Reverse Engineering the TP-Link HS110
by Lubomir Stroetmann, Consultant and Tobias Esser, Consultant The TP-Link HS110 Wi-Fi is a cloud-enabled power plug that can be turned on and off remotely via app and offers energy monitoring and scheduling capabilities. As part of ongoing research into Internet of Things security, we performed a security analysis by reverse engineering the device firmware and Android app, sniffing app-to-device and device-to-app communications and fuzzing the proprietary protocols being used. While cloud communication was found to be reasonably secure for an IoT device, we discovered two insecure proprieta...
Source: softscheck.com