infobyte/evilgrade
View on GitHub ↗ ★ 1,327 Perl
Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates.
3 mentions on Hacker News by 3 people: 0 stories, 3 comments · first 2014-07-28 · latest 2020-01-30
20082026
-
…which don't involve MitM-ing HTTP(s) traffic. MitM DNS traffic and you can do nasty things: https://github.com/infobyte/evilgrade
comment by mayniac · 2020-01-30 · in Advice to avoid public Wi-Fi is mostly out of date -
…perform a man-in-the-middle due to their backbone Internet access. Something like an Evilgrade ( https://github.com/infobyte/evilgrade ) attack conducted via an ISP MitM is very hard to detect and prevent, and I suspect NSA uses…
comment by meowface · 2014-09-14 · in Sysadmins see evidence that they have been hacked by GCHQ [video] -
Evilgrade ( https://github.com/infobyte/evilgrade ) is a similar tool that works on a wider variety of insecure updaters. Perhaps a module could be written? Maybe one already exists, I haven't played with it in a while
comment by finnn · 2014-07-28 · in How to take over the computer of a Maven Central user