Post #2344180

TP-Link fireware is a gift that keeps on giving. https://mrbruh.com/tplink/ TL;DR an undocumented command in the CLI calls out to a TFTP server and trusts whatever is provided because really, why wouldn't you? Now, of course you need to be authenticated in order to get to the CLI like this; but you gain more control over the machine by exploiting it.