3 ms·
The blog post with all the technical details: http://blog.fox-it.com/2015/04/20/deep-dive-into-quantum-insert/ http://blog.fox-it.com/2015/04/20/deep-dive-into-
by 4096 11y ago
The blog post with all the technical details: http://blog.fox-it.com/2015/04/20/deep-dive-into-quantum-insert/ http://blog.fox-it.com/2015/04/20/deep-dive-into-quantum-ins...
And the Github account with the tools to do this yourself, PCAP and rules for snort, bro and suricata:
https://github.com/fox-it/quantuminsert https://github.com/fox-it/quantuminsert
- smellf 11y agoThanks for the technical link. You gotta love Wired, paraphrasing down to get gems like: “The first TCP packet will be the ‘inserted’ one while the other is from the real server, but will be ignored by the [browser]”. Oh my browser deals with TCP packets??