Intercepting Communications of IoT Device with ARP Poisoning and MITMProxy

In this video, we show how to intercept and analyze network traffic from an IoT device using ARP poisoning and Wireshark. Then, we use mitmproxy to transparently intercept TLS communications of a device when it is not properly verifying certificates.
mitmtools github repo:
github.com/nmatt0/mitmtools
ARP:
en.wikipedia.org/wiki/Address...
mitmproxy:
mitmproxy.org/
IoT Hackers Hangout Community Discord Invite:
/ discord
🛠️ Stuff I Use 🛠️
🪛 Tools:
XGecu Universal Programmer: amzn.to/4dIhNWy
Multimeter: amzn.to/4b9cUUG
Power Supply: amzn.to/3QBNSpb
Oscilloscope: amzn.to/3UzoAZM
Logic Analyzer: amzn.to/4a9IfFu
USB UART Adapter: amzn.to/4dSbmjB
iFixit Toolkit: amzn.to/44tTjMB
🫠 Soldering & Hot Air Rework Tools:
Soldering Station: amzn.to/4dygJEv
Microsoldering Pencil: amzn.to/4dxPHwY
Microsoldering Tips: amzn.to/3QyKhrT
Rework Station: amzn.to/3JOPV5x
Air Extraction: amzn.to/3QB28yx
🔬 Microscope Setup:
Microscope: amzn.to/4abMMao
Microscope 0.7X Lens: amzn.to/3wrV1S8
Microscope LED Ring Light: amzn.to/4btqiTm
Microscope Camera: amzn.to/3QXSXsb
About Me:
My name is Matt Brown and I'm an Hardware Security Researcher and Bug Bounty Hunter. This channel is a place where I share my knowledge and experience finding vulnerabilities in IoT systems.
- Soli Deo Gloria
💻 Social:
twitter: / nmatt0
linkedin: / mattbrwn
github: github.com/nmatt0/
#iot #networking #hacking #wireshark #raspberrypi #proxy #linux #embedded_systems

[@gomberfu]

fantastic content, so interesting. thank you

[@mohammedsaqeeb6400]

A super informative video!

[@neb_setabed]

Good content, keep it up!

[@DemocracyManifest-vc5jn]

You should be able to store root ca of proxy on the target device. Then you can then proxy traffic and sign certs with this. This is the way. Big enterprises do this, for everything and it enables transparent monitorin. Video suggestion 😁

[@sekytwo]

Bro this was awesome! keep these awesome videos going

[@mattbrwn]

Thanks!

[@dannytutor6383]

Very nice. Thanks for this

[@naltun4702]

Excellent video! 🙏

[@weniweedeewiki.6237]

bro this is sick ..........😁🤣

[@sundarlal12]

arpspoof in mac is not available, what to do?

[@niklas6576]

Good video, but mate your mic is trash 😂 at least run it through some audacity effect to clean it up a bit