Let Him Cook! Hacking the Meatmeet BBQ Probe
A three-part reverse-engineering series on the Meatmeet BBQ probe by Julian B., published on Software Secured. It walks from hardware teardown and flash extraction, through the companion Android app, to a full BLE device takeover.
- Part 1: Teardown and ESP32 Flash Dump ↗
The team dismantled the Meatmeet Pro, monitored its BLE and network activity, and dumped the ESP32 flash for analysis.
- Part 2: Attacking the Android App ↗
Breaking down the Meatmeet Android app surfaced a number of vulnerabilities, including hardcoded credentials, insecure memory management, and an open storage bucket.
- Part 3: BLE Takeover and a BBQ Botnet ↗
BLE flaws in the probe allowed the team to take over the device, push malicious firmware, and even build a BLE BBQ probe botnet.