

• Share your credentials with others

• Always trust emails from unknown sources

• Never use encrypted connections

• Be cautious about executing scripts from emails