WINBOX DOWNLOAD FOR LINUX FULL

After some digging around, we found an interesting project “mikrotik-tools”. So, how can we confirm this? We don’t have GDB and we don’t have a shell (yet). we ran bindiff on the files and found some differences between the two versions, but there was a simple “if” statement which was added to the file. So this bug could’ve been anything memory related. Mproxy is a 63K binary with no (except for a simple NX section) security measurements. Which makes sense because mproxy binary handles all Winbox requests. As you can see, mproxy binary has changed. I hashed every file inside those packages to see the difference, and long behold I found a few. I just named them “after” and “before” on my laptop. What we did was downloading RouterOS 6.40.7 and 6.40.8 npk files and look through each file to find the differences. RouterOS is written on top of Linux Kernel so a lot of kernel modules will be different in each version. The vulnerability affects all versions of RouterOS from 6.29 (release date: 5) to 6.42 (release date 0) The Diffįirst things first, we had to see which binaries was changed before and after the patching. RouterOS is the operating system of most Mikrotik devices. MikroTik now provides hardware and software for Internet connectivity in most of the countries around the world. What is MikrotikĪccording to the official website, MikroTik is a Latvian company which was founded in 1996 to develop routers and wireless ISP systems. UPDATE: CVE-2018-14847 has been assigned to this vulnerability and there should be a MetaSploit module related to this bug soon.

WINBOX DOWNLOAD FOR LINUX FULL

UPDATE: full PoC is now available on Github. myself and of (part of IR CERT) reverse engineering lab tried to figure out what exactly got fixed, what was the problem in the first place and how severe was the impact of it. On April 23rd 2018, Mikrotik fixed a vulnerability “that allowed gaining access to an unsecured router”.

Winbox download for linux