6 ms·
Sounds like a classic Man-in-the-Middle (MITM) attack. Just a guess, but from the short description I suspect if you have control over DHCP you can get iOS to
by randomstring 13y ago
Sounds like a classic Man-in-the-Middle (MITM) attack.
Just a guess, but from the short description I suspect if you have control over DHCP you can get iOS to use your proxy. From there you can use something like mitmproxy (
http://mitmproxy.org/ http://mitmproxy.org/) to forge SSL certificates on the fly and intercept and decrypt SSL traffic without any warnings showing up on the iOS device.
- nwh 13y agoYou can do that but you'll be throwing certificate errors everywhere if they're self signed. By the sounds of it this is a bypass or method of getting around the CA altogether.
- chrismsnz 13y agoYes, normally certificate errors would be thrown. In this case Apple is not performing the domain validity checks on the presented cert. This allows an attacker that is performing an mitm attack to present a valid cert for another domain and establish an SSL connection with the victim.
- nwh 13y agoUgh, that's unbelievably awful.