I'm sure some of these newly discovered undocumented commands could help.

https://www.tarlogic.com/news/backdoor-esp32-chip-infect-ot-...