错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Research and Implementation of TFTP Encrypted Traffic Analysis and Attack Technology Based on 4G Man-in-the-Middle

  • Menglin Ma,
  • Baojiang Cui

摘要

In the scenario of a 4G man-in-the-middle attack, the analysis of encrypted traffic is a highly complex problem. The attack based on 4G man-in-the-middle only occurs at the protocol level based on DNS protocol, and the implementation conditions are very strict. At the same time, the lack of open source 4G man-in-the-middle attack tools also increases the difficulty of research and limits the attack surface of 4G man-in-the-middle. This paper implements a tool named 4G MITM Attacker, which can carry out 4G man-in-the-middle attacks. Based on the analysis of the TFTP protocol, an analysis method is proposed, which successfully analyzes the TFTP traffic from the encrypted traffic and modifies the traffic with the feature of missing integrity protection of TFTP, resulting in file corruption attacks.