Search code examples
securityauthenticationman-in-the-middle

Can Man in the middle open a logged page?

I know that man in the middle (mitm) can be in passive mode : forward, or active mode : modify trafic and forward...

But Can mitm open a page, in firefox for example, to connect on a website where i was logged.

Is this possible ?

Solution

  • Yes, as you say, the man-in-the-middle can modify the traffic. So when you request a page, he/she can easily return an HTTP 302 to another page, or insert some JavaScript to set the document.location.href of your document.

    If your traffic is encrypted using https, this is not possible.