3 ms·
the attack here is to just invert the compares for all the checks, which means it'll accept any certificate thats not the original, then you can MitM all the tr
by _kbh_ 4y ago
the attack here is to just invert the compares for all the checks, which means it'll accept any certificate thats not the original, then you can MitM all the traffic with only minor changes to the binary.
- jcalvinowens 4y agoFinding the right branches to flip in the text seems a lot more time consuming than just replacing the cert data, which is probably in one place. Unless it's incredibly obfuscated or something...
- deleted 4y ago[deleted]
- _kbh_ 4y agoIn hindsight this is probably a lot easier.