New attacks can bypass HTTPS Protection

New attacks can bypass HTTPS Protection

Researchers have discovered an attack method that bypasses HTTPS protection and finds the URLs requested by users, but the encrypted traffic itself is not affected. This attack is effective for all browsers and operating systems. Researchers will demonstrate the attack at the Black Hat Security Conference in Las Vegas next month.

Attacks can be carried out by any network operator, such as the operator that provides the open WIFI service. It abused the feature called Web Proxy Autodisovery (WPAD. The most likely attack method is that when a user uses DHCP to connect to a network, DHCP can be used to set a proxy server to help the browser access a specific website, attackers can force the browser to obtain a proxy autoconfig (PAC) file and specify a specific URL to trigger the use of a proxy. Malicious PAC code obtains URL requests before an HTTPS connection is established. Therefore, attackers can grasp the plaintext URL accessed by users.

This article permanently updates the link address: