Closed duchenpaul closed 4 years ago
with open('dump_enc.bin', 'rb') as f:
data = f.read()
from msmart.security import security
_security = security()
_security.aes_decrypt(data[48:176])
then, you can decrypt data, but this is discover broadcast data. try to traffic control data, that is tcp data (port is 6444)
how did you find this, amazing! brute attack?
This is what i got so far, need help to decrypt the rest, and I also need help to guide me sniffing the packets with the wireshark
8370
, that is new midea protocol .问下怎么用tcpdump 抓包 我昨天抓了半天没抓到
I am currently trying to rev engineering midea water boiler, and I have a question for you I saw you hard coded keys in
security.py
, may i ask where did you get it from,attached file is the data I dumped from
sock.recvfrom(512)
in cli.py, I'd be appreciate if you can help medump_enc.zip