Next time you find yourself reverse engineering a weird protocol - use ImHex. You can literally define patterns (in a C++ / Rust -like language) so that your binary file gets highlighted and processed.<p>I can't recommend it enough - it's perfect for the job and it's free and Open Source.<p><a href="https://imhex.werwolv.net/" rel="nofollow">https://imhex.werwolv.net/</a>
> Sniffing the traffic from the device showed that it was connecting out to tcp.goodwe-power.com:200001<p>Is 200001 the right port number? Very good read anyways.
He mentioned having a private, firewalled VLAN. Is there anywhere to get more info or example setups for the beginner homelabber? I've got Unifi gear, I poke around the interface. I realize I can make new VLANs, but what makes them isolated/private?<p>Also I see his complaints about half assed security but I actually am kind of relieved. If the security was implemented well we wouldn't be able to make our own man-in-the-middle prometheus exporters!
> This exercise has reinforced my prejudice that IoT devices are horribly insecure.<p>Generally I agree with this assessment for home IoT devices, but I’m curious does this hold true for industrial or transportation? Can someone point me to blogs or studies on Chinese EV security?
Any kind soul want to teach me how<p>echo -e 'admin\nadmin\nspi rd 0 2097152\n' | nc 192.168.18.17 23 | tee ~/download/hk1000.spi2.img<p>downloads the firmware?
This reads similar to an intercom I am still in the process of trying to write a client for: <a href="https://grdw.nl/2023/01/28/my-intercom-part-1.html" rel="nofollow">https://grdw.nl/2023/01/28/my-intercom-part-1.html</a> . Seeing nmap, wireshark, poor security. It definitely feels the same.
You should check out Recessim: <a href="https://recessim.com/" rel="nofollow">https://recessim.com/</a><p>I think you would like the community.
MIPS? Wow. Would not have expected that! I guess they went as low budget as possible.<p>That key tho. /facepalm/ They REALLY don't care about security. Seriously, at least get PSA level 1 FFS and use TLS. But I doubt a cheap-ass MIPS has the horsepower for a handshake.