Initial commit

2026-06-15 18:12:40 +02:00
commit b895cddc5f
10 changed files with 1865 additions and 0 deletions
@@ -0,0 +1,61 @@
+<svg viewBox="0 0 720 300" xmlns="http://www.w3.org/2000/svg" font-family="'Segoe UI', Arial, sans-serif">
+  <defs>
+    <marker id="arrow" markerWidth="9" markerHeight="9" refX="7" refY="3" orient="auto">
+      <path d="M0,0 L7,3 L0,6 Z" fill="#444"/>
+    </marker>
+    <marker id="arrowRed" markerWidth="9" markerHeight="9" refX="7" refY="3" orient="auto">
+      <path d="M0,0 L7,3 L0,6 Z" fill="#c0392b"/>
+    </marker>
+  </defs>
+
+  <text x="360" y="26" text-anchor="middle" font-size="17" font-weight="700" fill="#0b5fa5">
+    Adversary-in-the-Middle: Warum MFA allein nicht reicht
+  </text>
+
+  <!-- Opfer -->
+  <rect x="20" y="70" width="150" height="90" rx="7" fill="#f4f7fa" stroke="#0b5fa5" stroke-width="2"/>
+  <text x="95" y="98" text-anchor="middle" font-size="14" font-weight="700" fill="#1b1b1b">Opfer</text>
+  <text x="95" y="120" text-anchor="middle" font-size="11.5" fill="#444">klickt Phishing-Link</text>
+  <text x="95" y="138" text-anchor="middle" font-size="11.5" fill="#444">gibt Daten + Code ein</text>
+
+  <!-- Proxy -->
+  <rect x="285" y="62" width="150" height="106" rx="7" fill="#faf2f2" stroke="#c0392b" stroke-width="2.5"/>
+  <text x="360" y="88" text-anchor="middle" font-size="14" font-weight="700" fill="#c0392b">Angreifer-Proxy</text>
+  <text x="360" y="108" text-anchor="middle" font-size="11.5" fill="#444">leitet alles 1:1 weiter</text>
+  <text x="360" y="132" text-anchor="middle" font-size="11.5" font-weight="700" fill="#c0392b">stiehlt das</text>
+  <text x="360" y="148" text-anchor="middle" font-size="11.5" font-weight="700" fill="#c0392b">Session-Cookie</text>
+
+  <!-- Microsoft -->
+  <rect x="550" y="70" width="150" height="90" rx="7" fill="#f4f7fa" stroke="#0b5fa5" stroke-width="2"/>
+  <g transform="translate(598,84)">
+    <rect x="0"  y="0"  width="12" height="12" fill="#f25022"/>
+    <rect x="14" y="0"  width="12" height="12" fill="#7fba00"/>
+    <rect x="0"  y="14" width="12" height="12" fill="#00a4ef"/>
+    <rect x="14" y="14" width="12" height="12" fill="#ffb900"/>
+  </g>
+  <text x="625" y="130" text-anchor="middle" font-size="14" font-weight="700" fill="#1b1b1b">Echter Login</text>
+  <text x="625" y="148" text-anchor="middle" font-size="11.5" fill="#444">prüft Passwort + MFA</text>
+
+  <!-- Opfer -> Proxy -->
+  <line x1="170" y1="105" x2="283" y2="105" stroke="#444" stroke-width="2" marker-end="url(#arrow)"/>
+  <text x="226" y="98" text-anchor="middle" font-size="10.5" fill="#444">Login + Code</text>
+  <!-- Proxy -> Opfer -->
+  <line x1="283" y1="128" x2="172" y2="128" stroke="#444" stroke-width="2" marker-end="url(#arrow)"/>
+  <text x="226" y="143" text-anchor="middle" font-size="10.5" fill="#444">„Anmeldung ok"</text>
+
+  <!-- Proxy -> Microsoft -->
+  <line x1="435" y1="100" x2="548" y2="100" stroke="#c0392b" stroke-width="2" marker-end="url(#arrowRed)"/>
+  <text x="491" y="93" text-anchor="middle" font-size="10.5" fill="#c0392b">in Echtzeit</text>
+  <!-- Microsoft -> Proxy -->
+  <line x1="548" y1="123" x2="437" y2="123" stroke="#c0392b" stroke-width="2" marker-end="url(#arrowRed)"/>
+  <text x="491" y="138" text-anchor="middle" font-size="10.5" fill="#c0392b">Session-Cookie</text>
+
+  <!-- Ergebnis -->
+  <rect x="150" y="196" width="420" height="48" rx="7" fill="#fff8e1" stroke="#d29200" stroke-width="2"/>
+  <text x="360" y="216" text-anchor="middle" font-size="12" font-weight="700" fill="#9a6a00">Ergebnis</text>
+  <text x="360" y="234" text-anchor="middle" font-size="11.5" fill="#444">Mit dem Cookie ist der Angreifer angemeldet – ohne Passwort, ohne erneute MFA.</text>
+
+  <text x="360" y="272" text-anchor="middle" font-size="11.5" font-weight="700" fill="#0b5fa5">
+    Schutz: Passkeys / FIDO2 sind phishing-resistent · URL immer prüfen
+  </text>
+</svg>