r0bre ๐Ÿž๏ธ๐Ÿ’‚ Profile picture
๐Ÿฆนโ€โ™‚๏ธ security research & smart contract audits @neodyme | ctf @allesctf & @Sauercl0ud
Dec 9, 2022 โ€ข 8 tweets โ€ข 2 min read
So essentially the same bug was present in netgears urlfilterd, a service that allows users to block http traffic to specific domains. It was implemented through a custom netfilter that would parse any http packet looking for the HOST header, comparing it to a list of forbidden sites.
Dec 9, 2022 โ€ข 7 tweets โ€ข 2 min read
How to find router WAN 0dayz in 2022, a quick and easy guide ๐Ÿงต

#pwn2own #bugbountytips 1. Pick a router, download the firmware, extract the filesystem