New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
hyperpwn - Rooting multiple ISPs with hyperglass
Note: All the research, from hunting to exploitation was done by DS. All I did was validate. Posting this on LET first, hopefully it spreads.
TLDR; hyperglass has OS code exec vulns which you can trivially turn into pre-auth RCE. Many ISPs and hosting providers are vulnerable to it because they expose their hyperglass instance to the internet.
Comments
TL;DR
yes, appreciate if you could add a sentence or two summary. pasting an unexplained bare link is vaguely uncool.
You think I am burning a chrome zero day on broke-ass LET users?