# mips

Published articles for mips.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Mongoose: Preauth RCE and mTLS Bypass on Millions of Devices

DevFeed: [Mongoose: Preauth RCE and mTLS Bypass on Millions of Devices](<https://devfeed.tech/articles/mongoose-preauth-rce-and-mtls-bypass-on-millions-of-devices-41273.md>)

Original publisher: [Read original article](<https://www.evilsocket.net/2026/04/02/Mongoose-Preauth-Remote-Code-Execution-and-mTLS-Bypass/>)

Author: Simone Margaritelli

Published: 2026-04-01T22:00:00Z

Content type: article

Language: en

Sources: [evilsocket](<https://devfeed.tech/sources/evilsocket.md>)

Topics: [Mongoose](<https://devfeed.tech/topics/mongoose.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Security](<https://devfeed.tech/topics/security.md>), [Embedded Systems](<https://devfeed.tech/topics/embedded-systems.md>), [Internet of things](<https://devfeed.tech/topics/iot.md>), [C](<https://devfeed.tech/topics/c.md>), [cross-platform](<https://devfeed.tech/topics/cross-platform.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [MQTT](<https://devfeed.tech/topics/mqtt.md>), [WebSocket](<https://devfeed.tech/topics/websocket.md>)

Tags: [authentication-bypass](<https://devfeed.tech/tags/authentication-bypass.md>), [buffer-overflow](<https://devfeed.tech/tags/buffer-overflow.md>), [c](<https://devfeed.tech/tags/c.md>), [cesanta](<https://devfeed.tech/tags/cesanta.md>), [cross-platform](<https://devfeed.tech/tags/cross-platform.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cve-2026-5244](<https://devfeed.tech/tags/cve-2026-5244.md>), [cve-2026-5245](<https://devfeed.tech/tags/cve-2026-5245.md>), [cve-2026-5246](<https://devfeed.tech/tags/cve-2026-5246.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [embedded](<https://devfeed.tech/tags/embedded.md>), [embedded-devices](<https://devfeed.tech/tags/embedded-devices.md>), [embedded-systems](<https://devfeed.tech/tags/embedded-systems.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [heap-overflow](<https://devfeed.tech/tags/heap-overflow.md>), [http](<https://devfeed.tech/tags/http.md>), [https](<https://devfeed.tech/tags/https.md>), [industrial-control](<https://devfeed.tech/tags/industrial-control.md>), [iot](<https://devfeed.tech/tags/iot.md>), [iot-security](<https://devfeed.tech/tags/iot-security.md>), [library](<https://devfeed.tech/tags/library.md>), [mdns](<https://devfeed.tech/tags/mdns.md>), [mips](<https://devfeed.tech/tags/mips.md>), [mongoose](<https://devfeed.tech/tags/mongoose.md>), [mqtt](<https://devfeed.tech/tags/mqtt.md>), [mtls](<https://devfeed.tech/tags/mtls.md>), [rce](<https://devfeed.tech/tags/rce.md>), [responsible-disclosure](<https://devfeed.tech/tags/responsible-disclosure.md>), [security](<https://devfeed.tech/tags/security.md>), [stack-overflow](<https://devfeed.tech/tags/stack-overflow.md>), [tls](<https://devfeed.tech/tags/tls.md>), [vulnerability-research](<https://devfeed.tech/tags/vulnerability-research.md>)

### AI overview

The article reports three independently exploitable vulnerabilities in Mongoose v7.20, an embedded C networking library used in IoT devices: an mTLS authentication bypass, a preauthentication heap-overflow RCE through client public-key parsing, and a preauthentication RCE through mDNS over UDP. Mongoose v7.21 reportedly includes patches for the issues, which were assigned CVE-2026-5244, CVE-2026-5245, and CVE-2026-5246.

