MITM (Man-in-the-Middle)
Definition
Any attack in which the adversary sits between two endpoints and reads or modifies traffic. ARP poisoning, rogue access points, BGP hijacks and SSLstrip are all paths into MITM.
Related terms
- ARP Poisoning
- Sending forged ARP replies on a LAN to bind an attacker's MAC to a victim's IP in other hosts' ARP caches, redirecting...
- CVE / KEV
- Common Vulnerabilities and Exposures (MITRE-assigned identifier per public flaw). Known Exploited Vulnerabilities catalogue (CISA), which lists CVEs proven to be actively exploited...
- DDoS (Distributed Denial of Service)
- Service-denial attack sourced from many hosts at once. Volumetric (saturate bandwidth), protocol (exhaust state on stateful boxes), or application-layer (exhaust application resources).
- OWASP Top 10
- Open Worldwide Application Security Project's ranking of the most common web application security risks, refreshed every 3 to 4 years. Current edition:...
- Packet Sniffing
- Capture of network traffic from a wired tap, a switch SPAN port, or a Wi-Fi monitor-mode radio. Passive sniffing reads; active sniffing...
Explained in
- Network Attacks: Sniffing, ARP Poisoning, MITM, DDoS, XSS and SQLiAny attack in which the adversary sits between two endpoints and reads or modifies traffic. ARP poisoning, rogue access points, BGP hijacks and SSLstrip are al...