Philips Avent Baby Monitor uses Tuya

[thekoma]

Hi! I'm Triyng to get a baby monitor work on local network or at least try to integrate it with the home domotics.

The Camera uses a custom App .
After a little of nmap:

❯ nmap 192.168.x.y
Starting Nmap 7.91 ( https://nmap.org ) at 2023-05-08 22:02 CEST
Nmap scan report for 192.168.85.42
Host is up (0.0098s latency).
Not shown: 997 closed ports
PORT     STATE SERVICE
554/tcp  open  rtsp
6000/tcp open  X11
6668/tcp open  irc

And a little of Frida some mitm proxy and a lot of insults (I had to use an old android phone because the APK is arm64 only and no emulation works).

I've discovered that this damn thing uses Tuya API endpoint.

POST https://a1.tuyaeu.com/api.json HTTP/2.0
user-agent: TY-UA=APP/Android/1.0.5/SDK/3.34.5
content-type: application/x-www-form-urlencoded
content-length: 718
accept-encoding: gzip

appVersion:        1.0.5
appRnVersion:      5.52
sign:              <HIDDEN>
channel:           oem
deviceId:          <HIDDEN>
platform:          ONEPLUS A6003
sid:               <HIDDEN>
requestId:         <HIDDEN>
lang:              it_IT
a:                 tuya.m.app.version.upgrade
clientId:          <HIDDEN>
osSystem:          13
os:                Android
timeZoneId:        Europe/Rome
ttid:              sdk_tuya_international@<HIDDEN>
et:                3
v:                 3.0
deviceCoreVersion: 3.34.5
sdkVersion:        3.34.5
time:              1683573576
postData:          <HIDDEN>

Is there any way to use the tuyapi (or any client or existing component of this ecosystem) to control this device?

Thank you
Koma