### Source excerpt

So, Mongoose. I

## TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering

DevFeed: [TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering](<https://devfeed.tech/articles/tp-link-tapo-c200-hardcoded-keys-buffer-overflows-and-privacy-in-the-era-of-ai-assisted-reverse-engineering-41272.md>)

Original publisher: [Read original article](<https://www.evilsocket.net/2025/12/18/TP-Link-Tapo-C200-Hardcoded-Keys-Buffer-Overflows-and-Privacy-in-the-Era-of-AI-Assisted-Reverse-Engineering/>)

Author: Simone Margaritelli

Published: 2025-12-17T23:00:00Z

Content type: article

Language: en

Sources: [evilsocket](<https://devfeed.tech/sources/evilsocket.md>)

Topics: [Reverse Engineering](<https://devfeed.tech/topics/reverse-engineering.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Security](<https://devfeed.tech/topics/security.md>), [Embedded Systems](<https://devfeed.tech/topics/embedded-systems.md>), [Android](<https://devfeed.tech/topics/android.md>), [Amazon Web Services](<https://devfeed.tech/topics/aws.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [ai-assisted-reverse-engineering](<https://devfeed.tech/tags/ai-assisted-reverse-engineering.md>), [android](<https://devfeed.tech/tags/android.md>), [assembly](<https://devfeed.tech/tags/assembly.md>), [aws](<https://devfeed.tech/tags/aws.md>), [china](<https://devfeed.tech/tags/china.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cve-2025-14299](<https://devfeed.tech/tags/cve-2025-14299.md>), [cve-2025-14300](<https://devfeed.tech/tags/cve-2025-14300.md>), [cve-2025-8065](<https://devfeed.tech/tags/cve-2025-8065.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [embedded-devices](<https://devfeed.tech/tags/embedded-devices.md>), [embedded-systems](<https://devfeed.tech/tags/embedded-systems.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [firmware](<https://devfeed.tech/tags/firmware.md>), [ghidra](<https://devfeed.tech/tags/ghidra.md>), [ghidramcp](<https://devfeed.tech/tags/ghidramcp.md>), [hardcoded-credentials](<https://devfeed.tech/tags/hardcoded-credentials.md>), [integer-overflow](<https://devfeed.tech/tags/integer-overflow.md>), [iot](<https://devfeed.tech/tags/iot.md>), [iot-security](<https://devfeed.tech/tags/iot-security.md>), [memory](<https://devfeed.tech/tags/memory.md>), [mips](<https://devfeed.tech/tags/mips.md>), [privacy](<https://devfeed.tech/tags/privacy.md>), [re](<https://devfeed.tech/tags/re.md>), [reverse-engineering](<https://devfeed.tech/tags/reverse-engineering.md>), [reversing](<https://devfeed.tech/tags/reversing.md>), [security](<https://devfeed.tech/tags/security.md>), [security-research](<https://devfeed.tech/tags/security-research.md>), [security-vulnerabilities](<https://devfeed.tech/tags/security-vulnerabilities.md>), [tapo-c200](<https://devfeed.tech/tags/tapo-c200.md>), [tapo-camera](<https://devfeed.tech/tags/tapo-camera.md>), [tp-link](<https://devfeed.tech/tags/tp-link.md>), [tplink](<https://devfeed.tech/tags/tplink.md>), [vulnerability-research](<https://devfeed.tech/tags/vulnerability-research.md>)

### AI overview

This article describes an AI-assisted reverse-engineering investigation of TP-Link Tapo C200 camera firmware. The author reports finding several security vulnerabilities affecting about 25,000 devices directly exposed on the internet, and discusses the tools and process used.

### Source excerpt

Hi friends and welcome to the last post for this year! Whenever someone asks me how to get started with reverse engineering, I always giv

## OSPF Protocol Analysis: Historical Router CPU Performance and Data Center Scaling Claims

DevFeed: [OSPF Protocol Analysis: Historical Router CPU Performance and Data Center Scaling Claims](<https://devfeed.tech/articles/must-read-ospf-protocol-analysis-rfc-1245-11017.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2024/05/worth-reading-ospf-protocol-analysis/>)

Published: 2024-05-16T06:40:00Z

Content type: opinion

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [networking](<https://devfeed.tech/topics/networking.md>), [Networks](<https://devfeed.tech/topics/networks.md>), [cpu](<https://devfeed.tech/topics/cpu.md>), [datacenter](<https://devfeed.tech/topics/datacenter.md>), [IS-IS](<https://devfeed.tech/topics/is-is.md>)

Tags: [architecture](<https://devfeed.tech/tags/architecture.md>), [cisco](<https://devfeed.tech/tags/cisco.md>), [cpu](<https://devfeed.tech/tags/cpu.md>), [data-center](<https://devfeed.tech/tags/data-center.md>), [intel](<https://devfeed.tech/tags/intel.md>), [is-is](<https://devfeed.tech/tags/is-is.md>), [mips](<https://devfeed.tech/tags/mips.md>), [model](<https://devfeed.tech/tags/model.md>), [ospf](<https://devfeed.tech/tags/ospf.md>), [protocol](<https://devfeed.tech/tags/protocol.md>), [router](<https://devfeed.tech/tags/router.md>), [time](<https://devfeed.tech/tags/time.md>)

