Update 4 on iOS smart home application analysis

During the past week, I focused mainly on the dynamic analysis of Wemo switch and Wemo app. It first got my interest because I heard that it was still communicating with the server with a Man in the Middle proxy, and essentially disregarding any SSL/TLS error handling. I spend some time getting familiar with the MITM tool, Bettercap, in order to perform the dynamic analysis.

[Read more…]