CVE-2011-0997

The exploit demonstrates multiple RCE vulnerabilities in 15 TOTOLINK router models, allowing command execution via HTTP and DHCP requests. It includes functional PoC code and detailed technical analysis of the vulnerabilities.

This is a functional DHCP server implementation in Ruby, extended to exploit CVE-2011-0997, a vulnerability in the PXE boot process. The code includes specific logic to serve malicious PXE configurations, enabling remote code execution on vulnerable clients.