### AI overview

This commentary reviews the Router CPU section of the 1991 OSPF Protocol Analysis (RFC 1245), including historical estimates for running Dijkstra's calculation and comparisons with modern CPU performance. It argues that CPU limitations alone do not justify replacing OSPF or IS-IS with EBGP for data center fabrics, while noting that implementation quality can matter.

### Source excerpt

Daniel Dib found the ancient OSPF Protocol Analysis (RFC 1245) that includes the Router CPU section. Please keep in mind the RFC was published in 1991 (35 years ago): Steve Deering presented results for the Dijkstra calculation in the "MOSPF meeting report" in [3]. Steve's calculation was done on a DEC 5000 (10 mips processor), using the Stanford internet as a model. His graphs are based on numbers of networks, not number of routers. However, if we extrapolate that the ratio of routers to networks remains the same, the time to run Dijkstra for 200 routers in Steve's implementation was around 15 milliseconds. Read more ...

## Cross-compiling with musl Toolchains

DevFeed: [Cross-compiling with musl Toolchains](<https://devfeed.tech/articles/cross-compiling-with-musl-toolchains-27450.md>)

Original publisher: [Read original article](<https://ariya.io/2020/06/cross-compiling-with-musl-toolchains/>)

Published: 2020-06-22T12:37:59Z

Content type: tutorial

Language: en

Sources: [Ariya Hidayat](<https://devfeed.tech/sources/ariya-hidayat.md>)

Topics: [Cross-Compilation](<https://devfeed.tech/topics/cross-compilation.md>), [toolchains](<https://devfeed.tech/topics/toolchains.md>), [Linux](<https://devfeed.tech/topics/linux.md>), [Zig](<https://devfeed.tech/topics/zig.md>), [C](<https://devfeed.tech/topics/c.md>), [qemu](<https://devfeed.tech/topics/qemu.md>), [ci](<https://devfeed.tech/topics/ci.md>), [make](<https://devfeed.tech/topics/make.md>)

Tags: [c](<https://devfeed.tech/tags/c.md>), [compiler](<https://devfeed.tech/tags/compiler.md>), [continuous-integration](<https://devfeed.tech/tags/continuous-integration.md>), [cross-compilation](<https://devfeed.tech/tags/cross-compilation.md>), [docker](<https://devfeed.tech/tags/docker.md>), [linux](<https://devfeed.tech/tags/linux.md>), [make](<https://devfeed.tech/tags/make.md>), [mips](<https://devfeed.tech/tags/mips.md>), [qemu](<https://devfeed.tech/tags/qemu.md>), [toolchains](<https://devfeed.tech/tags/toolchains.md>), [windows](<https://devfeed.tech/tags/windows.md>), [x86](<https://devfeed.tech/tags/x86.md>)

### AI overview

A tutorial on using static musl-based toolchains to cross-compile command-line programs for multiple targets, including MIPS and Windows, from a Linux x86-64 host. It also covers testing non-native binaries with QEMU and migrating FastLZ continuous integration to musl.cc.

### Source excerpt

When working on command-line utilities which can be useful for various platforms, from Windows on x86 to Linux on MIPS, the existence of a cross-compilation is highly attractive. A number of different binaries can be constructed conveniently from a single, typically powerful host system.

## Reverse-engineering a discarded cable modem to modify its MAC address

DevFeed: [Reverse-engineering a discarded cable modem to modify its MAC address](<https://devfeed.tech/articles/modem-cloning-for-fun-but-not-for-profit-22349.md>)

Original publisher: [Read original article](<https://yifan.lu/2017/04/02/modem-cloning-for-fun-but-not-for-profit/>)

Author: yifanlu

Published: 2017-04-02T07:00:00Z

Content type: article

Language: en

Sources: [Yifan Lu](<https://devfeed.tech/sources/yifan-lu.md>)

Topics: [Hardware](<https://devfeed.tech/topics/hardware.md>), [Reverse Engineering](<https://devfeed.tech/topics/reverse-engineering.md>), [Raspberry Pi](<https://devfeed.tech/topics/raspberry-pi.md>), [Shell](<https://devfeed.tech/topics/shell.md>)

