75 lines
2.7 KiB
TeX
75 lines
2.7 KiB
TeX
%-----------------------------------------------------------------------
|
|
\chapter{Appendix}
|
|
\label{ch:appendix}
|
|
%-----------------------------------------------------------------------
|
|
The following listing shows example data accessible via the \ac{HTTP} request shown in Listing~\ref{lst:userid-request}.
|
|
This data is can be gathered by an adversary through an \ac{URL}-manipulation attack on the \texttt{userID} parameter.\\[0.2cm]
|
|
\begin{lstlisting}[language=json, caption={Example data gathered through the URL-manipulation attack on the Victure VD300 backend using the request shown in Listing~\ref{lst:userid-request}.}, label={lst:userid_url}]
|
|
{
|
|
"light": [],
|
|
"doorbell": [
|
|
{
|
|
"nvrID": 0,
|
|
"devStatus": 1,
|
|
"updateVersion": false,
|
|
"bellVoice": "",
|
|
"iotType": 1,
|
|
"deviceImg": null,
|
|
"deviceName": <redacted>,
|
|
"userID": <redacted>,
|
|
"closePush": 0,
|
|
"devUid": "",
|
|
"nvrNum": "",
|
|
"cloudType": 1,
|
|
"deviceP2P": "ppcs",
|
|
"isBindingTY": "D",
|
|
"radius": "-1",
|
|
"relayLicenseID": "",
|
|
"deviceUUID": <UUID redacted>,
|
|
"longitude": "200",
|
|
"hasAlertMsg": true,
|
|
"deviceTypeName": "https://meari-eu.oss-eu-central-1.aliyuncs.com/deviceInfo/bell7s.png",
|
|
"timeZone": "UTC01:00",
|
|
"snNum": <serial/license number redacted>,
|
|
"updatePersion": "N",
|
|
"devTypeID": 4,
|
|
"cloudSupport": 0,
|
|
"userAccount": "<email-address redacted>,
|
|
"voicemail": <URLs to voice recordings redacted>
|
|
"trialCloud": 0,
|
|
"region": "Europe/Berlin",
|
|
"nvrKey": "",
|
|
"userFlag": "Y",
|
|
"latitude": "200",
|
|
"p2pInit": "<redacted>",
|
|
"deviceVersionID": "ppstrong-b5-apeman-3.1.2.20200324",
|
|
"sleep": "off",
|
|
"capability": "{\"ver\":21,\"cat\":\"bell\",\"caps\":{\"pdt\":13,\"dnm\":1,\"cs2\":113,\"alp\":1,\"cst\":1,\"pwm\":1,\"rng\":3,\"vtk\":4,\"nst\":1,\"hms\":2,\"sd\":1,\"spp\":1,\"cse\":1,\"ecs\":0,\"cct\":0,\"esd\":50,\"pir\":4,\"btl\":0,\"ota\":1,\"ovc\":1,\"wkp\":1}}",
|
|
"firmID": 8,
|
|
"nvrUUID": "",
|
|
"wifiName": "",
|
|
"cloudstatus": 4,
|
|
"asFriend": false,
|
|
"protocolVersion": 4,
|
|
"timeZone2": "CET01:00:00CEST02:00:00,M3.5.0,M10.5.0",
|
|
"awsThingName": "",
|
|
"awsCloudCompat": 1,
|
|
"shareAccessSign": 0,
|
|
"hostKey": "<redacted>",
|
|
"hostKey1": "",
|
|
"deviceID": <redacted>,
|
|
"tp": "<redacted>",
|
|
"nvrPort": -1,
|
|
"p2pInitApp": "<redacted>:WeEye2ppStronGer"
|
|
}
|
|
],
|
|
"resultCode": "1001",
|
|
"nvr": [],
|
|
"fourthGeneration": [],
|
|
"ipc": [],
|
|
"snap": [],
|
|
"voiceBell": [],
|
|
"chime": []
|
|
}
|
|
\end{lstlisting}
|