subbrute_worker.c 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513
  1. #include "subbrute_worker_private.h"
  2. #include <furi.h>
  3. #include <string.h>
  4. #include <toolbox/stream/stream.h>
  5. #include <flipper_format.h>
  6. #include <flipper_format_i.h>
  7. #include <lib/subghz/subghz_protocol_registry.h>
  8. #define TAG "SubBruteWorker"
  9. #define SUBBRUTE_TX_TIMEOUT 6
  10. #define SUBBRUTE_MANUAL_TRANSMIT_INTERVAL 250
  11. SubBruteWorker* subbrute_worker_alloc(const SubGhzDevice* radio_device) {
  12. SubBruteWorker* instance = malloc(sizeof(SubBruteWorker));
  13. instance->state = SubBruteWorkerStateIDLE;
  14. instance->step = 0;
  15. instance->worker_running = false;
  16. instance->initiated = false;
  17. instance->last_time_tx_data = 0;
  18. instance->load_index = 0;
  19. instance->opencode = 0;
  20. instance->thread = furi_thread_alloc();
  21. furi_thread_set_name(instance->thread, "SubBruteAttackWorker");
  22. furi_thread_set_stack_size(instance->thread, 2048);
  23. furi_thread_set_context(instance->thread, instance);
  24. furi_thread_set_callback(instance->thread, subbrute_worker_thread);
  25. instance->context = NULL;
  26. instance->callback = NULL;
  27. instance->tx_timeout_ms = SUBBRUTE_TX_TIMEOUT;
  28. instance->decoder_result = NULL;
  29. instance->transmitter = NULL;
  30. instance->environment = subghz_environment_alloc();
  31. subghz_environment_set_protocol_registry(
  32. instance->environment, (void*)&subghz_protocol_registry);
  33. instance->transmit_mode = false;
  34. instance->radio_device = radio_device;
  35. return instance;
  36. }
  37. void subbrute_worker_free(SubBruteWorker* instance) {
  38. furi_assert(instance);
  39. // I don't know how to free this
  40. instance->decoder_result = NULL;
  41. if(instance->transmitter != NULL) {
  42. subghz_transmitter_free(instance->transmitter);
  43. instance->transmitter = NULL;
  44. }
  45. subghz_environment_free(instance->environment);
  46. instance->environment = NULL;
  47. furi_thread_free(instance->thread);
  48. subghz_devices_sleep(instance->radio_device);
  49. subbrute_radio_device_loader_end(instance->radio_device);
  50. free(instance);
  51. }
  52. uint64_t subbrute_worker_get_step(SubBruteWorker* instance) {
  53. return instance->step;
  54. }
  55. bool subbrute_worker_set_step(SubBruteWorker* instance, uint64_t step) {
  56. furi_assert(instance);
  57. if(!subbrute_worker_can_manual_transmit(instance)) {
  58. FURI_LOG_W(TAG, "Cannot set step during running mode");
  59. return false;
  60. }
  61. instance->step = step;
  62. return true;
  63. }
  64. void subbrute_worker_set_opencode(SubBruteWorker* instance, uint8_t opencode) {
  65. // furi_assert(instance);
  66. // if(!subbrute_worker_can_manual_transmit(instance)) {
  67. // FURI_LOG_W(TAG, "Cannot set opencode during running mode");
  68. //
  69. // return false;
  70. // }
  71. instance->opencode = opencode;
  72. // return true;
  73. }
  74. uint8_t subbrute_worker_get_opencode(SubBruteWorker* instance) {
  75. return instance->opencode;
  76. }
  77. bool subbrute_worker_get_is_pt2262(SubBruteWorker* instance) {
  78. if(instance->attack == SubBruteAttackPT226224bit315 ||
  79. instance->attack == SubBruteAttackPT226224bit418 ||
  80. instance->attack == SubBruteAttackPT226224bit430 ||
  81. instance->attack == SubBruteAttackPT226224bit433) {
  82. return true;
  83. } else {
  84. return false;
  85. }
  86. }
  87. bool subbrute_worker_init_default_attack(
  88. SubBruteWorker* instance,
  89. SubBruteAttacks attack_type,
  90. uint64_t step,
  91. const SubBruteProtocol* protocol,
  92. uint8_t repeats) {
  93. furi_assert(instance);
  94. if(instance->worker_running) {
  95. FURI_LOG_W(TAG, "Init Worker when it's running");
  96. subbrute_worker_stop(instance);
  97. }
  98. instance->attack = attack_type;
  99. instance->frequency = protocol->frequency;
  100. instance->preset = protocol->preset;
