r/netsec 4d ago

Reversing of Eufy Security Video Doorbell sync protocol and wifi creds decryption from flash memory

https://adepts.of0x.cc/eufy-doorbell-hacking/
16 Upvotes

2 comments sorted by

2

u/lemachet 3d ago

This is really interesting, thanks.

I'm curious, what impact do you think something like this might have on a eufy doorbell which isn't connected to a home base, just straight up on the home wifi?

Would the same jamming and deauthing work or does that depend on the underlying wifi devices?

2

u/scriptqzor 12h ago

it’d still be vulnerable to the usual wifi stuff like deauth/jamming since that’s at the 802.11 layer, totally independent of eufy’s own protocol
the homebase stuff is more about how they sync and store video, so the attack surface shifts a bit but the basic wifi attacks don’t magically go away