Wait, isn't the first step in their exploit an installation of BURP suite, which installs custom SSL certificate? This does not seem to be much of vulnerabilit

Wait, isn't the first step in their exploit an installation of BURP suite, which installs custom SSL certificate? This does not seem to be much of vulnerability -- I am sure that if you can bypass SSL verification on the host, there are plenty of auto-updaters you can convince to execute your code.