Hacking a Smart Camera: IoT Hacking With Andrew Bellini (Part 2)

In Part 2 of our smart camera hacking series, follow along as TCM Content Creator Andrew Bellini extracts firmware from the camera's board. In Part 3, he'll unpack the firmware and look for the password. Be sure to subscribe to our channel as to not miss any future updates from Andrew!

Ideas on smart devices we should hack in future shorts? Let us know!

#iot #shorts #hardwarehacking #iotsecurity

📱Social Media📱
___________________________________________

💸Donate💸
___________________________________________
Like the channel? Please consider supporting me on Patreon:

Hacker Books:

My Build:

My Recording Equipment:

[zakariatalukdar]

The kind of stuff you Figure out after case study. And here they upload these knowledge readily available. Hats off to TCM!

[Quizack]

That chip clip was incredible. I mean, the whole thing was cool, but it's such a beautifully simple solution.

[muhammadabdulaziz]

kinda flattered the algorithm thinks i’m clever enough to understand stuff like this

[websitelaunchcourse]

Man... I love This!!. I have Been Electronics Tech and Hobbyist Since 1991. This still gets me fired up!!

[erik-fisher]

Cool video! Looking forward to the follow-up!

[treelineresearch]

If you plug the password hash from one of these cams into a search engine often you'll find someone else that already cracked it. Worked for me on an onvif cam years ago, and it works on the hash in the vid.

[jc]

Never hard code your secrets, my boys

[StillWrenchin]

Back in the day, I used a Willem board with countless adapters for multiple chips and held my breath during the programming processes as WinXP 32bit seemed to enjoy giving you the middle finger anytime you needed to burn a chip.

[dipereira]

Thats the kind of content people should be paying for!

Thx for sharing your knowledge 👍

[InsipidProgrammer]

That was incredibly concise and informative. Nice job.

[theodote_]

Hi! How do you isolate the ROM chip from the rest of the circuit? I always assumed that as soon as you connect the clip-on probe and power the flash chip from the programmer, the MCU gets powered up too and takes over the SPI bus, rendering the programmer helpless. I've read that desoldering or cutting traces on the PCB is the only way to make it work - what approach did you go with? Thanks in advance!

[NuffMan_]

You may want to do 3v mod to that flasher.. yes it supply the chip with 3v vcc but the datalines are 5v!

[lexjansenio]

This is the stuff I want to see on my feed! I need to do this with my Roku cameras so I can create an NVR to store on my raspberry pi NAS. I have found my people

[KTPDAILY]

This is one of the most useful videos I've ever watched. Even though I don't plan on doing this but now I know how to look beyond what I already know. Definitely your newest fan.

[__Obscure__]

Just to clarify, isn't the term "Flash ROM" an oxymoron? If it's Flash memory, then it can be written to. So it's not ROM. It could only be a ROM if it can't be written to.

[spicethecat]

WOW…If I understood what you were talking about I’d say WOWEE!!!!

[fordcrews]

You sure make hooking the clip to the chip look easy. They generally don't just clip and stay while you wangle around the board trying to get it plugged into a usb port.

[comosaycomosah]

Oh awesome man id love to see more stuff like this!

[TheKvc]

Amazing, you just gave me idea to add a password on my firmware... Thankyou. You are king❤❤❤❤

[highvoltagev]

How were you able to ge the clip onto the ROM chip first try. So many time it falls off for me or the legs aren't making contact.