Dev gets full root on all his Sonos speakers with AI agents, pre-auth RCE chain verified
doodlestein · x · 2026-11-04
doodlestein's 'FrankenSonos' project is nearly done: full root on all his Sonos devices, with plans to replace firmware. A shared screenshot details a verified pre-auth RCE chain via SetAVTransportURI on port 1400 — an unvalidated TOC entry length overflows a 4097B buffer, overwrites a handler pointer, and reaches controlled code execution using a fake vtable. It works because the binary is non-PIE, has no stack canary, and needs no info leak. His key lesson: the big breakthroughs came from manually prodding the agents into specific actions — even uncensored models couldn't figure the chain out on their own.
Related event: Dev roots Sonos speakers via AI agent, ready to flash custom firmware(2 posts)→
More from coding & agent
- Revolut cuts AI coding costs 10x by dropping Claude for self-hosted models — beasthunterr69 · 2026-11-04
- Fitting the OODA Loop to AI Agents: A Practical Framework for Iterative Optimization — DanielLockyer · 2026-11-04
- Mistral Large 4 tested on real Django CVE: 133 agents find, prove and patch the bug — MistralAI · 2026-11-04
- Dev calls to phase out C++ as tangled mess; formal specs key to proving AI code correct — thomasahle · 2026-11-04
- SOMA lets Claude Code do CAD: 1,000+ users, full bookshelf-to-workshop-drawing tutorial — Lazar988 · 2026-11-04
- We built MCP, API and CLI integrations for AI agents — here's how they compare — hottown · 2026-11-04