Am I missing something, or is the Android/wpa_supplicant "all zero key" KRACK bug mostly FUD? Surely wrong key = traffic can't flow.
Show this thread
-
Can you inject malicious client-side JavaScript from same origin as internal web apps, then get the client to reconnect to the real WiFi?
Yeah, that should work (though that's a few notches more complex and requires prior knowledge).
