PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Cuộc chiến White Box và Black Box trong truy tìm lỗ hổng bảo mật ở thiết bị IoTs

blog.viettelcybersecurity.com | blog | #vulnerability-research | #iot | #netgear | #black-box | #white-box | #firmware-analysis | #zdi
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Two researchers independently found auth-bypass flaws ZDI-20-1176 and ZDI-20-1451 in NETGEAR's mini_httpd; the post compares their white-box source analysis and black-box approaches.
Published
Collected

Related coverage

vulnerability · blog.viettelcybersecurity.com
NETGEAR R6700v3: 1day Analysis (CVE-2021-34982) Buffer Overflow RCE Vulnerability
The author traces CVE-2021-34982 on NETGEAR R6700v3 to Create_Hashtable() in the httpd String File Table Upload handler: unvalidated gui_region overflows a stack buffer, enabling pre-auth root RCE.
blog · blog.viettelcybersecurity.com
The first step to PWN2OWN - A sad one
A researcher's first find: LAN-side command injection in the NETGEAR RAX30 UPnP service via a malicious SOAPACTION header embedded into a logger command; patched just before Pwn2Own Toronto 2022.
blog · blog.viettelcybersecurity.com
Lỗ hổng trên thiết bị D-link
A researcher dissects a buffer overflow in the D-Link DIR-601 web service: request paths are concatenated via strcat without length checks, so a long URL overflows the buffer on this EOL router.
blog · blog.viettelcybersecurity.com
Lỗ hổng điều khiển các thiết bị SmartHome Lumi
Researcher analyzes Lumi smart home devices, finding hardcoded MQTT credentials in firmware and weak controls that let attackers manipulate lights and locks via local Wi-Fi or the cloud.
blog · blog.viettelcybersecurity.com
Research IOT - Analyze Bootloader - notBootSecure
A researcher reverse engineers an encrypted Hikvision camera firmware, using UART access to dump the bootloader and recover the decryption key, a practical guide to IoT firmware extraction.
blog · blog.viettelcybersecurity.com
Kiểm tra vài camera Trung Quốc và cái kết
A researcher tests three cheap Chinese cameras, finding default telnet credentials, command injection in CGI functions and unauthenticated RCE via firmware update parsing.
Back