%-----------------------------------------------------------------------
\chapter{Appendix}
\label{ch:appendix}
%-----------------------------------------------------------------------
The following listing shows example data accessible via the \ac{HTTP} request shown in Listing~\ref{lst:userid-request}.
This data is can be gathered by an adversary through an \ac{URL}-manipulation attack on the \texttt{userID} parameter.\\[0.2cm]
\begin{lstlisting}[language=json, caption={Example data gathered through the URL-manipulation attack on the Victure VD300 backend using the request shown in Listing~\ref{lst:userid-request}.}, label={lst:userid_url}]
{
    "light": [],
    "doorbell": [
        {
        "nvrID": 0,
        "devStatus": 1,
        "updateVersion": false,
        "bellVoice": "",
        "iotType": 1,
        "deviceImg": null,
        "deviceName": <redacted>,
        "userID": <redacted>,
        "closePush": 0,
        "devUid": "",
        "nvrNum": "",
        "cloudType": 1,
        "deviceP2P": "ppcs",
        "isBindingTY": "D",
        "radius": "-1",
        "relayLicenseID": "",
        "deviceUUID": <UUID redacted>,
        "longitude": "200",
        "hasAlertMsg": true,
        "deviceTypeName": "https://meari-eu.oss-eu-central-1.aliyuncs.com/deviceInfo/bell7s.png",
        "timeZone": "UTC01:00",
        "snNum": <serial/license number redacted>,
        "updatePersion": "N",
        "devTypeID": 4,
        "cloudSupport": 0,
        "userAccount": "<email-address redacted>,
        "voicemail": <URLs to voice recordings redacted>
        "trialCloud": 0,
        "region": "Europe/Berlin",
        "nvrKey": "",
        "userFlag": "Y",
        "latitude": "200",
        "p2pInit": "<redacted>",
        "deviceVersionID": "ppstrong-b5-apeman-3.1.2.20200324",
        "sleep": "off",
        "capability": "{\"ver\":21,\"cat\":\"bell\",\"caps\":{\"pdt\":13,\"dnm\":1,\"cs2\":113,\"alp\":1,\"cst\":1,\"pwm\":1,\"rng\":3,\"vtk\":4,\"nst\":1,\"hms\":2,\"sd\":1,\"spp\":1,\"cse\":1,\"ecs\":0,\"cct\":0,\"esd\":50,\"pir\":4,\"btl\":0,\"ota\":1,\"ovc\":1,\"wkp\":1}}",
        "firmID": 8,
        "nvrUUID": "",
        "wifiName": "",
        "cloudstatus": 4,
        "asFriend": false,
        "protocolVersion": 4,
        "timeZone2": "CET01:00:00CEST02:00:00,M3.5.0,M10.5.0",
        "awsThingName": "",
        "awsCloudCompat": 1,
        "shareAccessSign": 0,
        "hostKey": "<redacted>",
        "hostKey1": "",
        "deviceID": <redacted>,
        "tp": "<redacted>",
        "nvrPort": -1,
        "p2pInitApp": "<redacted>:WeEye2ppStronGer"
        }
    ],
    "resultCode": "1001",
    "nvr": [],
    "fourthGeneration": [],
    "ipc": [],
    "snap": [],
    "voiceBell": [],
    "chime": []
    }
\end{lstlisting}