└── TP-Link └── WR940N └── 112022 ├── Part1.md ├── images ├── HLIL_function.png ├── a0_callflow.png ├── bindiff_output_combined.png ├── callbackparsing.png ├── callgraph.png ├── eloop_register_timeout.png ├── eloop_run.png ├── failed_http_parse.png ├── firstbranch.png ├── freeaddrinfo_call_var.png ├── freeaddrinfo_disassembly.png ├── freeaddrinfocallview.png ├── hostapd_bindiff_matched_funcs.png ├── httpd_bindiff.png ├── httpread_func.png ├── looking_at_disassembly.png ├── msearch_func.png ├── ntbranch.png ├── photo_of_search_results.png ├── ssdp_func_var.png └── tcp_handler.png └── video └── demo.gif /TP-Link/WR940N/112022/Part1.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/Part1.md -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/HLIL_function.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/HLIL_function.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/a0_callflow.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/a0_callflow.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/bindiff_output_combined.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/bindiff_output_combined.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/callbackparsing.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/callbackparsing.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/callgraph.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/callgraph.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/eloop_register_timeout.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/eloop_register_timeout.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/eloop_run.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/eloop_run.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/failed_http_parse.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/failed_http_parse.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/firstbranch.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/firstbranch.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/freeaddrinfo_call_var.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/freeaddrinfo_call_var.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/freeaddrinfo_disassembly.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/freeaddrinfo_disassembly.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/freeaddrinfocallview.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/freeaddrinfocallview.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/hostapd_bindiff_matched_funcs.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/hostapd_bindiff_matched_funcs.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/httpd_bindiff.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/httpd_bindiff.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/httpread_func.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/httpread_func.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/looking_at_disassembly.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/looking_at_disassembly.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/msearch_func.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/msearch_func.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/ntbranch.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/ntbranch.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/photo_of_search_results.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/photo_of_search_results.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/ssdp_func_var.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/ssdp_func_var.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/images/tcp_handler.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/images/tcp_handler.png -------------------------------------------------------------------------------- /TP-Link/WR940N/112022/video/demo.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/b1ack0wl/vulnerability-write-ups/HEAD/TP-Link/WR940N/112022/video/demo.gif --------------------------------------------------------------------------------