How much of a boon is this for jailbreaking, reverse engineering, and mitm really?
client on startup asks: hey server do you have any ads for me
server: here are latest ads
btw, the ads are capable of code execution for whatever reason so now you have an RCE on your hands for your client
Been wondering this as well. I also don’t really understand the mitm to jailbreak pipeline
Some smart devices pull config files from a server. By mitming that, you can change the config to enable some sort of developer mode on the device.
Maybe intercept firmware update and then reverse engineer it and find rce?
The fw could be encrypted
military grade SSL
Seed is '123456', much more random than '4'
client on startup asks: hey server do you have any ads for me
server: here are latest ads
btw, the ads are capable of code execution for whatever reason so now you have an RCE on your hands for your client
Been wondering this as well. I also don’t really understand the mitm to jailbreak pipeline
Some smart devices pull config files from a server. By mitming that, you can change the config to enable some sort of developer mode on the device.
Maybe intercept firmware update and then reverse engineer it and find rce?
The fw could be encrypted
military grade SSL
Seed is '123456', much more random than '4'