The Magical Forest Trial is a legendary event that takes place deep within the enchanted woods. It is said to be a test of courage, skill, and wit for those who dare to enter. Only the bravest and most talented individuals are chosen to participate in this grueling trial. The forest itself is alive with magic, with every tree and bush exuding an otherworldly aura. The trial consists of a series of challenges designed to push the participants to their limits. Each challenge requires a unique set of skills, from navigating treacherous paths to solving riddles and puzzles.
I also use the timers function to turn on/off specific bulbs at different times at night when I’m out of town. This gives the appearance of someone being in the house.
At this time no patch is currently available for this issue however in order to limit the exposure it is recommended that network access to these devices should be permitted to authorized users only through the use of proper Access Control Lists and network segmentation. Many of these devices are targeted for mainstream household environments and due to often unfettered internet access and device control through insecure mobile applications, this makes such devices a great playground for security researchers and malicious actors alike.
Each challenge requires a unique set of skills, from navigating treacherous paths to solving riddles and puzzles. One of the most famous challenges within the Magical Forest Trial is the Maze of Illusions. This maze is known for its ability to deceive and confuse even the most skilled navigators.
Magic Home Pro Mobile Application Authentication Bypass (CVE-2020-27199)
With the prevalence of IoT devices flooding the mainstream marketplace, we tend to see a large proliferation of these devices lacking even basic security controls. Many of these devices are targeted for mainstream household environments and due to often unfettered internet access and device control through insecure mobile applications, this makes such devices a great playground for security researchers and malicious actors alike. One such device is the JadeHomic RGB Led Light Strip Kit and its associated mobile device application Magic Home Pro. I decided to turn my attention to investigating the security of this device and managed to uncover multiple vulnerabilities that could theoretically affect millions of devices.
Figure 1: Magic Home Pro App and JadeHomic LED Kit
Finding 1: Unauthorized Information Disclosure/Unauthorized access
This vulnerability allows for any authenticated user to utilize their current authorization level to interrogate and control devices that are not currently apart of their registered account. This attack uses an API call to '/app/getBindedUserListByMacAddress/ZG001?macAddress=', where the registered mac address can be uncovered by simply fuzzing the last three bytes of the mac address itself. The resulting HTTP response where a valid device exists will return the Username, User Unique Identifier (userUniID) and the Binded Unique ID (bindedUniID) of the associated user account. Using the above method, an attacker is now able to utilize a subsequent POST request to API endpoint '/app/sendCommandBatch/ZG001' using the newly enumerated mac address as a parameter to control the device. The device can now be controlled by an attacker by sending compatible hex strings '71230fa3' and '71240fa4' which translate to ON and OFF commands respectively.
Figure 2: MAC and Account enumeration
Finding 2: JWT susceptibility to forgery and signature bypass
After a successful enumeration of targeted devices, it was further possible to use the discovered 'userID' and 'uniID' within a forged JWT payload section to conduct a device takeover of another users' device. Utilizing a well-known JWT signature-bypass vulnerability, it was found that a malicious actor could take over a device of another user and therefore place it under the full control of the malicious actor. This attack uses an API call to '/app/shareDevice/ZG001' coupled with the 'friendUserID' JSON parameter to add the device to the attacker's device list. This gives the attacker full control of the endpoint device.
Finding 3: Magic Home Pro Authentication Bypass ( CVE-2020-27199 )
Utilizing the enumerated information above, an attacker is able to login to the mobile application using HTTP response manipulation. This results in an authentication bypass.
- Utilizing the JSON token forgery coupled with the gleaned information i.e. the Victim Email, ClientID, and UniqID based on the above enumeration it is possible to bypass the Mobile App authentication process through manipulating the HTTP response and thus gaining access to the Application as the victim.
- The attacker uses the Magic Home Pro application utilizing a victim email address, arbitrary password, and clientID.
- The attacker can then manipulate the HTTP response using the details in step 1 which allows for the bypass to take place.
