A penetration tester has successfully deployed an evil twin and is starting to see some victim traffic. The next step the penetration tester wants to take is to capture all the victim web traffic unencrypted. Which of the following would BEST meet this goal?
A) Perform an HTTP downgrade attack.
B) Harvest the user credentials to decrypt traffic.
C) Perform an MITM attack.
D) Implement a CA attack by impersonating trusted CAs.

Question

Quizplus · Accepted Answer

An HTTP downgrade attack forces the victim's browser to use an unencrypted HTTP connection instead of an encrypted HTTPS connection, allowing the attacker to capture the victim's web traffic unencrypted.

A Penetration Tester Has Successfully Deployed an Evil Twin and Is