Releasing a side project of mine: wsuks - automating the WSUS mitm attack🔥
🔗 https://github.com/NeffIsBack/wsuks
TL;DR:
If the Windows Server Update Service (WSUS) is configured to use HTTP instead of HTTPS, it's possible to take control of any Windows machine on your local network.
🐥 [ tweet ]