4 ms·

I don't get it. If it is over http then you can play around with anything in a proxy. You have no TLS tunnel so it is not encrypted. It is by design.

• vngzs 3y ago
  That's just the delivery method, not the exploit.
• d3w4s9 3y ago
  Yes it is not encrypted and the response returned from server can be modified to anything and ask for password etc, but that is far from an exploit that runs native code.