News for hackers. Stuff that matters.
Re:Source code for backdoor found in Tenda router by GrinningFool on Saturday October 19, 2013 @02:25PM (#6577289)
Looks like here is where it gets interesting: https://github.com/socoola/yhrouter/blob/master/user/goahead...

An example fo the inbound command structure, then code further below to execute it and respond.

It listens on the LAN interface (assuming the value shown is what it says it is) for datagram requests. Unless I'm missing something, that seems to indicate an attacker must already be on the same network.

It does shell out the commands it receives - so perhaps more interesting would be look and see what kinds of accessible binaries and scripts ship on the device.

There are no comments on this comment yet.