EvilZone

Hacking and Security => Hacking and Security => Topic started by: proxx on June 03, 2014, 12:28:09 PM

Title: MITM RDP SSL (recording keystrokes and other sexy things)
Post by: proxx on June 03, 2014, 12:28:09 PM

https://labs.portcullis.co.uk/blog/ssl-man-in-the-middle-attacks-on-rdp/

Quote

This post seeks to demonstrate why users learning to ignore those certificate warnings for SSL-based RDP connection could leave them open to man-in-the-middle (MiTM) attacks. The MiTM attack demonstrated displays keystrokes sent during an RDP session. We conclude with some advice on how to avoid being the victim of such an attack

Title: Re: MITM RDP SSL (recording keystrokes and other sexy things)
Post by: Architect on June 03, 2014, 07:51:10 PM

This is what happened to Nova, and it makes me mad. But this type of thing is so easy now, with a little knowledge.