External Understanding: Dissecting APIs inside of IoT devices (Part 1)

May 18, 2023

Introduction

As the world of IoT evolves, so does the security within this realm, like most fields. One of the more popular brands for being quite hidden from the public is Apple. Despite Apple having their systems compromised hundreds of times, protocols reversed, and source code leaked, they still seem to be much more frustrating to work with due to the limited knowledge of their custom implementations of specific protocols. In this article, we will discuss the internals of IoT devices, specifically looking at Apple TV. For context, the Apple TV is a device manufactured by Apple as a smart home hub that allows you to easily play movies, shows, or any form of media while also being Apple to start interactive screen share/mirroring sessions. Once a brief introduction is done on how Apple TV works, we will then go into exploring the protocols, services, and other various systems that the device implements then forward into accessing rather than “abusing “ the endpoints to those services. For this article, you will need quite a few things: Wireshark so we can better understand the protocols; the go compiler so we can automate some of these processes; base Linux tools like hd (hex-dump ), cURL, and the avahi-browse tool; finally, nmap so we can better scan and figure out what this device has on it. We will use these tools to better inspect protocols, understand files, work with requests, and build a program to automate....

Read the rest of this story with a free account.

Already have an account? Sign in

Subscribe
Notify of
guest

This site uses Akismet to reduce spam. Learn how your comment data is processed.

0 Comments
Newest
Oldest Most Voted
© HAKIN9 MEDIA SP. Z O.O. SP. K. 2023