<![CDATA[I was looking for proof of concept code for some IoT botnet stuff, and came across this.]]>I was looking for proof of concept code for some IoT botnet stuff, and came across this.

https://www.ameeba.com/blog/cve-2024-21821-arbitrary-os-command-execution-vulnerability-in-multiple-tp-link-products/

However, after looking at a couple of other pages in which they claim to have a hypothetical proof of concept code, I'm realizing that the "proof of concept" is a generic example, and not in any way related to the CVE in question.

All I'm gonna say is that if you're looking for a CVe and you see this shit website ameeba in your search results, mentally filter it immediately, and fuck these assholes for posting this slop.

]]>https://board.circlewithadot.net/topic/6faf27e3-d57c-4795-9cc2-5b56979e9f99/i-was-looking-for-proof-of-concept-code-for-some-iot-botnet-stuff-and-came-across-this.RSS for NodeThu, 16 Apr 2026 00:49:02 GMTWed, 15 Apr 2026 18:43:19 GMT60<![CDATA[Reply to I was looking for proof of concept code for some IoT botnet stuff, and came across this. on Wed, 15 Apr 2026 20:06:17 GMT]]>@da_667 @rootwyrm @Dio9sys @vulncheck they don't appear to store poc, but they do provide links. I'm not sure if they auto-submit links to archive.org or how often they verify that the links are live. interesting questions...

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/reverseics/statuses/116410520559136700https://board.circlewithadot.net/post/https://infosec.exchange/users/reverseics/statuses/116410520559136700Wed, 15 Apr 2026 20:06:17 GMT<![CDATA[Reply to I was looking for proof of concept code for some IoT botnet stuff, and came across this. on Wed, 15 Apr 2026 19:58:38 GMT]]>@reverseics @rootwyrm @Dio9sys @vulncheck which is part of why I wrote IoT_Hunter to have a function to submit reference urls for an exploit to the internet archive. Because I'm seriously tired of that shit.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/da_667/statuses/116410490434802787https://board.circlewithadot.net/post/https://infosec.exchange/users/da_667/statuses/116410490434802787Wed, 15 Apr 2026 19:58:38 GMT<![CDATA[Reply to I was looking for proof of concept code for some IoT botnet stuff, and came across this. on Wed, 15 Apr 2026 19:57:20 GMT]]>@da_667 @reverseics @Dio9sys I would straight up guarantee all of the ones sitting at the top of the DDG/Kagi/WTF-even-try results are doing no such thing.

I can spot them from a mile away because they're *ALL* the exact same obvious slop that is literally pure LLM regurgitation with no human review at all.

e.g. Ameeba doesn't even DO that shit, they're allegedly a 'private workspace for modern work' 'built on encrypted identity.' With LLMs and vibe-coding, of course.

]]>https://board.circlewithadot.net/post/https://weird.autos/users/rootwyrm/statuses/116410485360324700https://board.circlewithadot.net/post/https://weird.autos/users/rootwyrm/statuses/116410485360324700Wed, 15 Apr 2026 19:57:20 GMT<![CDATA[Reply to I was looking for proof of concept code for some IoT botnet stuff, and came across this. on Wed, 15 Apr 2026 19:51:31 GMT]]>@reverseics @rootwyrm @Dio9sys @vulncheck do they actually archive public proof of concept code or something like that? because if they do... IoT exploits are fucking notorious for "I got my CVE number, time for me delete this entire github repo." bullshit.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/da_667/statuses/116410462461329653https://board.circlewithadot.net/post/https://infosec.exchange/users/da_667/statuses/116410462461329653Wed, 15 Apr 2026 19:51:31 GMT<![CDATA[Reply to I was looking for proof of concept code for some IoT botnet stuff, and came across this. on Wed, 15 Apr 2026 19:34:38 GMT]]>@rootwyrm @Dio9sys @da_667 i checked this specific CVE in @vulncheck and I'm happy to report that they report no PoCs for the vuln.

They are a paid service but I suspect 'you get what you pay for' is the name of the game. Free search results? full of slop, because it makes you keep searching.

I only hope they can keep up with all the slop that is incoming, without getting overwhelmed themselves.

