01-05-2016, 11:57 PM
I guess I couldn't be a malware analyst. I tried my luck yesterday and today, with very little success.
The previous owners of my house left a DVR system behind them, and it comes with an SDK - a DLL that allows windows apps to connect to the DVR via network and read info from it, configure it, or even view the video streams. Apparently the DVR unit even does motion detection and issues events when it detects motion. I though it could be useful to have a program running on the RasPi that would record these events. So I decided to crack the network protocol - it seems easy enough, just some JSONs being thrown around. Unfortunately each message is prefixed by 20 bytes and I couldn't figure out what those meant. My next idea was to use a disassembler on the SDK DLL to try to find out. After wading through what feels like millions of assembly lines, I'm none the wiser
The previous owners of my house left a DVR system behind them, and it comes with an SDK - a DLL that allows windows apps to connect to the DVR via network and read info from it, configure it, or even view the video streams. Apparently the DVR unit even does motion detection and issues events when it detects motion. I though it could be useful to have a program running on the RasPi that would record these events. So I decided to crack the network protocol - it seems easy enough, just some JSONs being thrown around. Unfortunately each message is prefixed by 20 bytes and I couldn't figure out what those meant. My next idea was to use a disassembler on the SDK DLL to try to find out. After wading through what feels like millions of assembly lines, I'm none the wiser