Thesis Details
Automatizace MitM útoku pro dešifrování SSL/TLS
SSL/TLS are protocols used to encrypt network traffic. They provide secure communication between clients and servers. The communication can be intercepted with MitM attack. This paper is aimed to describe the automatization of MitM attack and demonstrate its results. The automatization is done by MitM probe and a python script, which configures the probe and starts the attack. The script is easy to use, without great effort. It takes care of configuration of the probe, then it starts the tools used for network traffic capture and at last it starts MitM tools to perform the attack. During the MitM attack, users are warned by client applications about insecure connection. The client applications either provide an option to establish a connection anyway or it forbids clients to establish the connection with insecure parameters. In this paper, the users can learn what are SSL/TLS protocols and about a possibility how to intercept the network traffic encrypted by these protocols.
SSL, TLS, decryption, MitM, Man-in-the-Middle, attack
Burget Lukáš, doc. Ing., Ph.D. (DCGM FIT BUT), člen
Matoušek Petr, doc. Ing., Ph.D., M.A. (DIFS FIT BUT), člen
Peringer Petr, Dr. Ing. (DITS FIT BUT), člen
Vašíček Zdeněk, doc. Ing., Ph.D. (DCSY FIT BUT), člen
@bachelorsthesis{FITBT18593,
author = "Marek Maru\v{s}ic",
type = "Bachelor's thesis",
title = "Automatizace MitM \'{u}toku pro de\v{s}ifrov\'{a}n\'{i} SSL/TLS",
school = "Brno University of Technology, Faculty of Information Technology",
year = 2016,
location = "Brno, CZ",
language = "czech",
url = "https://www.fit.vut.cz/study/thesis/18593/"
}