Lens Of Deceit: Unmasking And Altering Camera Sunglasses' Footage
summary
Reverse engineering uncovers a full_build=true firmware download from graph.facebook.com yielding a ~330 MB ZIP and a ~500 MB system image, revealing a Stella Wi‑Fi service APK and a Stella webserver with TLS but no hostname verification. Tooling includes JADX, Frida, pydumper and mitmproxy to extract firmware, hook Wi‑Fi setup and intercept traffic. Older Android SDK devices use an eight‑character static Wi‑Fi password (newer devices use rotating 63‑char passwords), enabling offline cracking; combined with absent cert checks allows MITM to steal MP4s and inject fake videos, exploit verified and later patched.
AI-written summary · about
chapters (12)
- 0:00Introduction of the talk
- 4:06Reverse Engineering
- 6:04Firmware Extraction
- 9:28Firmware Analysis
- 11:21Stella Wifi Service
- 12:23Web Server Manager
- 14:56Security Analysis
- 15:25WiFi Direct Security
- 18:32Webserver Security
- 20:24Security Analysis
- 20:41Exploitation
- 23:37Conclusion
related talks
41mUnlock hidden Superpowers in MediaTek Wi-Fi Chips
32mThe Evil of Spy Camera
43mAttacking Android Applications
31mWe All Know What You Did Last Summer
15mHacking a WiFi Lamp
40mIntroduction to IoT Reverse Engineering
40mYour Mediatek Wi Fi Chip's Secrets Bypassing Firmware Encryption
45mI just hacked your app!