News for hackers. Stuff that matters.
Re:RCE over ham radio – Reverse shell via WinAPRS memory cor... by mc4ndr3 on Thursday June 02, 2022 @10:17AM (#31595198)
What model of station? Do you have to PTT out WiFi layer 2 packets by hand? Is the attacking station using a wired Ethernet connection?
Re:RCE over ham radio – Reverse shell via WinAPRS memory cor... by rickostuff on Tuesday June 07, 2022 @01:42PM (#31657738)
The station model doesn't matter. The version of Windows is important, though. WiFi and Ethernet are not involved at all here. The victim machine has a radio and KISS TNC hooked up to their PC running WinAPRS. The attacker crafts a malicious AX.25 packet and sends it from their own station. When the victim's radio receives the packet, WinAPRS attempts to parse it and the exploit is triggered. The attacker just has to be within range of the victim station to trigger the exploit.