All ideasMore in Work
Work

GPT-5.6 Sol found three pre-auth bugs in MikroTik router software

A security researcher pointed GPT-5.6 Sol at MikroTik RouterOS 7.23.3 with a goal prompt to find a path from no login to remote code execution. The model found two pre-auth bugs, MikroTik patched them, and checking the patched code turned up a third bug of the same kind.

How it works

  1. Downloads RouterOS 7.23.3 packages and adapts a goal prompt used in an earlier bug hunt
  2. DeepSeek makes little headway, then GPT-5.6 Sol takes over the search
  3. It finds a DHCP relay buffer overflow and a WebFig auth bypass that can lead to remote code execution
  4. MikroTik patches them in 7.24.1
  5. Checking the patched code turns up another pre-auth bug through a WebFig session takeover

Why it’s worth knowing

The model did not just flag suspicious code. It worked out full paths from no login at all to running code on the router, more than once.

Where it’s from

Summarized from a public post on sijisu.eu. See the original ↗

Upgraded prompt

A ready-to-use prompt for this idea, built from research on what makes AI agents do the job right: who the AI should be, the exact steps, and a check to make sure it was done the way you wanted.

1Who the AI should be
2The prompt, with the steps
3The check when it’s done
Upgraded prompts are coming soon.

Try next

WorkFind me 48 school-district customers and draft each pitch — one replied, booked and paidWorkA contractor talks measurements into his phone and QuickBooks sends the estimate in 45 secondsWorkA review engine asked his past customers for reviews and got three five star ones on day oneWorkHe told the AI to keep going. It emailed five researchers from his account.

Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.