Section 19.184 On-path Attacks

Question 1

On-path Attacks

Answer 1

An attack where the attacker positions their workstation logically between two hosts during communication

■ The attacker transparently captures, monitors, and relays communications between those hosts

Question 2

Methods for On-Path Attacks

ARP Poisoning

Answer 2

Manipulating Address Resolution Protocol (ARP) tables to redirect
network traffic

Question 3

Methods for On-Path Attacks

DNS Poisoning

Answer 3

Altering DNS responses to reroute traffic

Question 4

Methods for On-Path Attacks

Rogue Wireless Access Point

Answer 4

Creating a fake wireless access point to intercept traffic

Question 5

Methods for On-Path Attacks

Rogue Hub or Switch

Answer 5

Introducing a malicious hub or switch to capture data on a wired network

Question 6

Replay Attack

Answer 6

Occurs when an attacker captures valid data and then replays it immediately or
with a delay

■ Common in wireless network attacks; can also be used in wired networks

Question 7

Relay Attack

Answer 7

The attacker becomes part of the conversation between two hosts

■ Serves as a proxy and can read or modify communications between the hosts

■ Any traffic between the client and server goes through the attacker

Question 8

Challenges with Replay and Relay

Answer 8

Encryption can make interception and crafting communication difficult

■ Strong encryption schemes like TLS 1.3 can pose significant challenges for
attackers

■ Techniques like SSL stripping may be used to downgrade encryption to an unsecured connection

Question 9

SSL Stripping

Answer 9

○ An attack that tricks the encryption application into presenting an
HTTP connection instead of HTTPS

○ Enables attackers to capture unencrypted data when the user
believes they are using a secure connection

Question 10

Downgrade Attack

Answer 10

An attacker forces a client or server to abandon a higher security mode in favor
of a lower security mode

■ Scope of Downgrade Attacks:
● Downgrade attacks can be used with various encryption and protection methods, including Wi-Fi and VPNs

● Any situation where a client agrees to a lower level of security that is still backward compatible can be vulnerable to a downgrade attack