MITM is an attack where the adversary intercepts and optionally modifies communications between two parties who believe they are talking directly.
Techniques
- ARP Spoofing (LAN)
- DNS Spoofing
- SSL Stripping
- Evil Twin Wi-Fi
Mitigations
TLS with certificate validation, HSTS, Certificate Pinning, VPN.