← All talks

TCP Authentication Attack: Stealing Credentials! #shorts

BSides Frankfurt0:53920 viewsPublished 2026-04Watch on YouTube ↗
About this talk
TCP with authentication isn't always secure. Stealing the authentication token grants full control, allowing data modification and unauthorized mission control. Demonstrating inherent vulnerabilities. #CyberSecurity #NetworkSecurity #TCP #ManInTheMiddle #InfoSec
Show transcript [en]

This uses TCP and it has an authentication mechanism. And um what we do is we have on the top we did a simple man-in-the-middle attack. Uh we have on the lower left we have the uh server-side application. On the lower right we have the the client-side application. And we wanted to demonstrate that this is inherently insecure. So um just because it's like a it has an authentication mechanism but it has a certain lifetime. So if you can steal again, it's like a bit like a cookie. If you can steal the the authentication uh you can do whatever you want. You can change the data. You can connect your own mission control system to it. Uh you can change data that is returned

from the spacecraft to indicate like a state, whatever you want. Um yeah.