Brian Schmitt brianschmitt
wnayes
/ LiftMasterDoorNotes.txt
Last active
October 9, 2023 01:12
Notes on LiftMaster garage door openers with myQ
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Device has HTTP server on port 80. This endpoint appears to be mostly for wifi configuration. | |
| Pages: | |
| /index | |
| /about | |
| - Has easter egg code, click logo 8 times. Navigates to game.html, but this doesn't exist on the device :( | |
| /config | |
| /config_gdo | |
| /sys (found with fuzzer) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // Note: This is for JScript.NET Mode FiddlerScript | |
| // Click Rules > Customize Rules. Inside the HANDLERS class, add the following block: | |
| public BindUITab("🚫 CSPAnalyzer", "<html>") | |
| static function CSPReport(arrSess: Session[]):String { | |
| if (arrSess.Length != 1) { | |
| return "<!doctype html><html style=\"font-family: 'Segoe UI'; width:100%; height: 100%; background-color: #F1EDED\"><body style='align:center; vertical-align:middle'><div style=\"height: 100%; margin-top: 80px; text-align: center; vertical-align:middle;\" >Please select a single response to view details about its Content-Security-Policy.</div></body></html>"; | |
| } | |