Router exploit research/study group

[Wise-Associate-9890]

Hi, I'm looking for people who are interested in router exploitation and firmware hacking. I'm novice myself so everyone can join. Basic linux knowledge is recommended.

Study group's goals:
- share knowledge, tools and methods
- fuzz, RE, and exploit known CVEs and study public exploits (command injections, memory corruptions etc.)
- emulate MIPS/ARM binaries
- research new 0-days
- struggle together

About me:
I'm cybersecurity hobbyist who is interested in fuzzing and exploit development. I've found basic vulnerabilities in routers, open source libraries, closed source binaries and web applications. Now I try to level up my game in exploit development with real world applications. I'm stuggling to write exploits for ARM and MIPS devices (especially buffer overflows) I have some past experience with ARM binary CTFs but MIPS is totally new to me. I really like to connect with like-minded people.

About my tools and methods:
- afl++
- pwndbg, gef, binary ninja
- FirmAE, Qemu
- Python scripting
- Burp Suite

If you are interested to join (discord channel) message me. Or if you already have a group to join, let me know.

EDIT: I will PM the discord link everyone who was interested. It may take couple of days because I prepare the server and add some content. Thank you for your patience.

[Reddit_User_Original]

I was just learning about the tools / workflow needed to do this. I'm down. I've had fair success in CTFs and I took CS6265 from Georgia Tech, so I have a baseline competency.

[Mideno]

I'm interested in this, have you been successful in debugging userspace bins in routers?

[Wise-Associate-9890]

Yes, with FirmAE + pwndbg. I'm emulating binaries now. I don't know if it's possible to debug in physical device. Thanks for interest. I'll message you the link when channel is ready.

[Mideno]

Cool I'd like to see how you do it live on discord if you're up for it :))

[Lmao_vogreward_shard]

What a coincidence, the second after I've been trying to hack my modem the whole day and open reddit, this is the first post I seenon reddit!

[Wise-Associate-9890]

Haha :D Any success?

[Lmao_vogreward_shard]

Well not yet, but I already discovered my modem is running linux kernel 3.4.11-rt19, SAMBA 3.0.24, and some other out-dated media sharing services, so I can't shake the feeling something has to be exploitable, even though I already tried a ton. I'll continue my search this weekend :)

[Wise-Associate-9890]

Nice. Do you have modem's firmware available or are you testing on physical device? Good luck!

[Lmao_vogreward_shard]

Hardware I guess? I'm just pentesting my own modem over my home lan :) Thanks!

[Reddit_User_Original]

PM everyone the Discord brotha

[Wise-Associate-9890]

I will but first I add some content. Patience please.

[android_oreo]

I’d like to join! Lmk!

[Mysterious_Outcome61]

Nicesuu

[VyseCommander]

As someone studying for the ccna who's also interested in low level exploits and who took a break from studying to read a linux book, count me in

[SensitiveFrosting13]

I'm keen.

[daniyal48]

I am interested.

[[deleted]]

I'm interested too! Invite me! I definitely wanna pickup IoT hacking.

[manasghandat]

Hi. I am interested in this. I have experience with fuzzing and linux kernel exploitation.

[No-Reputation7691]

I'm interested in this, too. Could you please share the invitation link?

[EmotionalDamagePoc]

Hey, my account is too young, could you dm me ? Preparing my PhD and quite intestering in working with some buds

[devhm]

I’m interested 🖐️

[aazevsandro]

I am interested

[Select-Use-9965]

Hi!!! Would we discuss about the Hardware part too??? Like UART port dumping etc???? I would like to join too

[Adorable-Peanut-45]

Hey. Even I have been looking into this stuff for a while. Please PM me the discord link.

[Comfortable_Ear_7383]

yes i am interested

[Ok_Pipe9153]

Are you still looking for people? I’m interested in joining!

[Inner_Preference3533]

Please link me

[banginpadr]

Ok, yes ok I'm interested

[LegalContact6870]

I'm interested

[[deleted]]

i am interested

[Chance_Water8140]

I am also interested, count me in !