dgiese/dustcloud
Fork: 257 Star: 2220 (更新于 2024-12-19 20:01:00)
license: GPL-3.0
Language: C .
Xiaomi Smart Home Device Reverse Engineering and Hacking
最后发布版本: 0.3 ( 2019-04-08 16:02:42)
Welcome to our (outdated) repository for reverse engineering and rooting of the Xiaomi Smart Home Devices. We provide you methods how to root your device without opening it or breaking the warranty seal (on your own risk).
** This repository is outdated for most usecases! It was meant as a reference cloud emulation for Xiaomi devices. For vacuum robots, it has been now integrated in Valetudo **
You find more information about my projects here: My Website Technical information and teardowns about robots can be found here: Robotinfo
Outdated info
The (again outdated) documentation of the devices (photos, datasheets, uart logs, etc) was moved to a new repo dustcloud-documentation
Please take a look at the (outdated) Dustcloud Wiki, which also contains instructions on how to root and flash your device: (https://github.com/dgiese/dustcloud/wiki)
Talks
The content of the presentation differs from event to event. If you want to get an overview of the topics I am talking about, you find the overview here: Overview my talks
[Sep 2018] I was invited by BeyondSecurity to give a talk at BeVX 2018 in Hong Kong: BeVX 2018 slides
[Aug 2018] I have given two talks at DEFCON26 (101-track and IoT-Village), both are recorded:
"Having fun with IoT: Reverse Engineering and Hacking of Xiaomi IoT Devices": DEFCON26 101-track Slides
"How-to modify ARM Cortex-M based firmware: A step-by-step approach for Xiaomi devices": DEFCON26 IoT Village Slides
[Jul 2018] I was on tour in Taiwan@HITCON14 Community: HITCON14 CMT slides
[Feb 2018] We had a talk at Recon BRX 2018. The presentation can be found here
[Dec 2017] Our talk at 34C3: Recording hosted at media.ccc.de, updated PDF.
Recommended resources / links
Valetudo https://valetudo.cloud/
More information about my projects and talks https://dontvacuum.me
Technical information and teardowns about robots https://robotinfo.dev
Python-miio: Python library & console tool for controlling Xiaomi smart appliances. https://github.com/rytilahti/python-miio
Communication for the community
Yes, there is a telegram channel (check the pinned message).
In theory you can contact me via twitter.
Please inform yourself in the forums and with the howtos before you post in this channel. Otherwise your message is very likely to be ignored.
Contact
- Dennis Giese <dennis[at]dontvacuum.me> / twitter
Press information
IoT will very likely become a very important topic in the future. If you like to know more about IoT security, you can visit me at Northeastern University in Boston, US. Please contact me.
Acknowledgements:
Prof. Matthias Hollick at Secure Mobile Networking Lab (SEEMOO)
Prof. Guevara Noubir (CCIS, Northeastern University)
Ilfak Guilfanov / Hex-Rays: for their great tool "IDA Pro"
Media coverage:
- https://dontvacuum.me/media.html
- https://www.golem.de/news/reverse-engineering-das-xiaomi-oekosystem-vom-hersteller-befreien-1802-132878.html
- https://www.kaspersky.com/blog/xiaomi-mi-robot-hacked/12567/
- https://www.golem.de/news/xiaomi-mit-einem-stueck-alufolie-autonome-staubsauger-rooten-1712-131883.html
- http://www.zeit.de/digital/datenschutz/2017-12/34c3-hack-staubsauger-iot
- https://hackaday.com/2017/12/27/34c3-the-first-day-is-a-doozy/
- https://m.heise.de/newsticker/meldung/34C3-Vernetzter-Staubsauger-Roboter-aus-China-gehackt-3928360.html
- https://www.notebookcheck.com/Security-Staubsauger-sammelt-neben-Staub-auch-Daten-ueber-die-Wohnung.275668.0.html
- https://derstandard.at/2000071134392/Sicherheitsforscher-hacken-Staubsaugerroboter-und-finden-Bedenkliches
主题(topics):
hacking, iot, root, vacuum, vacuum-cleaner, xiaomi, xiaomi-smart
dgiese/dustcloud同语言 C最近更新仓库
2024-12-21 10:48:05 EdgeTX/edgetx
2024-12-15 21:46:59 arendst/Tasmota
2024-12-15 21:29:56 bol-van/zapret
2024-12-13 20:23:33 XITRIX/Moonlight-Switch
2024-12-11 15:17:04 curl/curl
2024-12-07 10:42:25 libsdl-org/SDL