Richard
62 lines
3.7 KiB
XML
62 lines
3.7 KiB
XML
<svg viewBox="0 0 720 300" xmlns="http://www.w3.org/2000/svg" font-family="'Segoe UI', Arial, sans-serif">
|
||
<defs>
|
||
<marker id="arrow" markerWidth="9" markerHeight="9" refX="7" refY="3" orient="auto">
|
||
<path d="M0,0 L7,3 L0,6 Z" fill="#444"/>
|
||
</marker>
|
||
<marker id="arrowRed" markerWidth="9" markerHeight="9" refX="7" refY="3" orient="auto">
|
||
<path d="M0,0 L7,3 L0,6 Z" fill="#c0392b"/>
|
||
</marker>
|
||
</defs>
|
||
|
||
<text x="360" y="26" text-anchor="middle" font-size="17" font-weight="700" fill="#0b5fa5">
|
||
Adversary-in-the-Middle: Warum MFA allein nicht reicht
|
||
</text>
|
||
|
||
<!-- Opfer -->
|
||
<rect x="20" y="70" width="150" height="90" rx="7" fill="#f4f7fa" stroke="#0b5fa5" stroke-width="2"/>
|
||
<text x="95" y="98" text-anchor="middle" font-size="14" font-weight="700" fill="#1b1b1b">Opfer</text>
|
||
<text x="95" y="120" text-anchor="middle" font-size="11.5" fill="#444">klickt Phishing-Link</text>
|
||
<text x="95" y="138" text-anchor="middle" font-size="11.5" fill="#444">gibt Daten + Code ein</text>
|
||
|
||
<!-- Proxy -->
|
||
<rect x="285" y="62" width="150" height="106" rx="7" fill="#faf2f2" stroke="#c0392b" stroke-width="2.5"/>
|
||
<text x="360" y="88" text-anchor="middle" font-size="14" font-weight="700" fill="#c0392b">Angreifer-Proxy</text>
|
||
<text x="360" y="108" text-anchor="middle" font-size="11.5" fill="#444">leitet alles 1:1 weiter</text>
|
||
<text x="360" y="132" text-anchor="middle" font-size="11.5" font-weight="700" fill="#c0392b">stiehlt das</text>
|
||
<text x="360" y="148" text-anchor="middle" font-size="11.5" font-weight="700" fill="#c0392b">Session-Cookie</text>
|
||
|
||
<!-- Microsoft -->
|
||
<rect x="550" y="70" width="150" height="90" rx="7" fill="#f4f7fa" stroke="#0b5fa5" stroke-width="2"/>
|
||
<g transform="translate(598,84)">
|
||
<rect x="0" y="0" width="12" height="12" fill="#f25022"/>
|
||
<rect x="14" y="0" width="12" height="12" fill="#7fba00"/>
|
||
<rect x="0" y="14" width="12" height="12" fill="#00a4ef"/>
|
||
<rect x="14" y="14" width="12" height="12" fill="#ffb900"/>
|
||
</g>
|
||
<text x="625" y="130" text-anchor="middle" font-size="14" font-weight="700" fill="#1b1b1b">Echter Login</text>
|
||
<text x="625" y="148" text-anchor="middle" font-size="11.5" fill="#444">prüft Passwort + MFA</text>
|
||
|
||
<!-- Opfer -> Proxy -->
|
||
<line x1="170" y1="105" x2="283" y2="105" stroke="#444" stroke-width="2" marker-end="url(#arrow)"/>
|
||
<text x="226" y="98" text-anchor="middle" font-size="10.5" fill="#444">Login + Code</text>
|
||
<!-- Proxy -> Opfer -->
|
||
<line x1="283" y1="128" x2="172" y2="128" stroke="#444" stroke-width="2" marker-end="url(#arrow)"/>
|
||
<text x="226" y="143" text-anchor="middle" font-size="10.5" fill="#444">„Anmeldung ok"</text>
|
||
|
||
<!-- Proxy -> Microsoft -->
|
||
<line x1="435" y1="100" x2="548" y2="100" stroke="#c0392b" stroke-width="2" marker-end="url(#arrowRed)"/>
|
||
<text x="491" y="93" text-anchor="middle" font-size="10.5" fill="#c0392b">in Echtzeit</text>
|
||
<!-- Microsoft -> Proxy -->
|
||
<line x1="548" y1="123" x2="437" y2="123" stroke="#c0392b" stroke-width="2" marker-end="url(#arrowRed)"/>
|
||
<text x="491" y="138" text-anchor="middle" font-size="10.5" fill="#c0392b">Session-Cookie</text>
|
||
|
||
<!-- Ergebnis -->
|
||
<rect x="150" y="196" width="420" height="48" rx="7" fill="#fff8e1" stroke="#d29200" stroke-width="2"/>
|
||
<text x="360" y="216" text-anchor="middle" font-size="12" font-weight="700" fill="#9a6a00">Ergebnis</text>
|
||
<text x="360" y="234" text-anchor="middle" font-size="11.5" fill="#444">Mit dem Cookie ist der Angreifer angemeldet – ohne Passwort, ohne erneute MFA.</text>
|
||
|
||
<text x="360" y="272" text-anchor="middle" font-size="11.5" font-weight="700" fill="#0b5fa5">
|
||
Schutz: Passkeys / FIDO2 sind phishing-resistent · URL immer prüfen
|
||
</text>
|
||
</svg>
|