Can you MitM me?

Your average website to get MitM'd.

What is a MitM?

A MitM (Man-in-the-Middle attack) is a network attack where someone between the two ends of a connection (aka. in the middle of the connection, hence the name) is intercepting and possibly altering the data being transfered.

Why would I want to be MitM'd?

One of the most common uses of a MitM is for captive portals: they intercept all HTTP requests to redirect you to the authentication page. However, this "feature" doesn't work well with HTTPS websites, because either the captive portal will not intercept these requests, or the browser will detect this type of MitM and will show you a warning. Additionnaly, a lot of websites uses additional security features, like HSTS or HPKP which will prevent you from going through the warning.

Therefore, instead of fighting to find a an HTTP website each time I need to be redirected by a captive portal, I created this on-purpose-unsecure website. You can bookmark it for future use, I guarantee it will always be HTTP-only.

This looks like a hacky solution

Yes............

But, does a MitM serves other purposes?

Yes, but usually unlegitimate ones. Some attackers will try to make a MitM attack against connections to steal sensible informations like personnel informations, password, credit card numbers, etc.

Did I get MitM?

Maybe. Passive MitM, where an attacker only listen to the connection cannot be detected in plain HTTP. But active MitM, where someone tamper with the actual data being transfered can be detected.

We tried to run a small test, but it failed. This can be because JavaScript is disabled, your browser is too old or something else prevented the test from running.