Philips Hue Firmware Download API discovery

Laste Update: Fri 05 Jun 2020 02:22:05 PM UTC

Easy Way

With hardware, you could intercept traffic.

Hard(er) Way

1. Download APK
2. Extract config.arm64_v8a.apk from the downloaded APK using a basic unzip app
3. Extract lib/arm64-v8a/libappcore.so from config.arm64_v8a.apk (again, using an unzip app)
4. strings -a lib/arm64-v8a/libappcore.so | grep -E "http?"
5. Notice that there is a URL for https://firmware.meethue.com/v1/checkupdate. curl -s https://firmware.meethue.com/v1/checkupdate | json_pp -f json -t json -json_opt pretty,canonical,ascii

{
   "errorMessage" : "Invalid request",
   "errors" : [
      {
         "location" : "query",
         "msg" : "Invalid value",
         "param" : "version"
      },
      {
         "location" : "query",
         "msg" : "Invalid value",
         "param" : "deviceTypeId"
      },
      {
         "location" : "query",
         "msg" : "Invalid value",
         "param" : "deviceTypeId"
      }
   ]
}

6. We need to include a deviceTypeId and a version in our request.
7. Did not find deviceTypeId values, so OSINT for some information. Archived image
8. Try: "BSB002" for deviceTypeId and "1935144040" for version... curl -s "https://firmware.meethue.com/v1/checkupdate?deviceTypeId=BSB002&version=1935144040" | json_pp -f json -t json -json_opt pretty,canonical,ascii

{
   "updates" : [
      {
         "binaryUrl" : "https://storage.googleapis.com/firmware-hue/bsb002/1938112040/cd5f00c3-8a9f-40fc-9ee9-2396be3e333a/BSB002_1938112040.product.RSA_prod_01.fw2",
         "createdAt" : "2020-05-21T09:16:17.300Z",
         "fileSize" : 9462761,
         "md5" : "bc17db155965f2aa61d2945f81e45160",
         "releaseNotes" : "Hue Bridge software update 1938112040 (1.38 SR4.2) for the square-shaped Hue Bridge v2.\\n\\nThis update provides the following:\\n\\n- Improved performance and reliability of the system\\n- Improved mDNS ompatibility\\n\\nWant to keep your Philips Hue smart lighting system up to date? Enable automatic updates in the Hue app in Settings > Software update > Automatic update. Learn more at www.meethue.com\\n",
         "updatedAt" : "2020-05-21T09:16:17.376Z",
         "version" : 1938112040,
         "versionName" : "1.38.0 SR 4.2"
      }
   ]
}