bond-

Camera is great but finding app was difficult. Also, sharing what I did do the configuration right:

App:
- Download from Xiaomi market app from app.mi.com (http://app.mi.com/getAppstoreApkUrl)
- Login to market using Mi account
- In Xiaomi market app search for the string: 小蚁智能摄像机
- Download the first app from the store, It should show "Yi Home"

Firmware:
- Don't upgrade the firmware beyond 1.8.5.1L_201510301024

CTurt

/*
	
	PoC for kernel stack overflow in sysctl handler for kern.binmisc.add:
	https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=206761#c0
	
	su
	kldload imgact_binmisc
	./x
	
	- CTurt

geekman

/*
 * bruteforce-cfg1.go
 * to bruteforce CFG1 encryption passwords for 32c3CTF "config.bin"
 *
 * @zxcvgm
 */
package main

import (
	brutedict "github.com/dieyushi/golang-brutedict"

geekman

#!/usr/bin/env python
#
# tool to parse JFFS2 images
# and more importantly, guess the erase block size
# 
# 2015.10.19 darell tan
#

from struct import unpack
from argparse import ArgumentParser

zmwangx

https://developer.microsoft.com/en-us/microsoft-edge/tools/vms/

timsutton

sudo /Applications/AutoDMG.app/Contents/MacOS/AutoDMG -r -L 7 -l - build --updates --output imagebuild/base-10.9.2-13C64.dmg ~/InstallESD.dmg
Password:
March 24, 2014 at 11:47:12 AM EDT  Running as root, using /var/root/Library/Application Support/AutoDMG
March 24, 2014 at 11:47:12 AM EDT  AutoDMG v1.3 build 235
March 24, 2014 at 11:47:12 AM EDT  Mac OS X 10.9.2 13C64
March 24, 2014 at 11:47:12 AM EDT  CPython 2.7.5 (GCC 4.2.1 Compatible Apple LLVM 5.0 (clang-500.0.68))
March 24, 2014 at 11:47:12 AM EDT  PyObjC 2.3.2a0
March 24, 2014 at 11:47:12 AM EDT  Setting source path to '/Users/tsutton/InstallESD.dmg'
March 24, 2014 at 11:47:12 AM EDT  Setting output path to 'imagebuild/base-10.9.2-13C64.dmg'
March 24, 2014 at 11:47:12 AM EDT  Setting apply updates to '1'

diego898

thanks to @neurodyne and this link for updated instructions

This works with the following versions of termsrv.dll

x64 - termsrv.dll - 6.3.9600.17095

Find	Replace
39813C0600000F849E310500	B80001000089813806000090
090085C07F078BD8	090085C090908BD8

bcse