The NAS Nobody Patched - From Unauthenticated RCE to Network Proxy via WD MyCloud
In this blog, I’ll walk through how an unauthenticated command injection in a WD MyCloud NAS gave me a reverse shell as root, how I bootstrapped a persistent SSH backdoor on a device that didn’t even have SSH running, and how I turned that NAS into a covert SOCKS proxy with a single SSH flag. Prologue “There is no cloud. It’s just someone else’s computer.” - Common saying in information security ...