5 ms·
Not sure if I missed it, but are those updates going over HTTP without SSL as well?
by ddtaylor 1y ago
Not sure if I missed it, but are those updates going over HTTP without SSL as well?
- MobiusHorizons 1y agoThe article says they used mitmproxy which installs a system certificate
- ddtaylor 1y agoI think the payload after that though is that MITM proxy delivering an HTTP link to an EXE that anyone can payload with MITM, same attack surface.