1
Testing Exploitability on RPI Example
btsimonh edited this page 2022-10-09 08:00:46 +01:00

Follow the instructions for installation on RPI.

start two SSH sessions.

In the first, cd to tuya-cloudcutter/proof-of-concept

run

python test_device_exploitable.py

in the second, use the following commands:

To list wifi connections (to see if your device Smartlife-xxxx AP has come up):

nmcli dev wifi

to connect to the AP:

sudo nmcli dev wifi con "SmartLife-7E32" name "socket"

when the app has connected, answer yes in the first ssh session.

Enjoy :).

(on my smart socket, it was difficult to get the Smartlife-xxx AP to appear. But once it was there and connected to, I could click the button on the device, and it did not disconnect, and the AP remains. This was important for me, because after the click of the button, the LED was flashing, and so I could see if it froze or not.).