Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

Mikhail Elizarov - MITM

Avatar for DC7499 DC7499
July 03, 2015
Research
99
0

Mikhail Elizarov - MITM

DEFCON Moscow 9

Avatar for DC7499

DC7499

July 03, 2015

More Decks by DC7499

See All by DC7499
Sergey Sobko - Hackashop: Hackathon + Pentest + Workshop [RU]
Avatar for DC7499 defcon
0
600
Dmitry Sklyarov - Intel ME: Security keys Genealogy, Obfuscation and other Magic
Avatar for DC7499 defcon
0
330
Anton Lopanitsyn - Initial reconnaissance of web applications.
Avatar for DC7499 defcon
0
320
Dmitry Volkov - Private messengers: without pain??
Avatar for DC7499 defcon
1
260
Andrey Skuratov and Sergey Migalin - DNS tunneling in 2018. What is that, and what to do with it?
Avatar for DC7499 defcon
2
260
Sergey Belov - Another side of Bug Bounty programs
Avatar for DC7499 defcon
0
340
Dmitry Sklyarov - Intel ME: Flash file system explained
Avatar for DC7499 defcon
0
600
Maxim Goryachiy & Mark Ermolov - Inside Intel Management Engine
Avatar for DC7499 defcon
0
710
Sergey Golovanov - Indecent Response 2018
Avatar for DC7499 defcon
0
590

Other Decks in Research

See All in Research
JICA QUEST 共創×革新プログラム Impact Report（海ノ向こうコーヒー）
Avatar for 坂ノ途中 ontheslope
0
590
VLMの推論を高速化する視覚トークン削減の仕組み
Avatar for tattaka tattaka
2
310
CDCL を用いた MILP の厳密解法
Avatar for 今井義弥 imai448
0
250
Using our influence and power for patient safety
Avatar for Helen Bevan helenbevan
0
420
The story of RefactoringMiner. Slow research, long-term impact
Avatar for Nikolaos Tsantalis tsantalis
0
150
SLAMはどこまで解決されたのか？
Avatar for tomonom tomonom
0
1.3k
ros2-perf-multihost: 分散システムにおける客観的なアーキテクチャ評価フレームワーク
Avatar for takasehideki takasehideki
0
260
2026年 オープンキャンパス 研究室紹介
Avatar for Jun Kurihara junkurihara
0
190
[CV勉強会＠関東 CVPR2026] PSDesigner: Automated Graphic Design with a Human-Like Creative Workflow / kantocv 67th CVPR 2026
Avatar for Shunsuke KITADA shunk031
0
300
J-STAGEの現況と全文XML登載必須化について
Avatar for XSPA xspa2012
0
220
HAKARI-Bench - 実運用視点での情報検索モデル評価ベンチマーク
Avatar for Yuichi Tateno hotchpotch
1
740
最先端NLP 2026 論文紹介: Wait, Wait, Wait... Why Do Reasoning Models Loop? / SNLP Paper Review: Wait, Wait, Wait... Why Do Reasoning Models Loop?
Avatar for tkng tkng
0
220

Featured

See All Featured
My Coaching Mixtape
Avatar for mlcsv mlcsv
0
310
How to Align SEO within the Product Triangle To Get 
Buy-In & Support - #RIMC
Avatar for Aleyda Solis aleyda
2
1.8k
What does AI have to do with Human Rights?
Avatar for Per Axbom axbom
PRO
1
2.4k
Large-scale JavaScript Application Architecture
Avatar for Addy Osmani addyosmani
515
110k
ラッコキーワード サービス紹介資料
Avatar for ラッコ株式会社 rakko
1
4.8M
GraphQLの誤解/rethinking-graphql
Avatar for sonatard sonatard
75
12k
brightonSEO & MeasureFest 2025 - Christian Goodrich - Winning strategies for Black Friday CRO & PPC
Avatar for Christian Goodrich cargoodrich
3
830
The Cult of Friendly URLs
Avatar for Andy Hume andyhume
79
7k
Testing 201, or: Great Expectations
Avatar for Joseph Mastey jmmastey
46
8.3k
svc-hook: hooking system calls on ARM64 by binary rewriting
Avatar for Akira Moroo retrage
2
570
How to audit for AI Accessibility on your Front & Back End
Avatar for davetheseo davetheseo
0
530
End of SEO as We Know It (SMX Advanced Version)
Avatar for Michael King ipullrank
3
4.4k

Transcript

  1. @_Saplt

  2. MitM

  3. • Введение (история появления атаки) • Цель проведения атаки Человек

    по середине • Виды атак (пассивны/активный) • Инструменты • Полученные результаты
  4. None
  5. None

  6. PWN ‘em all

  7. Пассивный сбор данных

  8. None

  9. Активный перехват

  10. • ARP spoofing (полудуплекс) • ARP poisoning (полный дуплекс) •

    ICMP перенаправление • IP spoofing • DHCP spoofing,поддельный IPv6 DHCP • WPAD MitM, MDNS, LLMNR (APIPA) • BPDU(STP) Spoofing • DNS spoofing • Evil WiFi AP (Зараженные точки доступа WiFI)

  11. ARP таблица

  12. ARP spoofing

  13. ARP poisoning

  14. ICMP перенаправление

  15. IP spoofing

  16. поддельный IPv6 DHCP работает в сетях с IPv6

  17. Атака на WPAD MitM, MDNS, LLMNR (APIPA)

  18. BPDU(STP) Spoofing работает в сетях с IPv6

  19. BPDU(STP) Spoofing конечный результат

  20. DNS spoofing

  21. Поддельная WiFi сеть