Hanging out as the Man-in-the-Middle

MITM attacks get a lot of attention from network and application security vendors, and rightfully so. MITM attacks can be conducted near the application server but are more commonly seen near the clients. The grade of MITM attack will vary greatly, from passively monitoring traffic patterns to active interference and credential harvesting. Given the prevalence of higher-priority compromises that can yield the same information (such as Cross Site Scripting or XSS), web application penetration testers need to evaluate the risk against the reward of pursuing a MITM attack. Let's take a look at one of the most popular tools in detail and survey some similar tools for different MITM objectives.

Scraping creds with SSLstrip

...