IoT Hacking 101: Reverse Engineering The Xiaomi Ecosystem

on YouTube ↗52m

" summary

Shows concrete exploits and methods: uses UART/JTAG/SWD and cheap tools (Raspberry Pi, multimeter, hot‑air, USB microscope, eMMC/SPI readers) to dump firmware and read flash; builds an emulated Mi Home app to send arbitrary RPCs and push OTAs; finds hardcoded S3 crash uploads leaking account tokens, device IDs that are incremental, serial‑derived root passwords, camera images left on flash, and a firmware signing scheme that allows creating accepted fake firmwares. Many attacks produce root on live devices and remote account access.

AI-written summary · about

" chapters (8)

1. 0:00Introduction, Goal, Agenda of the talk
2. 5:38Motivation
3. 12:59IoT Devices from a Hacker's perspective
4. 22:34Hardware Reverse Engineering Methods
5. 28:26The XIAOMI Ecosystem
6. 32:27Reverse Engineering the Ecosystem
7. 42:38Findings
8. 48:44Summary

" related talks

• 18mE-Trojans: Ransomware, Tracking, DoS, and Data Leaks on the Xiaomi E-Scooter...Marco Casagrande, Daniele Antonioli, Mauro Conti, Riccardo Cestaro, Eleonora Losiouk · VehicleSec '26
• 28mThe IoT Hacker's ToolkitDavid Tomaschik · BSidesSF 2018
• 42mBreakMi: Reversing, Exploiting & Fixing Fitness Tracking EcosystemsM. Casagrande, D. Antonioli · Hardwear.io USA 2023
• 32mCommon Attacks on IoT DevicesChristina Quast · Open Source Summit Europe & ELC + OpenIoT Summit Europe 2018
• 30mCommSec D1 - How to Find and Exploit Bugs in IoT DevicesKelvin Wong · Hack In The Box Amsterdam 2018
• 40mIntroduction to IoT Reverse EngineeringV. Di Giampietro · Hack In Paris 2019
• 01h 46mTutorial: Introduction to Reverse EngineeringMike Anderson · Embedded Linux Conference + OpenIoT Summit North America 2018
• 49mxIoT Hacking Demonstrations & Strategies to Disappoint Bad ActorsBrian Contos · RSAC 2023