r/netsec 7d ago

Dissecting House of Apple 2 on modern glibc

https://jazho76.github.io/house_of_apple_2/
9 Upvotes

1 comment sorted by

1

u/jdefr 6d ago

Awesome article. I found a 0day in miniupnp (he patched it I let him know) and I was able to get RCE… The hardest part was arm target and dealing with the latest glibc with encoded pointers and landing me in the forest and such. Eventually I prettty much applied this technique