New answers tagged

2 votes

How do IoT devices know the checksum of firmware upgrades?

A checksum would indeed verify it's integrity. It would be transferred with the firmware update and the device could ensure integrity based on the checksum. However, this would not stop MITM. For ...
user avatar
2 votes
Accepted

How do IoT devices know the checksum of firmware upgrades?

I'm not sure what source of information you had that suggested that only a checksum is used for validating the firmware. Established approaches for software updates (which includes firmware) use ...
user avatar
1 vote

How to perform MitM against SSL/TLS when certificate owned?

This could either be decrypted on the fly, or saved so I can decrypt it at a later date, either approach is fine. You're gonna have to go with decrypted on the fly. The certificate + private key is ...
user avatar
0 votes

How is man-in-the-middle attack prevented in TLS?

If the attacker can only capture packets, it's not a MitM attack but simply eavesdropping. And in this case, in modern TLS with ephemeral keys (DHE, Ephemeral Diffie-Hellman, or ECDHE suites) the ...
user avatar
  • 4,226
0 votes
Accepted

Burp suite: URL encoding of request body - Is this safe?

I assume that you encountered the content-type application/x-www-form-urlencoded for POST data, which is the default type if nothing else is given in a form. As the name suggests - the request body is ...
user avatar

Top 50 recent answers are included