Hacker GitHub

← All repos

infobyte/evilgrade

View on GitHub ↗ ★ 1,327 Perl

Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates.

3 mentions on Hacker News by 3 people: 0 stories, 3 comments · first 2014-07-28 · latest 2020-01-30

Mentions per year 3 mentions · busiest year 2014 (2)
20082026
  1. …which don't involve MitM-ing HTTP(s) traffic. MitM DNS traffic and you can do nasty things: https://github.com/infobyte/evilgrade
  2. …perform a man-in-the-middle due to their backbone Internet access. Something like an Evilgrade ( https://github.com/infobyte/evilgrade ) attack conducted via an ISP MitM is very hard to detect and prevent, and I suspect NSA uses…
  3. Evilgrade ( https://github.com/infobyte/evilgrade ) is a similar tool that works on a wider variety of insecure updaters. Perhaps a module could be written? Maybe one already exists, I haven't played with it in a while