https://Gill-Singh-A.github.io/tags/cve-2016-10108/ Recent content in Cve-2016-10108 on Gill.Singh.A Hugo en-us Fri, 07 Aug 2026 13:00:00 +0530 https://Gill-Singh-A.github.io/p/the-nas-nobody-patched-from-unauthenticated-rce-to-network-proxy-via-wd-mycloud/ Fri, 07 Aug 2026 13:00:00 +0530 https://Gill-Singh-A.github.io/p/the-nas-nobody-patched-from-unauthenticated-rce-to-network-proxy-via-wd-mycloud/ In this blog, I walk through how an unauthenticated command injection in a WD MyCloud NAS gave me a reverse shell as root, how I bootstrapped a persistent SSH backdoor on a device that didn't even have SSH running, and how I turned that NAS into a covert SOCKS proxy with a single SSH flag.