How to Hack MFA (Multi-Factor Authentication) 

I'm pretty sure it's a cookie editor plugin from firefox

yes i made a graphic pop up below with an arrow so you can see it :)

I think in this application there is no need to spend the time decrypting the traffic, as he mentions this is theory. You could absolutely argue that in a RL situation where you would be hacking MFA it would be encrypted.

Because he is using a local proxy, it intercepts the browser's traffic before https is applied, I think it's burp actually. The only way to use this attack he is showing is to have control of the client machine or browser on a step before the attack. With a man in the middle it would go everything encrypted. The other thing he said that's not that aqurate is the posibility of bruteforcing the 4 digit code. Anybody with some knowledge of security would block that after some incorrect inputs, like 3 times or so. Usually those cannot be bruteforced unless the page is vulnerable to that (it was designed by a monkey) and it sould be generated by a random secure generator so the posibility to guess that is almost null. I think I went overboard with the explanation, sorry, I think I didnt really like this video.

That's concerning for your safety if you don't know what MFA

@@_justnick well I do know 2fa

I can see how "How to Hack MFA" could seem uninteresting to someone who doesn't know what "MFA" means. Maybe putting the written-out text in the title as well would be helpful in this case.

Good for you, that's a good way to learn new things.