RAU6 Dokuwiki

User Tools

Site Tools

Trace: • Hacking the Silvercrest (Lidl) Smart Home Gateway
No ACL setup yet! Denying access to everyone.
en:edu:zmitac:s2:aih:projekt:studenci:hackingzigbee

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
en:edu:zmitac:s2:aih:projekt:studenci:hackingzigbee [2022/05/06 17:36] – First draft, no images yet mkuchtaen:edu:zmitac:s2:aih:projekt:studenci:hackingzigbee [2022/05/08 21:39] (current) – mkuchta
Line 2: Line 2:
  
 ===== 1. Connecting the device ===== ===== 1. Connecting the device =====
 +
 +<board_image>
  
 Main components are detailed here: Main components are detailed here:
Line 20: Line 22:
   Baud Rate: 38400 bps   Baud Rate: 38400 bps
   Other: 8N1 (8-bit, No Parity, 1 stop bit)   Other: 8N1 (8-bit, No Parity, 1 stop bit)
 +  
 +<note warning>Do not connect Vcc as it might result in damage to the board, only connect Rx, Tx and GND</note>
      
 To gain access to the Linux console we must connect the 3.3V TTL Serial port to J1. The console Is protected by a password and will be dealt with in a moment. To gain access to the Linux console we must connect the 3.3V TTL Serial port to J1. The console Is protected by a password and will be dealt with in a moment.
Line 25: Line 29:
 Our setup looked like this: Our setup looked like this:
  
 +<our_setup_image>
      
 ===== 2. Getting root access ===== ===== 2. Getting root access =====
Line 32: Line 37:
  
 === a) Connecting to the console using PuTTy === === a) Connecting to the console using PuTTy ===
 +
 +<putty_configuration_image>
  
 First we connect the Gateway to a PC using USB to Serial adapter. The connection configuration is as follows:  First we connect the Gateway to a PC using USB to Serial adapter. The connection configuration is as follows: 
Line 58: Line 65:
 0x000000420000-0x000001000000 : "jffs2-fs" 0x000000420000-0x000001000000 : "jffs2-fs"
 </code> </code>
 +
 +<example_RealTek_console_output_image>
  
 === c) Reading the key-encryption-key (KEK) === === c) Reading the key-encryption-key (KEK) ===
Line 86: Line 95:
  
 Start the python script and, when prompted, paste the lines obtained above to reveal your AUSKEY and root password (we only need password). Start the python script and, when prompted, paste the lines obtained above to reveal your AUSKEY and root password (we only need password).
- + 
 +<example_decoding_run_results_image>  
 Congratulations, if everything worked correctly you are now in possession of the root password to the gateway. Congratulations, if everything worked correctly you are now in possession of the root password to the gateway.
  
Line 94: Line 105:
  
 ===== 3. Setting up device for Home Assistant control ===== ===== 3. Setting up device for Home Assistant control =====
 +
 +<ifconfig_output_image>
  
 Before starting, ensure your device is on your local network. If you're unsure of its IP address, issue an ifconfig command on the serial console. We will use SSH to send files between PC and gateway. Before starting, ensure your device is on your local network. If you're unsure of its IP address, issue an ifconfig command on the serial console. We will use SSH to send files between PC and gateway.
Line 152: Line 165:
  
 To connect via Ethernet on our university we set the following network settings in VirtualBox To connect via Ethernet on our university we set the following network settings in VirtualBox
 +
 +<VirtualBox_settings_image>
  
 After entering the correct IP in the browser we connected to the Home Assistant: After entering the correct IP in the browser we connected to the Home Assistant:
 +
 +<Home_Assistant_dashboard_image>
  
 ===== 5. Using Home Assistant's Zigbee Home Automation to integrate the device ===== ===== 5. Using Home Assistant's Zigbee Home Automation to integrate the device =====
Line 164: Line 181:
 ===== All done! ===== ===== All done! =====
  
 +<blue_bulb_image> 
 +<green_bulb_image> 
 +<yellow_bulb_image>
en/edu/zmitac/s2/aih/projekt/studenci/hackingzigbee.1651851361.txt.gz · Last modified: by mkuchta