Sharing my advisory, poc, slides and scripts to IoT / protocol security. You can find me at:

• Medium: https://medium.com/@cq674350529

• Blog: https://cq674350529.github.io/

• Mail: cq674350529@163.com

• Twitter: @cq674350529

Slides

• BHEU2023: Breaking Theoretical Limits: The Gap Between Virtual NICs and Physical Network Cards (cooperated)

• BHEU2022: LCDPwn: Breaking Enterprise-Things with Layer 2 Discovery Protocol Vulnerabilities Again  (video)

  • (website) LCDPwn

• POC2022: MikroTik RouterOS Security: The Forgotten IPC Message  (video)

• HITB2021AMS: A Journey into Synology NAS  (video)

  • (blog) A Journey into Synology NAS 系列一: 群晖NAS介绍
  • (blog) A Journey into Synology NAS 系列二: findhostd服务分析
  • (blog) A Journey into Synology NAS 系列三: iscsi_snapshot_comm_core服务分析
  • (blog) A Journey into Synology NAS 系列四: HTTP请求流程和案例分析

• POC2019: Bug Hunting in Synology NAS

Advisory

Protocol

• FreeBSD rtsold Out of Bounds Read Vulnerability

Scripts

• syno_finder: a wireshark plugin to disassemble the Synology finder protocol (9999/udp)