Android WiFi Hacking How an MITM attack works
Android WiFi Hacking How an MITM attack works
zANTI, Dsploit, Csploit, Faceniff and many, many more similar hacking apps are using a specific kind of attack called MITM - the Man In The Middle attack. What exactly does this attack do and is there any way to protect yourself from it? Read on!
Man In The Middle aims to control a victim by becoming the "man in the middle". Lets make an example.
We got person A and person B. Lets name them Rami and Jovie. Theyre friends and just chatting through an unencrypted connection (http). Alice wants to hang out, says:
- Sup Jov, gimme your public key, I want to chat!
Rami is requesting a Public key (known as asymmetric cryptography - used to encrypt data and verify them as a digital signature)
Rami and Jovie dont know one thing. Theres an evil person Miro intercepting everything they say.
What happens here is that the sent message goes first to Miro and then gets sent to Jovie. He doesnt spot anything, the message is the same, nothings really suspicious at the moment.
Jovie responds:
- Yo Ramy, lets chat. Heres my key: materialFTW123
Miro now knows the Jovies public key but instead of sending this key directly to Rami, he sends his own public key. Miro slightly edits the message:
- Yo Ramy, lets chat. Heres my key: motiondesignFTW123
Now they can encrypt the whole conversation with their private encrypt alghoritm. However, they dont know theres someone whos edited it so he can view and control the whole conversation between these two guys.
- [encrypted with Miros key] Lets hang out, bring some booze lol
Miro then encrypts it to Jovies original key (materialFTW123) so he doesnt spot a thing. Then he resends it to Jovie and the conversation goes on.
..
This way the attacker can take control over a conversation and not only he can intercept it but also change it. Boom, we have redirect, script injection, replace images and many more features.
Heres a screen from MITM section in cSploit app. There are several MITM features starting from innocent "simple sniff" that sniffs through the traffic and monitors up/down, and password sniffer, that inputs passwords from the victims.
Now, is there any way to protect from these attacks? Yup, and its not difficult at all.
Firstly, be sure to be on HTTPS. You can always check it in he URL bar. Theres a feature SSLStrip that prevents from connecting to HTTPS but it cannot redirect you to HTTP while on HTTPS. So if youre on HTTPS, youre good to go.
Use WiFi Protector. WiFi protector is a handy app for your Android device that monitors the net and alarms you if theres an intruder (also shows his MAC/IP adress and can even protect you from the atttack if youre rooted). Download
Try not to connect to public networks - theyre the biggest threat. But fortunately these attacks are not that often and you shouldnt really catch a hacker if youre mostly on private WiFis.
