3 ms·
Well, its not quite that easy for a rookie as you say. Just because you can trigger a buffer overflow bug does not mean you can exploit it. Most modern processo
by ksk 13y ago
Well, its not quite that easy for a rookie as you say. Just because you can trigger a buffer overflow bug does not mean you can exploit it. Most modern processors will allow disabling execution with an IP-on-Stack test. Thats assuming you can actually control the IP... , and assuming you can actually deliver the payload in the corrupted program state and not crash the program, etc etc..
- annnnd 13y agoEven a rookie would spot this mistake, but he would need to learn a lot before exploiting it. But with a nice target like this one... :)
- ksk 13y agoI don't agree that this is a valuable target. AFAIK most consumer routers disable access to the web interface from outside the LAN range (by default).
- Stamy 13y agoYes but you can break almost any routers wifi password in 24hrs.
- sp332 13y agoBut you have to be in range of the wifi to do it. This isn't something that's going to be a widespread problem.
- pixl97 13y agoAnd now your weakest device can CSRF remote access back on. Most people don't take their router in to a repair shop when the get a virus on their computer.