Of course if you happen to find one that works, then they are wrong in the other direction ;-). So far though they have been pretty good for identifying vulns that have actual, functioning poc.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/reverseics/statuses/116410396065724160https://board.circlewithadot.net/post/https://infosec.exchange/users/reverseics/statuses/116410396065724160Wed, 15 Apr 2026 19:34:38 GMT<![CDATA[Reply to I was looking for proof of concept code for some IoT botnet stuff, and came across this. on Wed, 15 Apr 2026 19:00:22 GMT]]>@Dio9sys @da_667 (DDG and Kagi are both very eagerly eating up and aggressively ranking at the top slop sites of every flavor, while pretending reporting it as 'AI generated' will get them to remove it or downrank it.)

]]>https://board.circlewithadot.net/post/https://weird.autos/users/rootwyrm/statuses/116410261348953203https://board.circlewithadot.net/post/https://weird.autos/users/rootwyrm/statuses/116410261348953203Wed, 15 Apr 2026 19:00:22 GMT<![CDATA[Reply to I was looking for proof of concept code for some IoT botnet stuff, and came across this. on Wed, 15 Apr 2026 18:57:47 GMT]]>@Dio9sys @da_667 but it's not like Google, DDG, and every other search engine is eating this shit up and promoting these sites, right?
Right?

]]>https://board.circlewithadot.net/post/https://weird.autos/users/rootwyrm/statuses/116410251210691399https://board.circlewithadot.net/post/https://weird.autos/users/rootwyrm/statuses/116410251210691399Wed, 15 Apr 2026 18:57:47 GMT<![CDATA[Reply to I was looking for proof of concept code for some IoT botnet stuff, and came across this. on Wed, 15 Apr 2026 18:57:04 GMT]]>@Dio9sys this is probably something to put up on my blog to scream about. if only to shit-talk the massive number of orgs doing this.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/da_667/statuses/116410248384862327https://board.circlewithadot.net/post/https://infosec.exchange/users/da_667/statuses/116410248384862327Wed, 15 Apr 2026 18:57:04 GMT<![CDATA[Reply to I was looking for proof of concept code for some IoT botnet stuff, and came across this. on Wed, 15 Apr 2026 18:56:49 GMT]]>@da_667
I hate it so so so bad. That and when dudes post "proof of concept" on github and it's just a markdown file with them guessing at how it might work. Feedly always thinks that those repos are the real mccoy

]]>https://board.circlewithadot.net/post/https://haunted.computer/users/Dio9sys/statuses/116410247350693893https://board.circlewithadot.net/post/https://haunted.computer/users/Dio9sys/statuses/116410247350693893Wed, 15 Apr 2026 18:56:49 GMT<![CDATA[Reply to I was looking for proof of concept code for some IoT botnet stuff, and came across this. on Wed, 15 Apr 2026 18:55:32 GMT]]>@Dio9sys aqua security, ameeba, cyfirma, and a few others all just do this shit whereby they either just vomit the exact same description on cve.org, or they'll extrapolate on it with generic and/or sometimes incredibly WRONG advice, or shit a bunch of graphs on to the page that mean NOTHING. hell, one of these "helpful sites" output a "remediation" section that was blurred out. "Pay for remediation advice, nerd."

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/da_667/statuses/116410242355453542https://board.circlewithadot.net/post/https://infosec.exchange/users/da_667/statuses/116410242355453542Wed, 15 Apr 2026 18:55:32 GMT<![CDATA[Reply to I was looking for proof of concept code for some IoT botnet stuff, and came across this. on Wed, 15 Apr 2026 18:51:04 GMT]]>@da_667
it's downright infuriating

]]>https://board.circlewithadot.net/post/https://haunted.computer/users/Dio9sys/statuses/116410224786891889https://board.circlewithadot.net/post/https://haunted.computer/users/Dio9sys/statuses/116410224786891889Wed, 15 Apr 2026 18:51:04 GMT<![CDATA[Reply to I was looking for proof of concept code for some IoT botnet stuff, and came across this. on Wed, 15 Apr 2026 18:45:21 GMT]]>I'm so fucking tired of websites that just take the slop generated from the NVD and regurgitate it like the worthless slop they are. But shit like this? where they just fucking make up a proof of concept? Nah. Get absolutely fucked.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/da_667/statuses/116410202266064376https://board.circlewithadot.net/post/https://infosec.exchange/users/da_667/statuses/116410202266064376Wed, 15 Apr 2026 18:45:21 GMT