Please don't let me be the only person that is actually looking into the potential glibc exploit. I assume there is someone on this site that is more familiar with all of the required components and could test all of this much faster than I could. Nonetheless, I will continue to play.
I set up Apache on a local machine, and I'm pretty sure I've got it running the python script from the git proof-of-concept code. I think my next step is to call wget (I think, because internally it uses the glibc function getaddrinfo) from a linux machine (perhaps wii u linux if that's still a thing?) and see what happens when it tries to access the apache server. If the client crashes or reports a segmentation fault, that would indicate the exploit at least has potential.
I'm unclear if the server can be a simple http server or if it needs to be an actual DNS type server. I'm neither a web developer nor a "network guy".
Also, if the WiiU binaries were not compiled with glibc, I don't expect any of this to work.
I set up Apache on a local machine, and I'm pretty sure I've got it running the python script from the git proof-of-concept code. I think my next step is to call wget (I think, because internally it uses the glibc function getaddrinfo) from a linux machine (perhaps wii u linux if that's still a thing?) and see what happens when it tries to access the apache server. If the client crashes or reports a segmentation fault, that would indicate the exploit at least has potential.
I'm unclear if the server can be a simple http server or if it needs to be an actual DNS type server. I'm neither a web developer nor a "network guy".
Also, if the WiiU binaries were not compiled with glibc, I don't expect any of this to work.
(
