Shadow: Dummy folders, an obvious overflow, and a ROP chain
Summary
Analysis of Shadow: Dummy folders, an obvious overflow, and a ROP chain explains a Kindle MTP exploit chain that leverages an uninitialized timestring leak and a stack-based overflow to execute arbitrary code. The write-up details the exploitation steps, from memory leaks to GOT/PIE calculations and a final system() call, highlighting security implications for firmware and device readers. It also discusses the challenges of ASLR/PIE and how attackers can bypass them within the Kindle MTP subsystem.