This semester I got a Microsoft fitness band for a project. The original goal was not hard: understand the client communication. So I decided to pwn it for fun. Thanks to my friends in OSIRIS lab who supported me a lot, thank you mates. And also my mentor, mongo, inspired me so much and taught me a lot, thanks man!
So first, we need to figure out some of the basic behaviours of the fitness band, like how it upgrades firmware, uploads user status etc. Luckily the client is just a windows binary, so we don’t need to set up environment to reverse the Android app or IOS app. The Windows client is available here. Since the client was written in c#, we can use tools like ILSpy, JustDecompile, dnSpy and dotPeek to debug & decompile it easily!
Every Wednesday is Wearable Wednesday here at Adafruit! We’re bringing you the blinkiest, most fashionable, innovative, and useful wearables from around the web and in our own original projects featuring our wearable Arduino-compatible platform, FLORA. Be sure to post up your wearables projects in the forums or send us a link and you might be featured here on Wearable Wednesday!