Been wondering this as well. I also don’t really understand the mitm to jailbreak pipeline
Some smart devices pull config files from a server. By mitming that, you can change the config to enable some sort of developer mode on the device.
Maybe intercept firmware update and then reverse engineer it and find rce?
The fw could be encrypted
military grade SSL
Seed is '123456', much more random than '4'
Some smart devices pull config files from a server. By mitming that, you can change the config to enable some sort of developer mode on the device.
Maybe intercept firmware update and then reverse engineer it and find rce?
The fw could be encrypted
military grade SSL
Seed is '123456', much more random than '4'