CVE-2014-1266

This course covers how to perform a Person-in-the-Middle attack against a client performing an HTTP connection over TLS, specifically exploiting the CVE-2014-1266 vulnerability in the iOS and OSX TLS stack. The challenge involves setting up a DNS server and a malicious TLS server to intercept and decrypt the client's communication by exploiting a flaw in the TLS handshake process.

Skills covered