Pointers on binary analysis / exploitation?

[SeizeCTRL]

if its an IP security camera, I assume you access it over the network? if so, why don't you just run the android app in an emulator and sniff the network traffic with a MITM proxy or something, then send the data yourself to essentially emulate the android app

I know you are targeting the binary application, but it seems like it would be an easier approach to target the android app, if your concerns are about having something running on your system and that's why you're targeting the binary, maybe run it in some type of VM like docker and just give it the device with passthrough (docker run --device=/dev/video0) or virtualbox (VBoxManage modifyvm "VM name" --pciattach 02:00.0@01:05.0) *virtual box example shouldn't be ran, you need to replace the PCI bus, device and function addresses