Concepts / Interception

Interception

Man in the middle

Also called MITM, on-path, interception

A machine placed on the path between two parties, able to read and alter what is not protected end to end.

It can come from a hostile gateway, a forged DHCP or ARP answer, or a compromised network device. Plain HTTP and DNS are fully exposed to it; TLS keeps content private and detects impostors, as long as its warnings are respected. Switch protections and VPNs reduce the exposure.

See it on real machines

Learn it on real machines.

Every lab is a small network of real Linux machines in your browser. Start with a free account: Google or email, no card.

Open this lab