How I Reverse Engineered a Stack Overflow Bug on a Router with Ghidra (LEARN IoT/Hardware Hacking)
LEARN how to reverse engineer and analyze a stack-based buffer overflow vulnerability on a Linksys router. We will use Ghidra to perform source code analysis, and understand how to craft the HTTP POST payload to eventually reach the final vulnerable function. You will learn about each of the vulnerable functions in the call graph: "apply_cgi", "validate_lan_ipaddr", and "get_merge_ipaddr" that calls the "strcat" function that concatenates direct user input strings on the stack without sanization or validation!
⚠️ DISCLAIMER: This video is for educational purposes and authorized security awareness only. Please always practice hacking and other related techniques in an isolated and controlled environment that you own, ethically!
📚 CHAPTERS
00:00 CVE + Ghidra function call graph
00:26 "apply_cgi" function
03:18 "validate_lan_ipaddr" function
03:56 Investigating stack overflow ("get_merge_ipaddr" function)
⛓️ LET’S CONNECT!
LinkedIn: / jarrettgxz
Github: https://github.com/Jarrettgohxz
#iothacking #cybersecurity #infosec #ghidra #stackoverflow