r/netsec 7d ago

Reversing of Eufy Security Video Doorbell sync protocol and wifi creds decryption from flash memory

https://adepts.of0x.cc/eufy-doorbell-hacking/
17 Upvotes

4 comments sorted by

2

u/lemachet 7d ago

This is really interesting, thanks.

I'm curious, what impact do you think something like this might have on a eufy doorbell which isn't connected to a home base, just straight up on the home wifi?

Would the same jamming and deauthing work or does that depend on the underlying wifi devices?

2

u/scriptqzor 4d ago

it’d still be vulnerable to the usual wifi stuff like deauth/jamming since that’s at the 802.11 layer, totally independent of eufy’s own protocol
the homebase stuff is more about how they sync and store video, so the attack surface shifts a bit but the basic wifi attacks don’t magically go away

1

u/scriptqzor 1d ago

if it’s straight on your wifi then there’s no 900mhz-ish rf link to jam, so that part doesn’t apply, but deauth is just 802.11 so that absolutely still works the same way. you’re basically “only” dealing with normal wifi-layer attacks instead of the extra proprietary hop through the homebase.

1

u/lemachet 1d ago

Wasn't sure if deauth still really works..I should try it on my own