client on startup asks: hey server do you have any ads for me
replyserver: here are latest ads
btw, the ads are capable of code execution for whatever reason so now you have an RCE on your hands for your client
Been wondering this as well. I also don’t really understand the mitm to jailbreak pipeline
replySome smart devices pull config files from a server. By mitming that, you can change the config to enable some sort of developer mode on the device.
replyMaybe intercept firmware update and then reverse engineer it and find rce?
replyThe fw could be encrypted
replymilitary grade SSL
replySeed is '123456', much more random than '4'
reply