first thesis start

2026-04-02 22:40:36 +02:00
parent 8153dc283c
commit 0afe49053c
9 changed files with 540 additions and 0 deletions
--- a/documentation/thesis/appendix.tex
+++ b/documentation/thesis/appendix.tex
@@ -0,0 +1,74 @@
+%-----------------------------------------------------------------------
+\chapter{Appendix}
+\label{ch:appendix}
+%-----------------------------------------------------------------------
+The following listing shows example data accessible via the \ac{HTTP} request shown in Listing~\ref{lst:userid-request}.
+This data is can be gathered by an adversary through an \ac{URL}-manipulation attack on the \texttt{userID} parameter.\\[0.2cm]
+\begin{lstlisting}[language=json, caption={Example data gathered through the URL-manipulation attack on the Victure VD300 backend using the request shown in Listing~\ref{lst:userid-request}.}, label={lst:userid_url}]
+{
+    "light": [],
+    "doorbell": [
+        {
+        "nvrID": 0,
+        "devStatus": 1,
+        "updateVersion": false,
+        "bellVoice": "",
+        "iotType": 1,
+        "deviceImg": null,
+        "deviceName": <redacted>,
+        "userID": <redacted>,
+        "closePush": 0,
+        "devUid": "",
+        "nvrNum": "",
+        "cloudType": 1,
+        "deviceP2P": "ppcs",
+        "isBindingTY": "D",
+        "radius": "-1",
+        "relayLicenseID": "",
+        "deviceUUID": <UUID redacted>,
+        "longitude": "200",
+        "hasAlertMsg": true,
+        "deviceTypeName": "https://meari-eu.oss-eu-central-1.aliyuncs.com/deviceInfo/bell7s.png",
+        "timeZone": "UTC01:00",
+        "snNum": <serial/license number redacted>,
+        "updatePersion": "N",
+        "devTypeID": 4,
+        "cloudSupport": 0,
+        "userAccount": "<email-address redacted>,
+        "voicemail": <URLs to voice recordings redacted>
+        "trialCloud": 0,
+        "region": "Europe/Berlin",
+        "nvrKey": "",
+        "userFlag": "Y",
+        "latitude": "200",
+        "p2pInit": "<redacted>",
+        "deviceVersionID": "ppstrong-b5-apeman-3.1.2.20200324",
+        "sleep": "off",
+        "capability": "{\"ver\":21,\"cat\":\"bell\",\"caps\":{\"pdt\":13,\"dnm\":1,\"cs2\":113,\"alp\":1,\"cst\":1,\"pwm\":1,\"rng\":3,\"vtk\":4,\"nst\":1,\"hms\":2,\"sd\":1,\"spp\":1,\"cse\":1,\"ecs\":0,\"cct\":0,\"esd\":50,\"pir\":4,\"btl\":0,\"ota\":1,\"ovc\":1,\"wkp\":1}}",
+        "firmID": 8,
+        "nvrUUID": "",
+        "wifiName": "",
+        "cloudstatus": 4,
+        "asFriend": false,
+        "protocolVersion": 4,
+        "timeZone2": "CET01:00:00CEST02:00:00,M3.5.0,M10.5.0",
+        "awsThingName": "",
+        "awsCloudCompat": 1,
+        "shareAccessSign": 0,
+        "hostKey": "<redacted>",
+        "hostKey1": "",
+        "deviceID": <redacted>,
+        "tp": "<redacted>",
+        "nvrPort": -1,
+        "p2pInitApp": "<redacted>:WeEye2ppStronGer"
+        }
+    ],
+    "resultCode": "1001",
+    "nvr": [],
+    "fourthGeneration": [],
+    "ipc": [],
+    "snap": [],
+    "voiceBell": [],
+    "chime": []
+    }
+\end{lstlisting}