  101. instance->file = protocol->file;
  102. instance->step = step;
  103. instance->bits = protocol->bits;
  104. instance->te = protocol->te;
  105. instance->opencode = protocol->opencode;
  106. instance->repeat = repeats;
  107. instance->load_index = 0;
  108. instance->file_key = 0;
  109. instance->two_bytes = false;
  110. instance->max_value =
  111. subbrute_protocol_calc_max_value(instance->attack, instance->bits, instance->two_bytes);
  112. instance->initiated = true;
  113. instance->state = SubBruteWorkerStateReady;
  114. subbrute_worker_send_callback(instance);
  115. #ifdef FURI_DEBUG
  116. FURI_LOG_I(
  117. TAG,
  118. "subbrute_worker_init_default_attack: %s, bits: %d, preset: %s, file: %s, te: %ld, repeat: %d, max_value: %lld",
  119. subbrute_protocol_name(instance->attack),
  120. instance->bits,
  121. subbrute_protocol_preset(instance->preset),
  122. subbrute_protocol_file(instance->file),
  123. instance->te,
  124. instance->repeat,
  125. instance->max_value);
  126. #endif
  127. return true;
  128. }
  129. bool subbrute_worker_init_file_attack(
  130. SubBruteWorker* instance,
  131. uint64_t step,
  132. uint8_t load_index,
  133. uint64_t file_key,
  134. SubBruteProtocol* protocol,
  135. uint8_t repeats,
  136. bool two_bytes) {
  137. furi_assert(instance);
  138. if(instance->worker_running) {
  139. FURI_LOG_W(TAG, "Init Worker when it's running");
  140. subbrute_worker_stop(instance);
  141. }
  142. instance->attack = SubBruteAttackLoadFile;
  143. instance->frequency = protocol->frequency;
  144. instance->preset = protocol->preset;
  145. instance->file = protocol->file;
  146. instance->step = step;
  147. instance->bits = protocol->bits;
  148. instance->te = protocol->te;
  149. instance->load_index = load_index;
  150. instance->repeat = repeats;
  151. instance->file_key = file_key;
  152. instance->two_bytes = two_bytes;
  153. instance->max_value =
  154. subbrute_protocol_calc_max_value(instance->attack, instance->bits, instance->two_bytes);
  155. instance->initiated = true;
  156. instance->state = SubBruteWorkerStateReady;
  157. subbrute_worker_send_callback(instance);
  158. #ifdef FURI_DEBUG
  159. FURI_LOG_I(
  160. TAG,
  161. "subbrute_worker_init_file_attack: %s, bits: %d, preset: %s, file: %s, te: %ld, repeat: %d, max_value: %lld, key: %llX",
  162. subbrute_protocol_name(instance->attack),
  163. instance->bits,
  164. subbrute_protocol_preset(instance->preset),
  165. subbrute_protocol_file(instance->file),
  166. instance->te,
  167. instance->repeat,
  168. instance->max_value,
  169. instance->file_key);
  170. #endif
  171. return true;
  172. }
  173. bool subbrute_worker_start(SubBruteWorker* instance) {
  174. furi_assert(instance);
  175. if(!instance->initiated) {
  176. FURI_LOG_W(TAG, "Worker not init!");
  177. return false;
  178. }
  179. if(instance->worker_running) {
  180. FURI_LOG_W(TAG, "Worker is already running!");
  181. return false;
  182. }
  183. if(instance->state != SubBruteWorkerStateReady &&
  184. instance->state != SubBruteWorkerStateFinished) {
  185. FURI_LOG_W(TAG, "Worker cannot start, invalid device state: %d", instance->state);
  186. return false;
  187. }
  188. instance->worker_running = true;
  189. furi_thread_start(instance->thread);
  190. return true;
  191. }
  192. void subbrute_worker_stop(SubBruteWorker* instance) {
  193. furi_assert(instance);
  194. if(!instance->worker_running) {
  195. return;
  196. }
  197. instance->worker_running = false;
  198. furi_thread_join(instance->thread);
  199. subghz_devices_idle(instance->radio_device);
  200. }
  201. bool subbrute_worker_transmit_current_key(SubBruteWorker* instance, uint64_t step) {
  202. furi_assert(instance);
  203. if(!instance->initiated) {
  204. FURI_LOG_W(TAG, "Worker not init!");
  205. return false;
  206. }
  207. if(instance->worker_running) {
  208. FURI_LOG_W(TAG, "Worker in running state!");
