Loading..
2026-07-19
I have a smart air conditioner which works only on the app from the manufacturer. This is not very useful for my purposes. I need the current temperature reading and eveything else that I can gather from the air conditioner to take maximum advantage of the chip on board.
We need data on the ac. I am heading out to collect all the data I can.
Here is the information I was able to gather from the first pass.
Manufacturer:
Panasonic
Model:
CS/CU-NU12YKY5W, White
Capacity:
1 ton
Date of purchase
21 Apr 2023
Invoice amount
₹37,990.00
Amazon Seller Description
About this item
- 7 in 1 Convertible Modes with additional AI Mode (converti7): It smartly detects the room's temperature, forecast the cooling capacity and change the fan speed to provide optimal cooling through inbuilt sensors and artificial intelligence. Save energy with adjustment of cooling performance by selecting modes ranging from 40% to 90%, Full capacity and High capacity.
- Capacity: 1 Ton - Suitable for small sized rooms (< = 120 sq ft). Energy Star Rating: 5 Star | Annual Power Consumption: 523.15 kWh | ISEER: 5.10. The star rating is as per new BEE guidelines. 424 (Indoor) CFM Air Circulation & Ambient Temperature: 52 degree Celsius
- Manufacturer Warranty: 1 Year Comprehensive on Product | 5 years on PCB |10 years on Compressor.
- Smart AC: Control your AC with your phone now. Seamlessly adjust temperature, monitor status and change modes right from the AI enabled Miraie App on phone. Seamless hands-free operation and Voice Control with Alexa and Hey Google. Experience convenience by setting hourly temperature and customised sleep profiles.
- Copper Condenser Coil: Copper Condenser Coil: Better cooling and requires low maintenance. Healthy Cooling: Equipped with the PM 0.1 Filter to provide dust free, clean air by removing the PM 0.1 particles in the air.
- Wi-Fi Split AC with Twin Cool Inverter compressor: Variable Speed Inverter Compressor which adjusts power depending on heat load. Refrigerant gas: R32 - Environmental friendly. 100% Copper Tubing: Helps in better heat exchange and enhances cooling. It also enhances durability of the product via Anti Corrosion Shield Blu Technology. Equipped with Powerful and Dry Mode for different cooling needs and automatic humidity control. Lowest Noise Operation and Low gas detection.
- 4 Way Horizontal and Vertical Swing ensures consistent cooling across the space.
From pass 1 we obtained the information that the air conditioner can be controlled via a mobile phone application called "Miraie".
This leads us onto the next step; downloading the app and trying to gather more information from there.
I was able to download the app onto my android phone from the play store without any issues..
The app was total shit. All I know is that it was using the wi-fi to set itself up.
ref: youtuber https://youtu.be/A8ICsEnGfkg?si=kCMj17CeJy4OLnxq
Now I needed an android emulator and a mitm attack to see what was happening behind the scenes inside the app..
Android Emulator:
https://www.mumuplayer.com/
MITM Proxy:
https://www.mitmproxy.org/
I spent hours trying to inspect traffic to and from the app and this is what worked for me.
There are 2 known ways of bypassing the security in a production app.
SSL pinning is a security mechanism that hardcodes a server's expected SSL certificate or public key within a client application. Instead of trusting all certificates validated by standard Certificate Authorities (CAs), the app requires a specific match, preventing man-in-the-middle (MITM) attacks and unauthorized proxy interception.
Currently we do not have any evidence to say that the app uses SSL pinning but from what I have read, it is the industry standard and all industry leading companies use this security measure to avoid attacks..
The bottom line:
The app is only going to talk to 1 server and no other..