TP-Link 2 - Electric Boogaloo This writeup is a counterpart to my “Finding a RCE in my old TP-Link router” vulnerability, and was originally planned to be released alongside it, however TP-Link lost my report and didn’t triage it until I followed up months later.
You should read my other TP-Link writeup before continuing to read this, as it provides useful context.
Reverse Engineering While reverse engineering the httpd (HTTP Server) binary, I saw the following function: