Man-in-the-Middle Attacks
Understand how attackers intercept and alter communication between two parties.
What is a MitM Attack?
In a Man-in-the-Middle (MitM) attack, an adversary secretly intercepts and relays communication between two parties who believe they are communicating directly with each other. The attacker can read, modify, or inject data.
ARP Spoofing
ARP (Address Resolution Protocol) spoofing sends fake ARP messages on a local network, associating the attacker's MAC address with a legitimate IP address. This redirects traffic through the attacker's machine.
Effective on unsegmented Layer 2 networks — this is why network segmentation matters.
All lessons in this course
- Phishing and Spear Phishing
- Malware: Viruses, Worms, Trojans, Ransomware
- Man-in-the-Middle Attacks
- Denial of Service and DDoS