Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
hacking: security in practice
Compromising Company SSL VPN via Rouge VPN Server and MITM

Good Morning hacking-community,

I just had an interesting conversation with 2 colleagues about a security risk and it’s impact.

Situation as is: Clients connect to Company VPN with a digital certificate authentication.

Imagine following situation: An attacker is able to control the configuration (Connection URL, Port) of Companies VPN clients. He is able to make clients connect to his rouge VPN Server, that accepts every connection regardless of authentication, using the digital certificate.

Questions: 1. What is the security Impact?

Yes, he can spoof the company network with the forged VPN server. But can he also relay the authentication and do a MITM attack out of this?

1. What is the likelihood of this attack path and how many Costs are involved to build such attack path?

submitted by /u/Usr0017
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
INSPIREST TESTNET REGRISTRATION

Inspirest is platform to Fashionic Artificial Intelligence.Continue reading on Medium »
Read more...
Methodology of Subdomain Takeover for Beginners

Hello Hackers, This is Abhay Vishwakarma and Today I am here with a awsome medium writeup.Continue reading on Medium »
Read more...