Hacker News Reader

curl has a very handy --resolve option for that:

curl --resolve 'panel:443:192.168.10.5' -k -X GET https://panel/rest/configuration

Hostname can be set to * in recent versions of curl, it's even more handy:

curl --resolve '*:443:192.168.10.5' -k -X GET https://panel/rest/configuration

curl has a handy --resolve option for telling it how to resolve certain names. Useful when you want to connect to something that thinks it's foo.bar.com and send the right tls/host, but DNS doesn't have it correct yet

Wow, so completely trivial to get root RCE on any of these devices, brutal, all you need is an IP address. That’s as bad as vulnerabilities get.

Insane that this has been known since 2018, and not patched - these devices are from ~2011-2015, far from ancient. I’ll personally never, ever buy anything from Western Digital again.

Either it's advertised through mdns or you add "panel" to your hosts file with the right ip