• 0 Posts
  • 2 Comments
Joined 1Y ago
cake
Cake day: Jul 04, 2023

help-circle
rss

That makes sense, the MiTM was still going on but you browser was not configures with the company CA


The computer probably has local security tools (such as an edr) that spy on you any way.

You need to assume it is completely compromised.

But… assuming this isn’t in violation of your company computer usage policy (which it very much might be and can put you in trouble) you can install any VPN (avoid spyware shit) and a different browser (ideally something a bit obscure, like librewolf) and this will bypass the MiTM as the the device that does the MiTM would be either:

A) a network device that hijacks the HTTPS requests (VPN bypass this)

B) the browser used by the company

C) some other kind of software that atteches itself to all browsers via admin installed extensions (obscure browser might not be recognised by such software, be sure to check the installed extensions after letting the browser run for an hour)

And once you are done you can check the certificate chain in the browser to confirm.