Tag
安全研究人员详细讲述了提取并逆向分析 Eufy HomeBase 2 固件的过程，包括通过 SPI 读取闪存（并意外损坏芯片）、逆向 Wi-Fi 凭据生成算法，以及重刷 U-Boot 镜像绕过 UART 锁定获取 shell。
REA (Reverse Engineer Anything)，一个 MIT 开源的逆向工程项目，在三天内 Star 从 3 万暴涨至 12 万以上，可结合 adb 抓包、HAR/mitmproxy 流量分析、Binwalk/Ghidra 固件分析并借助 Claude Code 等重构设备通信协议，让用户自写客户端控制自家智能设备。
The author details how they decrypted Flume water monitor MQTT traffic by extracting a static 32-byte key from flash and using libhydrogen secretbox parameters, revealing that no session keys are involved despite noise key exchange code in firmware.
A detailed walkthrough of rooting a TP-Link TL-841N router via UART, dumping firmware through two methods, and uncovering hardcoded credentials that persist even after a factory reset, highlighting common IoT security weaknesses.
The user used Codex to analyze the official firmware of a portable player, found it is an embedded Linux based on MIPS architecture, and discovered through decompilation that an HTTP service might have a vulnerability.
A detailed account of the first complete reverse engineering, documentation, and emulation of Fisher-Price Pixter devices and their games, covering hardware analysis, ROM dumping, and software emulation.
This blog post is the first part of a series on rooting an Arlo VMC2040 security camera, covering hardware examination, UART discovery, and initial bootloader analysis.