Skip to main content

Override control Phill*ps Smart Led

Detail
Smart LED

Beberapa waktu lalu iseng membeli Phill*ps Smart LED yang bisa dikontrol menggunakan aplikasi Wiz di HP. Pairing awalnya lumayan mudah dan langsung bisa konek dengan wifi router yang saya gunakan. Beberapa hari terpasang saya kok merasa penasaran dengan cara dia berkomunikasi. Iseng - iseng saya sadap aplikasi Wiznya menggunakan HTTPCanary.



Terdapat koneksi UDP ke IP 192.168.88.223 dengan port 38899, perintah yang dikirimkan sebagai berikut
Yang atas query request, sedangkan yang bawah response dari lampu
Setelah saya tahu perintah yang digunakan untuk mengendalikan lampu ini, saya mencoba menggunakan netcat untuk membuat koneksi UDP ke lampu. Perintah yang saya pakai adalah sebagai berikut

 nc -v -u  192.168.88.223 38899

Setelah terhubung, akan memunculkan respon seperti ini


Karena ini udp, saya langsung copas perintah yang dikirimkan tadi ke terminal, dan hasilnya perintah tersebut langsung dieksekusi tanpa ada otorisasi lebih lanjut. Anda bisa mengubah value dari sceneId untuk mengganti nyala lampu. Terdapat beberapa perintah lainya, namun pada intinya sama. Hasilnya ada seperti di video berikut ini.



Kesimpulan saya, jika ada orang iseng yang berhasil bobol wifi saya, dia bisa bebas mengendalikan lampu ini karena tidak adanya otorisasi yang dipakai oleh lampu ini. Saran saya jika anda menggunakan lampu ini, jaringanya harus dibedakan dengan jaringan wifi publik yang anda gunakan .
Labels:

Comments

Post a Comment

Popular posts from this blog

HackRF Mayhem Failed to Update - M0 Guru Meditation Hard

I was on Mayhem Portapack v2.0.1 and want to upgrade to the latest stable release v2.1.0. The update went okay using the web upgrade https://hackrf.app/. But then I saw the latest nightly update and want to try it, since it has many new tools that are not yet included in the stable release. But then the update failed :( Disclaimer: I didn't take any photos of the errors, since I was focused on googling the solution. So the error was " Bad Firmware or Failed W/R error" during the upgrade process, and it was stuck. So I had to restart the device, and it was booting to the Mayhem menu, but on the bottom left, which should show the current firmware version, it was showing a  "FLASH ERR"  message. I think I should go back to the stable release, but I can't. Every time I want to flash the stable release version, the portapack will shows an error M0 Guru Meditation - Hard Fault.  There's an issue that was closed on the Mayhem GIT repo that has the same issue a...
Post a Comment
Read More...

Macintosh Classic II Brightness Issue

The Problem My Macintosh Classic II suffers from an issue where the display CRT goes dim after a few minutes on a cold boot. Every time it happens, I need to crank up the cut-off and brightness  pot behind the machine to show the image. The Analyze At first, I thought it must be the brightness issue, so I searched for the Macintosh Classic analog board schematic to check the brightness line. I found the schematic from Bomarc, and the schematic is suitable with my board, since there are two analog board versions.  I started to suspect the resistors and potentiometer on the brightness line. This Macintosh version has software-controlled brightness, so the analog board will get a 22.25 kHz square wave PBM signal from the logic board to control the brightness. I checked and replaced some resistors and cleaned the potentiometer, but nothing seems to work. The signal is there, and no sign of degradation that makes the screen dim after a few minutes.  Brightness Line So I suspec...
Post a Comment
Read More...

Fiberhome HG6145D2 Superadmin Login

Maybe some of you are using In**ehome ISP as your home internet and found out that using the provided login has minimal options to configure the router: user  user1234 I know it’s not the admin login, and that must be a full-control user account that can be used to control this router fully. So I searched and found some posts on the net and most of them are telling me to use: admin %0|F?H@f!berhO3e I tested it and it doesn’t work! But there’s more to it, you need to reset the router first by pressing the reset button on the side of the router. Then after resetting, you can log in using the admin superaccount! But keep in mind, never use the user log in again, because it will lock the super admin login until you reset the router again. Cheers 🍺
Post a Comment
Read More...