4 ms·
HTTPS adoption is probably why this hasn't been publicly exploited yet.
by zelly 6y ago
HTTPS adoption is probably why this hasn't been publicly exploited yet.
- bronco21016 6y agoHTTPS and HSTS can be broken. The main hurdle to this attack vector at this point is most browsers throw up scary warnings and do not give super obvious paths to waving away the warning.
- vlan0 6y agoNah, this is a widely known issue. But the real win is credential harvesting from networks still running PEAP-MSCHAPv2. It certainly has been used to harvest credentials, but good luck discovering the dude who walks through a busy college campus with a WiFi Pineapple in his backpack.