DiscoverDay[0][binary] Pwning WD NAS, NetGear Routers, and Overflowing Kernel Pages
[binary] Pwning WD NAS, NetGear Routers, and Overflowing Kernel Pages

[binary] Pwning WD NAS, NetGear Routers, and Overflowing Kernel Pages

Update: 2022-03-31
Share

Description

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/pwning-wd-nas-netgear-routers-and-overflowing-kernel-pages.html


Plenty of exploit strategy talk this week with vulnerabilities and complete exploits targeting a NAS, a router, and a Linux Kernel module with a page-level overflow.


[00:00:26 ] Spot the Vuln - Normalized Regex


[00:01:52 ] Remote Code Execution on Western Digital PR4100 NAS (CVE-2022-23121)


[00:07:10 ] Defeating the Netgear R6700v3


[00:18:36 ] Exploit esp6 modules in Linux kernel [CVE-2022-27666]


[00:27:17 ] Racing against the clock -- hitting a tiny kernel race window


The DAY[0] Podcast episodes are streamed live on Twitch (@dayzerosec) twice a week:



  • Mondays at 3:00 pm Eastern (Boston) we focus on web and more bug bounty style vulnerabilities

  • Tuesdays at 7:00 pm Eastern (Boston) we focus on lower-level vulnerabilities and exploits.


The Video archive can be found on our Youtube channel: https://www.youtube.com/c/dayzerosec


You can also join our discord: https://discord.gg/daTxTK9


Or follow us on Twitter (@dayzerosec) to know when new releases are coming.

Comments 
In Channel
loading
00:00
00:00
x

0.5x

0.8x

1.0x

1.25x

1.5x

2.0x

3.0x

Sleep Timer

Off

End of Episode

5 Minutes

10 Minutes

15 Minutes

30 Minutes

45 Minutes

60 Minutes

120 Minutes

[binary] Pwning WD NAS, NetGear Routers, and Overflowing Kernel Pages

[binary] Pwning WD NAS, NetGear Routers, and Overflowing Kernel Pages

dayzerosec