Wifiphisher is a security tool that mounts fast automated phishing attacks against WPA networks in order to obtain the secret passphrase. It is a social engineering attack that unlike other methods it does not include any brute forcing. It is an easy way for obtaining WPA credentials. From the victim’s perspective, the attack makes use […]
Continue ReadingHackers have obtained a digital certificate good for any Google website from a Dutch certificate provider. Criminals could use the certificate to conduct “man-in-the-middle” attacks targeting users of Gmail, Google’s search engine or any other service. Attackers could poison DNS, present their site with the fake cert and bingo, they have the user’s credentials. Man-in-the-middle […]
Continue ReadingMallory is a transparent TCP and UDP proxy. It can be used to get at those hard to intercept network streams, assess those tricky mobile web applications, or maybe just pull a prank on your friend. In more technical terms, Mallory is an extensible TCP/UDP man in the middle proxy that is designed to be […]
Continue Reading