Original HTTP Login Request via Magic Home Pro Mobile app
POST /app/login/ZG001 HTTP/1.1
User-Agent: Magic Home/1.5.1(ANDROID,9,en-US)
Accept-Language: en-US
Accept: application/json
token:
Content-Type: application/json; charset=utf-8
Content-Length: 117
Host: wifij01us.magichue.net
Connection: close
Accept-Encoding: gzip, deflate
","password":"","clientID":"">
Original HTTP Response
HTTP/1.1 200
Server: nginx/1.10.3
Date: Thu, 08 Oct 2020 00:08:45 GMT
Content-Type: application/json;charset=UTF-8
Connection: close
Content-Length: 37
Edited HTTP Response
HTTP/1.1 200
Server: nginx/1.10.3
Date: Mon, 06 Jul 2020 12:32:02 GMT
Content-Type: application/json;charset=UTF-8
Connection: close
Content-Length: 907
","userEmail":"","userUniID":"">,"token":"">
Proof of Concept
Summary
At this time no patch is currently available for this issue however in order to limit the exposure it is recommended that network access to these devices should be permitted to authorized users only through the use of proper Access Control Lists and network segmentation.
I can’t say if it’s the app or the bulbs…my guess is the app, so here you go!
Participants must rely on their intuition and instincts to find their way out of the maze before time runs out. Another notable challenge is the River of Whispers. Participants must cross a fast-flowing river using only a dilapidated rope bridge. The bridge is in a state of disrepair, and one wrong step could send the participants plunging into the icy waters below. This challenge tests both physical agility and mental fortitude. Throughout the trial, participants must also face various mythical creatures that inhabit the forest. From mischievous sprites to powerful dragons, each encounter requires quick thinking and resourcefulness to overcome. The creatures act as guardians of the trial, testing the participants' ability to face their fears and find creative solutions to problems. At the heart of the Magical Forest Trial lies the Tree of Wisdom. Legend has it that anyone who can reach the top of the tree will be granted a single wish. This wish can be anything the participant desires, whether it be wealth, fame, or even immortality. However, reaching the top of the tree is no easy task, as it is shrouded in mystery and protected by powerful enchantments. Only a select few have ever completed the Magical Forest Trial, but those who do are forever revered as heroes in their communities. Their stories inspire generations to dream big and embrace the magical possibilities that lie within themselves. In conclusion, the Magical Forest Trial is a challenging and fantastical event that tests the bravery, skill, and wit of its participants. The challenges, creatures, and mythical aspects of the trial create an immersive and enchanting experience. Only the most talented and determined individuals are able to complete the trial, and their success serves as a testament to the power of belief and perseverance..
Reviews for "The Healing Powers of the Magical Forest Trial"
1. Sarah - 2/5: I was really excited to read "Magical Forest Trial" after hearing all the hype, but I was extremely disappointed. The characters were one-dimensional and lacked depth, making it hard to connect with them. The plot felt predictable and cliché, with no real surprises or twists. The writing style was also quite mediocre, lacking in descriptive language and failing to create a vivid image of the magical forest. Overall, I found the book to be underwhelming and would not recommend it.
2. Tom - 1/5: I couldn't even finish "Magical Forest Trial" because it was so poorly written. The dialogue was unnatural and forced, with characters constantly delivering cheesy one-liners. The pacing was off, with the story dragging on in some parts and rushing through others. The world-building was also lacking; the magical forest felt generic and uninteresting. I found myself bored and uninvested in the story, and I would not waste my time on this book.
3. Emily - 2/5: I had high expectations for "Magical Forest Trial" based on the hype, but unfortunately, it fell short. The writing style felt amateurish, with awkward sentence structures and repetitive phrasing. The protagonist was also quite unlikable, constantly making reckless decisions without any real growth or development throughout the story. The plot had potential, but it lacked complexity and failed to keep me engaged. Overall, I was disappointed with the book and would not recommend it.
4. Mike - 2/5: "Magical Forest Trial" was a letdown for me. The concept sounded intriguing, but the execution was not well done. The pacing was inconsistent, with the story dragging in some parts and rushing through important scenes in others. The world-building was also lacking detail, making it hard to fully immerse myself in the magical forest. Additionally, the plot lacked originality and felt like a poor imitation of other fantasy books. Overall, I didn't find the book enjoyable and would not recommend it to others.
5. Jessica - 1/5: I found "Magical Forest Trial" to be poorly written and poorly executed. The characters were shallow and uninteresting, with no real development or depth. The plot felt disjointed and rushed, leaving me confused at times. The writing style was also bland and lacked any sparkle or creativity. I struggled to stay engaged with the story and ultimately gave up on it. I would not recommend this book to anyone looking for a compelling fantasy read.