TLDR InfoSec · STRATEGIES & TACTICS
BREAKING ICHANO ATHOME'S NETWORK ENCRYPTION WITH FRIDA
Summary from the TLDR InfoSec newsletter
iChano AtHome Camera is a pair of applications that enable smartphones and computers to be used as smart cameras. The applications use a custom encryption protocol instead of HTTPS. This author first attempted to crack the encryption protocol using static reverse engineering but discovered that it was using Blowfish in ECB mode. Decryption with this method didn't work, so the author utilized a Frida script to decrypt messages and hijack cameras on the network.