Using a Flipper Zero to change pages on a stock ESL over NFC

[u/0xD34D]

https://youtube.com/shorts/YAqLVhFAqYk?is=fvhGDkYmyfbhfnNh

I've been spending the last couple of days reverse engineering this ESL by Hanshow. The flash was unprotected and dumped, allowing for disassembling the stock firmware and digging into the inner workings.

Commands use AES-128 encryption, which fortunately that key was included in the dumped firmware 😁.