With all the news lately about AI developing new CVEs left and right, it got me very interested in trying it myself.

Some background of myself, I've discovered a privledge esclation attack on an IoT device and worked in firmware development for a bit. Nothing too crazy. Lately, I've been itching to learn more about how things get hacked as low level as possible. So I thought I'd dive down this a little more.

Target Choice

My apartment network (hypothetically speaking). After moving, I found the network was quite slow. VERY slow sometimes (like maybe 10mbps; this may not sound slow for some people, but for me downloading LLMs or updating nixos, this was SUPER SLOW). This meant it had to have some type of bottleneck or just not enough bandwidth.

Because of the network speed, I was left no other choice but to poke a little bit.

So I did some nmap scanning and realized I could see 2 devices. A switch of some sort and the gateway.

Taking note of the sudo nmap -T2 -sV -O -sC --script vuln -oN switch.txt [switch ip] it had quite a few vulnerbilities (most of which didn't actually work interestingly, or I was trying them wrong).

Switch:

• ssh
• telnet
• http
• snmp (found out much later)

The webpage was interesting to me. I was able to access it from my own ethernet drop. They didn't configure the VLANs correctly.

From there I tried hydra and some other bruteforcing methods. That didn't really get me anywhere other than getting some false positives.