Hacking a WiFi Lamp

on YouTube ↗15m

" summary

Device is opened, PCB identifies ESP8285 with 1MB flash and 26 MHz crystal, powered at ~70 mA. Serial pins are wired, boot pins toggled with buttons, oscilloscope reveals nonstandard baud so used setserial at ~76,000 bps and a USB serial adapter to get console output. Firmware is dumped with esptool, analyzed for null-padded SSID (>=5) and password (>=9) patterns, script on GitHub finds the correct Wi‑Fi credentials and a MAC that matches Google location, so the extraction works.

AI-written summary · about

" chapters (10)

1. 0:00Introduction
2. 1:06Wi-Fi lamps overview
3. 2:13Hardware identification
4. 3:40Powering and Wi-Fi setup
5. 5:03Serial communication setup
6. 7:15Firmware extraction
7. 8:40Entering programming mode
8. 10:05Analyzing firmware
9. 12:51Conclusions
10. 13:59Q&A

" related talks

• 30mCommSec D1 - How to Find and Exploit Bugs in IoT DevicesKelvin Wong · Hack In The Box Amsterdam 2018
• 26mA Lightbulb Worm?Colin O'Flynn · Black Hat USA 2016
• 24mLens Of Deceit: Unmasking And Altering Camera Sunglasses' FootageDaniel Schwendner · Nullcon Goa 2023
• 13mUnmasking the Black Box: Eduardo Montovani on Wi-Fi Security, AI, and Affordable HackingEduardo Montovani · Hardwear.io USA 2026
• 41mJust Another Live Hacking - How Insecure Is Secure Enough?Philipp Kalweit · code.talks 2017
• 49mReverse Engineering a Bluetooth LightbulbJesse Phelps · NDC Oslo 2018
• 52mReverse Engineering a Bluetooth LightbulbJesse Phelps · NDC London 2019
• 52mIoT Hacking 101: Reverse Engineering The Xiaomi EcosystemDennis Giese · Nullcon Goa 2023