Certificate error and MITM.

Hack3rcon · 02-04-2020, 09:18 AM

Hello,
In a local network when a browser show "certificate error", then can it a sign of MITM attack?
The browser, date and time and...are up to date.

Thank you.

mothered · 02-04-2020, 10:55 AM

(02-04-2020, 09:18 AM)Hack3rcon Wrote: In a local network when a browser show "certificate error", then can it a sign of MITM attack?

No, It could be due to numerous reasons.

(02-04-2020, 09:18 AM)Hack3rcon Wrote: The browser, date and time and...are up to date.

Check the date & time In the BIOS and set It accordingly.

If (for example) It's dated one year back, your PC will think that the certificate has expired, hence will throw an error.

Hack3rcon · 02-04-2020, 12:40 PM

As I said, everything is OK. I want to know that in a local network with a Fortinet gateway, can anyone that access to the gateway launched this kind of attack?

mothered · 02-04-2020, 01:33 PM

(02-04-2020, 12:40 PM)Hack3rcon Wrote: As I said, everything is OK. I want to know that in a local network with a Fortinet gateway, can anyone that access to the gateway launched this kind of attack?

Quote:As I said, everything is OK

You didn't mention the BIOS.

A MITM attack can be generated In just about any environment. You've expressed your concern pertaining to a certificate error, and that's what I've addressed.

Hack3rcon · 02-05-2020, 01:42 PM

(02-04-2020, 01:33 PM)mothered Wrote:
(02-04-2020, 12:40 PM)Hack3rcon Wrote: As I said, everything is OK. I want to know that in a local network with a Fortinet gateway, can anyone that access to the gateway launched this kind of attack?

Quote:As I said, everything is OK
You didn't mention the BIOS.

A MITM attack can be generated In just about any environment. You've expressed your concern pertaining to a certificate error, and that's what I've addressed.

How can I find MITM attack ?

Num5kull · 02-11-2020, 01:35 PM

yes unless you put an ip block on your replacement page server. Biggrin

mothered · 02-11-2020, 02:12 PM

(02-05-2020, 01:42 PM)Hack3rcon Wrote:
(02-04-2020, 01:33 PM)mothered Wrote:
(02-04-2020, 12:40 PM)Hack3rcon Wrote: As I said, everything is OK. I want to know that in a local network with a Fortinet gateway, can anyone that access to the gateway launched this kind of attack?

Quote:As I said, everything is OK
You didn't mention the BIOS.

A MITM attack can be generated In just about any environment. You've expressed your concern pertaining to a certificate error, and that's what I've addressed.
How can I find MITM attack ?

I've completely missed this notification.

In terms of detecting/Identifying MITM attacks, have a look at this.

Certificate error and MITM.
Author Message