4

Many IoT systems have 3rd-party APIs people have reverse-engineered so they can add custom integrations, but these all work by impersonating the app, receiving updates from the server.

If I'm on my local network and so is my smart-plug or door-bell or whatever, is there a way to intercept the outgoing traffic before it even gets to the server?

4

This isn't really a IoT question, it's more a general networking question.

But yes, if you control the LAN then you can do nearly anything but the starting points would be:

  • DNS overriding so a hostname points to a local address
  • DNAT to intercept packets to a specific IP address and remap it to a local address

Both of these do rely on the system not using TLS/SSL to encrypt the traffic as you would need to present a certificate that matches the host the device is trying to connect to.

There can be ways round that, but things start to get a lot more complicated.

1
  • I was surprised there don't seem to be any tags like homebrew or hacking tags, this is quite a big part of IoT. Would a question like mine targeted at a particular product be off-topic for this site? – Mr. Boy Oct 30 '20 at 15:00

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.