Security Analysis and Reverse Engineering of a Children's Drawing Robot Toy

Every so often I like to see what new and interesting electronic children's toys are out there. When looking, I keep in mind the potential attack surface, typically preferring toys with companion mobile apps, wireless communications, or any other added complexity.

I came across these robots that draw from a set of pre-defined images. They all come with a pack of 100 or 150 cards, and the drawings appear to be stored in the robot's memory.

The goal was to understand how the robot worked, reverse engineer its communication protocol, and ultimately gain full control over its drawing capabilities.

This project demonstrates the security implications of IoT toys and how even simple devices can have significant vulnerabilities when proper security measures aren't implemented.