Tyrell Wellick · 2021-12-20 22:10
Hey lain, I have a little project practicing breaking embedded devices, i have a few devices here, mostly CCTV but some smart devices as well, they're all brandless garbage (adds to the flavor to be honest), I've already managed to break into each device's respective web interface but most of this stuff is pretty outdated which it why it uses trash like ActiveX, Silverlight, Flash, whatever.
First thing that would come to mind is compatibility layers like MoonLight/PipeLight for Silverlight and their equivalents for Flash and others, all of which of course have miserably failed to run since they also haven't been maintained for a long time.
Any pointers would be helpful and i would love to discuss this so let this thread be a discussion point for anything industrial/embedded security or anything outdated/ancient.
William Holtzer · 2021-12-21 19:24
You downgrade your software, OS, hardware, e.g. use older version, no? A thread had to die for this.
Neo · 2021-12-21 20:21
>Any pointers would be helpful
0xB16B00B5
Morpheus · 2021-12-21 21:15
>>18379
Come on, we're not kids here, a downgraded, bridged VM was the first thing to already come to mind, which of course have failed due to a thousand ways Windows+Firefox+Adobe...etc try to block their own execution, for instance, the moment you set up the correct time it all falls in the water, don't set up the time? no browser for you, and so on.
but that was just an anecdote to get an embedded system security thread going as i see no other thread for that at the time, no need to patronize.
Cat Mother · 2021-12-22 15:09
Just found the APIs that allow the some of the cameras to get their feeds, circumventing the need to screw with the locally hosted web apps they provide, some of them serve an outdated version of rtsp, cracked, the others? REST API serving jpeg-by-jpeg through a webserver at port 6688 behind the auth `camera:camera`, this got a little fun.
>>18383
I though i explained why that wouldn't work, a shame, halfchan transplants like you really brought the post quality way down, have fun.>>18383