The Middler- A Man-In-The-Middle Attack Tool

Searching_ _ _ · Feb 10, 2009

Called “The Middler“,
it was originally introduced at DefCon 16 back in August. The tool is open source and plug-in extensible; and reportedly allows access to a number of secure services using man-in-the-middle attacks. This includes access to accounts on Gmail, Facebook, LiveJournal and LinkedIn. The Middler takes advantage of the fact these services use clear-text HTML communication once a user is logged-in rather than keeping all communications encrypted.

As well as infiltrating user sessions The Middler is also capable of injecting JavaScript into a browser as well as detecting vulnerabilities in a given browser and attacking based on what vulnerabilities are available to use. The attacks aren’t limited to PC communications either, the iPhone is also listed as a target.

Jay Beale is the co-founder on InGuardians Inc. and wrote The Middler using the Python scripting language. As well as demonstrating the vulnerabilities in different services it also allows attacks to be launched with very little knowledge on the part of the attacker, either about the Internet or hacking, potentially opening this up to a much wider group of people wishing to act maliciously.
Click to expand...

Geek.com

sded · Feb 10, 2009

I guess I don't understand. When I use gmail, it sets up an https (SSL) session and all of the mail reading and writing goes through that. I believe Yahoo mail still do it the way he states.

Log in or Sign up

The Middler- A Man-In-The-Middle Attack Tool

Searching_ _ _ Registered Member

sded Registered Member

Log in or Sign up

The Middler- A Man-In-The-Middle Attack Tool

Searching_ _ _ Registered Member

sded Registered Member

Useful Searches