  209. return false;
  210. }
  211. if(instance->state != SubBruteWorkerStateReady &&
  212. instance->state != SubBruteWorkerStateFinished) {
  213. FURI_LOG_W(TAG, "Invalid state for running worker! State: %d", instance->state);
  214. return false;
  215. }
  216. uint32_t ticks = furi_get_tick();
  217. if((ticks - instance->last_time_tx_data) < SUBBRUTE_MANUAL_TRANSMIT_INTERVAL) {
  218. #ifdef FURI_DEBUG
  219. FURI_LOG_D(TAG, "Need to wait, current: %ld", ticks - instance->last_time_tx_data);
  220. #endif
  221. return false;
  222. }
  223. instance->last_time_tx_data = ticks;
  224. instance->step = step;
  225. bool result;
  226. instance->protocol_name = subbrute_protocol_file(instance->file);
  227. FlipperFormat* flipper_format = flipper_format_string_alloc();
  228. Stream* stream = flipper_format_get_raw_stream(flipper_format);
  229. stream_clean(stream);
  230. if(instance->attack == SubBruteAttackLoadFile) {
  231. subbrute_protocol_file_payload(
  232. stream,
  233. step,
  234. instance->bits,
  235. instance->te,
  236. instance->repeat,
  237. instance->load_index,
  238. instance->file_key,
  239. instance->two_bytes);
  240. } else {
  241. subbrute_protocol_default_payload(
  242. stream,
  243. instance->file,
  244. step,
  245. instance->bits,
  246. instance->te,
  247. instance->repeat,
  248. instance->opencode);
  249. }
  250. subbrute_worker_subghz_transmit(instance, flipper_format);
  251. result = true;
  252. #ifdef FURI_DEBUG
  253. FURI_LOG_D(TAG, "Manual transmit done");
  254. #endif
  255. flipper_format_free(flipper_format);
  256. return result;
  257. }
  258. bool subbrute_worker_is_running(SubBruteWorker* instance) {
  259. return instance->worker_running;
  260. }
  261. bool subbrute_worker_can_manual_transmit(SubBruteWorker* instance) {
  262. furi_assert(instance);
  263. if(!instance->initiated) {
  264. FURI_LOG_W(TAG, "Worker not init!");
  265. return false;
  266. }
  267. return !instance->worker_running && instance->state != SubBruteWorkerStateIDLE &&
  268. instance->state != SubBruteWorkerStateTx &&
  269. ((furi_get_tick() - instance->last_time_tx_data) > SUBBRUTE_MANUAL_TRANSMIT_INTERVAL);
  270. }
  271. void subbrute_worker_set_callback(
  272. SubBruteWorker* instance,
  273. SubBruteWorkerCallback callback,
  274. void* context) {
  275. furi_assert(instance);
  276. instance->callback = callback;
  277. instance->context = context;
  278. }
  279. void subbrute_worker_subghz_transmit(SubBruteWorker* instance, FlipperFormat* flipper_format) {
  280. const uint8_t timeout = instance->tx_timeout_ms;
  281. while(instance->transmit_mode) {
  282. furi_delay_ms(timeout);
  283. }
  284. instance->transmit_mode = true;
  285. if(instance->transmitter != NULL) {
  286. subghz_transmitter_free(instance->transmitter);
  287. instance->transmitter = NULL;
  288. }
  289. instance->transmitter =
  290. subghz_transmitter_alloc_init(instance->environment, instance->protocol_name);
  291. subghz_transmitter_deserialize(instance->transmitter, flipper_format);
  292. subghz_devices_reset(instance->radio_device);
  293. subghz_devices_idle(instance->radio_device);
  294. subghz_devices_load_preset(instance->radio_device, instance->preset, NULL);
  295. subghz_devices_set_frequency(
  296. instance->radio_device, instance->frequency); // TODO is freq valid check
  297. if(subghz_devices_set_tx(instance->radio_device)) {
  298. subghz_devices_start_async_tx(
  299. instance->radio_device, subghz_transmitter_yield, instance->transmitter);
  300. while(!subghz_devices_is_async_complete_tx(instance->radio_device)) {
  301. furi_delay_ms(timeout);
  302. }
  303. subghz_devices_stop_async_tx(instance->radio_device);
  304. }
  305. subghz_devices_idle(instance->radio_device);
  306. subghz_transmitter_stop(instance->transmitter);
  307. subghz_transmitter_free(instance->transmitter);
  308. instance->transmitter = NULL;
