A story of wifi secrets, UART lockdowns and a damaged flash memory chip
Summary
The article provides an in-depth reverse-engineering narrative of the Eufy HomeBase 2, detailing Wi-Fi credential generation, UART lockdowns, and a damaged flash memory chip. It covers firmware extraction, discovery of the Wi‑Fi password stored in NVRAM, and the creation of a recovery image to bypass the UART lockdown and obtain an admin shell. The write-up also describes filesystem recovery work, a staged debugging setup, and implications for hardware security in consumer IoT devices.