Man-in-the-Middle (MitM)

Attack intercepting and altering communications between two parties who believe they are talking directly.

Core Principles & Analysis

• Classic forms include ARP spoofing and rogue Wi-Fi access points.
• Certificate Transparency logs expose fraudulently issued certificates.
• Defeated by TLS certificate validation and HSTS enforcement.