CVE-2018-5767

This PoC exploits CVE-2018-5767, a buffer overflow vulnerability in the AC9 router's password parsing logic via the Cookie header. It leverages a ROP chain with hardcoded libc addresses to achieve remote command execution.

This PoC exploits CVE-2018-5767, a buffer overflow vulnerability in the AC9 router model caused by an unguarded sscanf call when parsing the 'Cookie' header. It leverages ROP gadgets and a known libc base address to achieve remote code execution.

This exploit targets CVE-2018-5767, a buffer overflow in the web interface of a device, using ROP gadgets to bypass DEP/NX and brute-force ASLR. It delivers a reverse shell via a compiled ARM binary served over HTTP.