Two ways to crash a Tapo C500
Two network protocols, two bugs in the Tapo C500's main process. Ghidra and UART show how each one causes a crash.
Articles
rooting a Tapo C500
A cheap pan-tilt camera, an encrypted filesystem, and a persistent root shell. The whole ride, gotchas and all.