Reverse engineering Bambu Connect: Difference between revisions
fixed date |
add reference to bambu connect v1.1.3 |
||
| Line 4: | Line 4: | ||
The purpose of this guide is to demonstrate the trivial process of extracting the ''"private keys"'' used for communicating with Bambu devices to examine, and challenge, the technical basis for Bambu Lab's security justification of Bambu Connect. | The purpose of this guide is to demonstrate the trivial process of extracting the ''"private keys"'' used for communicating with Bambu devices to examine, and challenge, the technical basis for Bambu Lab's security justification of Bambu Connect. | ||
'''Update (January 26, 2025)''': Bambu Connect 1.1.3 is no longer obfuscated, you can skip all steps related to asarmor, asarfix, Ghidra and string deobfuscation. | '''Update (January 26, 2025)''': Bambu Connect v1.1.3<ref>https://public-cdn.bblmw.com/upgrade/bambu-connect/v1.1.3/bambu-connect-beta-darwin-arm64-v1.1.3_2c73d82.dmg - public-cdn.bblmw.com - accessed 2025-01-29</ref> is no longer obfuscated, you can skip all steps related to asarmor, asarfix, Ghidra and string deobfuscation. | ||
To read the main.js for further analysis or extracting the private key stored by Bambu in the app: | To read the main.js for further analysis or extracting the private key stored by Bambu in the app: | ||