Exploiting CVE-2023-33476 for remote code execution

blog.coffinsec.com

cross-posted to:
exploitdev@infosec.pub

Exploiting CVE-2023-33476 for remote code execution

blog.coffinsec.com

cookiengineer@discuss.tchncs.deM to netsec - Network Security@discuss.tchncs.deEnglish · 1 year ago

cross-posted to:
exploitdev@infosec.pub

chonked pt.2: exploiting cve-2023-33476 for remote code execution

blog.coffinsec.com

second part in a two-part series going over heap overflow in MiniDLNA (CVE-2023-33476). this post provides a walkthrough of steps taken to write an exploit for this vulnerability in order to achieve remote code execution and pop a shell.

You must log in or register to comment.

Chat

netsec - Network Security@discuss.tchncs.de

netsec@discuss.tchncs.de

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !netsec@discuss.tchncs.de

This is the netsec Community, a community-curated aggregator of technical information security content. Our mission is to extract signal from the noise - to provide value to security practitioners, students, researchers, and hackers everywhere.

Content Guidelines:

Content should focus on the “How”.
Always try to link to the original source.
Titles should provide context.
Ask Questions with a “[Question]” prefix in the Title.
Hiring Posts must go in the [Hiring] (stickied) Threads.
Commercial advertisement is discouraged.

Discussion Guidelines:

Don’t create unnecessary conflict.
No trolling allowed, limit the use of jokes and memes.
Don’t complain about content being a PDF.
Be nice to each other, everybody started somewhere.

Prohibited Content:

No populist news articles (CNN, BBC, FOX, etc)
No curated lists.
No social media posts (Facebook, Twitter, etc).
No image-only/video-only posts.
No livestreams.
No Tech Support requests.
No paywalled/regwalled content (use archive.is if possible?)
No commercial advertisement.
No crowdfunding posts.
No personally identifiable information.
No doxxing, and no harrassment of any kind.

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

1 user / day
1 user / week
1 user / month
12 users / 6 months
1 local subscriber
363 subscribers
15 Posts
3 Comments
Modlog

mods:
cookiengineer@discuss.tchncs.de