Tags: [bpi](<https://devfeed.tech/tags/bpi.md>), [cryptography](<https://devfeed.tech/tags/cryptography.md>), [des](<https://devfeed.tech/tags/des.md>), [devices](<https://devfeed.tech/tags/devices.md>), [docsis](<https://devfeed.tech/tags/docsis.md>), [firmware](<https://devfeed.tech/tags/firmware.md>), [hacking](<https://devfeed.tech/tags/hacking.md>), [hardware](<https://devfeed.tech/tags/hardware.md>), [mips](<https://devfeed.tech/tags/mips.md>), [partition](<https://devfeed.tech/tags/partition.md>), [raspberry-pi](<https://devfeed.tech/tags/raspberry-pi.md>), [reverse-engineering](<https://devfeed.tech/tags/reverse-engineering.md>), [root](<https://devfeed.tech/tags/root.md>), [spi](<https://devfeed.tech/tags/spi.md>), [wifi](<https://devfeed.tech/tags/wifi.md>)

### AI overview

The author describes reverse-engineering a discarded cable modem that was still tied to another customer account. They accessed its UART root shell using a Raspberry Pi, dumped the flash memory, located the MAC address in an NVRAM partition, replaced it, and found that the modem still refused to establish a connection. The supplied text ends before the investigation is completed.

### Source excerpt

Recently, I stumbled upon an old cable modem sitting next to the dumpster. An neighbor just moved out and they threw away boxes of old junk. I was excited because the modem is much better than the one I currently use and has fancy features like built in 5GHz WiFi and DOCSIS 3.0 support. When I called my Internet service provider to activate it though, they told me that the modem was tied to another account likely because the neighbors did not deactivate the device before throwing it away. The technician doesn't have access to their account so I would have to either wait for it to be inactive or somehow find them and somehow convince them to help me set up the modem they threw away.

## Taming a wild nanomite-protected MIPS binary with symbolic execution: No Such Crackme

DevFeed: [Taming a wild nanomite-protected MIPS binary with symbolic execution: No Such Crackme](<https://devfeed.tech/articles/taming-a-wild-nanomite-protected-mips-binary-with-symbolic-execution-no-such-crackme-39697.md>)

Original publisher: [Read original article](<https://doar-e.github.io/blog/2014/10/11/taiming-a-wild-nanomite-protected-mips-binary-with-symbolic-execution-no-such-crackme/>)

Author: Axel "0vercl0k" Souchet & Emilien "tr4nce" Girault

Published: 2014-10-12T04:35:00Z

Content type: tutorial

Language: en

Sources: [Diary of a reverse-engineer](<https://devfeed.tech/sources/diary-of-a-reverse-engineer.md>)

Topics: [Assembly](<https://devfeed.tech/topics/assembly.md>), [Security](<https://devfeed.tech/topics/security.md>), [debug](<https://devfeed.tech/topics/debug.md>), [Linux](<https://devfeed.tech/topics/linux.md>)

Tags: [assembly](<https://devfeed.tech/tags/assembly.md>), [debugging](<https://devfeed.tech/tags/debugging.md>), [intel](<https://devfeed.tech/tags/intel.md>), [linux](<https://devfeed.tech/tags/linux.md>), [mips](<https://devfeed.tech/tags/mips.md>), [nosuchcon](<https://devfeed.tech/tags/nosuchcon.md>), [reverse-engineering](<https://devfeed.tech/tags/reverse-engineering.md>), [security](<https://devfeed.tech/tags/security.md>), [symbolic-execution](<https://devfeed.tech/tags/symbolic-execution.md>), [z3](<https://devfeed.tech/tags/z3.md>), [z3py](<https://devfeed.tech/tags/z3py.md>)

### AI overview

A technical walkthrough of a No Such Con security challenge involving a nanomite-protected MIPS binary. The article introduces the challenge, MIPS fundamentals, debugging setup, and symbolic-execution-based analysis, with two co-authored solution paths.

### Source excerpt

As last year, the French conference No Such Con returns for its second edition in Paris from the 19th of November until the 21th of November. And again, the brilliant Eloi Vanderbeken & his mates at Synacktiv put together a series of three security challenges especially for this occasion. Apparently, the ...