CVE-2023-33669

This repository contains a working PoC for multiple stack-based buffer overflow vulnerabilities in Tenda AC8V4.0si_V16.03.34.06, leading to remote code execution via ROP chain exploitation. The exploit leverages TFTP to host a pre-compiled loader for a reverse shell.

This exploit targets a stack overflow vulnerability in the Tenda AC8 router (firmware US_AC8V4.0si_V16.03.34.06) to achieve remote code execution via a crafted ROP chain. The payload downloads and executes a netcat binary via TFTP to establish a reverse shell.