RouterOS is the operating system used by MikroTik routers. These routers run the gamut from large ISP routers to tiny home routers and they are deployed all around the world. RouterOS also happens to be very fun, and potentially profitable, to bug hunt in. But attacking new and seemingly complicated systems for the first time can seem daunting. Where do you even start?Well, ask no more, because this talk will get you started bug hunting in RouterOS. We'll analyze the attack surface. Discover the system layout. Learn how to break out of the sandbox to use GDB. Load binaries in Ghidra. Analyze a couple of previously disclosed vulnerabilities. And, finally, wildly speculate about where new bugs might be found.By the end of this talk, you should be well on your way to finding your own vulnerabilities in RouterOS.