  309. instance->transmit_mode = false;
  310. }
  311. void subbrute_worker_send_callback(SubBruteWorker* instance) {
  312. if(instance->callback != NULL) {
  313. instance->callback(instance->context, instance->state);
  314. }
  315. }
  316. /**
  317. * Entrypoint for worker
  318. *
  319. * @param context SubBruteWorker*
  320. * @return 0 if ok
  321. */
  322. int32_t subbrute_worker_thread(void* context) {
  323. furi_assert(context);
  324. SubBruteWorker* instance = (SubBruteWorker*)context;
  325. if(!instance->worker_running) {
  326. FURI_LOG_W(TAG, "Worker is not set to running state!");
  327. return -1;
  328. }
  329. if(instance->state != SubBruteWorkerStateReady &&
  330. instance->state != SubBruteWorkerStateFinished) {
  331. FURI_LOG_W(TAG, "Invalid state for running worker! State: %d", instance->state);
  332. return -2;
  333. }
  334. #ifdef FURI_DEBUG
  335. FURI_LOG_I(TAG, "Worker start");
  336. #endif
  337. SubBruteWorkerState local_state = instance->state = SubBruteWorkerStateTx;
  338. subbrute_worker_send_callback(instance);
  339. instance->protocol_name = subbrute_protocol_file(instance->file);
  340. FlipperFormat* flipper_format = flipper_format_string_alloc();
  341. Stream* stream = flipper_format_get_raw_stream(flipper_format);
  342. while(instance->worker_running) {
  343. stream_clean(stream);
  344. if(instance->attack == SubBruteAttackLoadFile) {
  345. subbrute_protocol_file_payload(
  346. stream,
  347. instance->step,
  348. instance->bits,
  349. instance->te,
  350. instance->repeat,
  351. instance->load_index,
  352. instance->file_key,
  353. instance->two_bytes);
  354. } else {
  355. subbrute_protocol_default_payload(
  356. stream,
  357. instance->file,
  358. instance->step,
  359. instance->bits,
  360. instance->te,
  361. instance->repeat,
  362. instance->opencode);
  363. }
  364. #ifdef FURI_DEBUG
  365. //FURI_LOG_I(TAG, "Payload: %s", furi_string_get_cstr(payload));
  366. //furi_delay_ms(SUBBRUTE_MANUAL_TRANSMIT_INTERVAL / 4);
  367. #endif
  368. subbrute_worker_subghz_transmit(instance, flipper_format);
  369. if(instance->step + 1 > instance->max_value) {
  370. #ifdef FURI_DEBUG
  371. FURI_LOG_I(TAG, "Worker finished to end");
  372. #endif
  373. local_state = SubBruteWorkerStateFinished;
  374. break;
  375. }
  376. instance->step++;
  377. furi_delay_ms(instance->tx_timeout_ms);
  378. }
  379. flipper_format_free(flipper_format);
  380. instance->worker_running = false; // Because we have error states
  381. instance->state = local_state == SubBruteWorkerStateTx ? SubBruteWorkerStateReady :
  382. local_state;
  383. subbrute_worker_send_callback(instance);
  384. #ifdef FURI_DEBUG
  385. FURI_LOG_I(TAG, "Worker stop");
  386. #endif
  387. return 0;
  388. }
  389. uint8_t subbrute_worker_get_timeout(SubBruteWorker* instance) {
  390. return instance->tx_timeout_ms;
  391. }
  392. void subbrute_worker_set_timeout(SubBruteWorker* instance, uint8_t timeout) {
  393. instance->tx_timeout_ms = timeout;
  394. }
  395. uint8_t subbrute_worker_get_repeats(SubBruteWorker* instance) {
  396. return instance->repeat;
  397. }
  398. void subbrute_worker_set_repeats(SubBruteWorker* instance, uint8_t repeats) {
  399. instance->repeat = repeats;
  400. }
  401. uint32_t subbrute_worker_get_te(SubBruteWorker* instance) {
  402. return instance->te;
  403. }
  404. void subbrute_worker_set_te(SubBruteWorker* instance, uint32_t te) {
  405. instance->te = te;
  406. }
  407. bool subbrute_worker_is_tx_allowed(SubBruteWorker* instance, uint32_t value) {
  408. furi_assert(instance);
  409. bool res = false;
  410. if(!subghz_devices_is_frequency_valid(instance->radio_device, value)) {
  411. return false;
  412. } else {
  413. subghz_devices_set_frequency(instance->radio_device, value);
  414. res = subghz_devices_set_tx(instance->radio_device);
  415. subghz_devices_idle(instance->radio_device);
  416. }
  417. return res;
  418. }