One of the more ridiculous #ReverseEngineering things I've done thus far was getting the video feed via Wifi from my B1W Dashcam. (and yes the user/pass was admin/admin)
What I thought would just be a "Oh lets just use pcap to see what http URL gets used for the android App's preview" turned into half a day of disassembling an android app, uselessly using Ghidra, nmap scanning, and bashing my head against a binary protocol in python until I got it to randomly work
https://gist.github.com/iotku/2f54928f028a2ae9e16e6f3785aa39bb