subbrute_protocols.c 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448
  1. #include "subbrute_protocols.h"
  2. #include <string.h>
  3. #define TAG "SubBruteProtocols"
  4. /**
  5. * CAME 12bit 303MHz
  6. */
  7. const SubBruteProtocol subbrute_protocol_came_12bit_303 = {
  8. .frequency = 303875000,
  9. .bits = 12,
  10. .te = 0,
  11. .repeat = 3,
  12. .preset = FuriHalSubGhzPresetOok650Async,
  13. .file = CAMEFileProtocol};
  14. /**
  15. * CAME 12bit 307MHz
  16. */
  17. const SubBruteProtocol subbrute_protocol_came_12bit_307 = {
  18. .frequency = 307800000,
  19. .bits = 12,
  20. .te = 0,
  21. .repeat = 3,
  22. .preset = FuriHalSubGhzPresetOok650Async,
  23. .file = CAMEFileProtocol};
  24. /**
  25. * CAME 12bit 433MHz
  26. */
  27. const SubBruteProtocol subbrute_protocol_came_12bit_433 = {
  28. .frequency = 433920000,
  29. .bits = 12,
  30. .te = 0,
  31. .repeat = 3,
  32. .preset = FuriHalSubGhzPresetOok650Async,
  33. .file = CAMEFileProtocol};
  34. /**
  35. * CAME 12bit 868MHz
  36. */
  37. const SubBruteProtocol subbrute_protocol_came_12bit_868 = {
  38. .frequency = 868350000,
  39. .bits = 12,
  40. .te = 0,
  41. .repeat = 3,
  42. .preset = FuriHalSubGhzPresetOok650Async,
  43. .file = CAMEFileProtocol};
  44. /**
  45. * NICE 12bit 433MHz
  46. */
  47. const SubBruteProtocol subbrute_protocol_nice_12bit_433 = {
  48. .frequency = 433920000,
  49. .bits = 12,
  50. .te = 0,
  51. .repeat = 3,
  52. .preset = FuriHalSubGhzPresetOok650Async,
  53. .file = NICEFileProtocol};
  54. /**
  55. * NICE 12bit 868MHz
  56. */
  57. const SubBruteProtocol subbrute_protocol_nice_12bit_868 = {
  58. .frequency = 868350000,
  59. .bits = 12,
  60. .te = 0,
  61. .repeat = 3,
  62. .preset = FuriHalSubGhzPresetOok650Async,
  63. .file = NICEFileProtocol};
  64. /**
  65. * Chamberlain 9bit 300MHz
  66. */
  67. const SubBruteProtocol subbrute_protocol_chamberlain_9bit_300 = {
  68. .frequency = 300000000,
  69. .bits = 9,
  70. .te = 0,
  71. .repeat = 3,
  72. .preset = FuriHalSubGhzPresetOok650Async,
  73. .file = ChamberlainFileProtocol};
  74. /**
  75. * Chamberlain 9bit 315MHz
  76. */
  77. const SubBruteProtocol subbrute_protocol_chamberlain_9bit_315 = {
  78. .frequency = 315000000,
  79. .bits = 9,
  80. .te = 0,
  81. .repeat = 3,
  82. .preset = FuriHalSubGhzPresetOok650Async,
  83. .file = ChamberlainFileProtocol};
  84. /**
  85. * Chamberlain 9bit 390MHz
  86. */
  87. const SubBruteProtocol subbrute_protocol_chamberlain_9bit_390 = {
  88. .frequency = 390000000,
  89. .bits = 9,
  90. .te = 0,
  91. .repeat = 3,
  92. .preset = FuriHalSubGhzPresetOok650Async,
  93. .file = ChamberlainFileProtocol};
  94. /**
  95. * Linear 10bit 300MHz
  96. */
  97. const SubBruteProtocol subbrute_protocol_linear_10bit_300 = {
  98. .frequency = 300000000,
  99. .bits = 10,
  100. .te = 0,
  101. .repeat = 5,
  102. .preset = FuriHalSubGhzPresetOok650Async,
  103. .file = LinearFileProtocol};
  104. /**
  105. * Linear 10bit 310MHz
  106. */
  107. const SubBruteProtocol subbrute_protocol_linear_10bit_310 = {
  108. .frequency = 310000000,
  109. .bits = 10,
  110. .te = 0,
  111. .repeat = 5,
  112. .preset = FuriHalSubGhzPresetOok650Async,
  113. .file = LinearFileProtocol};
  114. /**
  115. * BF existing dump
  116. */
  117. const SubBruteProtocol subbrute_protocol_load_file =
  118. {0, 0, 0, 3, FuriHalSubGhzPresetOok650Async, RAWFileProtocol};
  119. //static const SubBruteProtocol subbrute_protocols[SubBruteAttackTotalCount] = {
  120. // [SubBruteAttackCAME12bit303] =
  121. // {303875000, 12, 0, 3, FuriHalSubGhzPresetOok650Async, CAMEFileProtocol},
  122. // [SubBruteAttackCAME12bit307] =
  123. // {307800000, 12, 0, 3, FuriHalSubGhzPresetOok650Async, CAMEFileProtocol},
  124. // [SubBruteAttackCAME12bit433] =
  125. // {433920000, 12, 0, 3, FuriHalSubGhzPresetOok650Async, CAMEFileProtocol},
  126. // [SubBruteAttackCAME12bit868] =
  127. // {868350000, 12, 0, 3, FuriHalSubGhzPresetOok650Async, CAMEFileProtocol},
  128. // [SubBruteAttackNICE12bit433] =
  129. // {433920000, 12, 0, 3, FuriHalSubGhzPresetOok650Async, NICEFileProtocol},
  130. // [SubBruteAttackNICE12bit868] =
  131. // {868350000, 12, 0, 3, FuriHalSubGhzPresetOok650Async, NICEFileProtocol},
  132. // [SubBruteAttackChamberlain9bit300] =
  133. // {300000000, 9, 0, 3, FuriHalSubGhzPresetOok650Async, ChamberlainFileProtocol},
  134. // [SubBruteAttackChamberlain9bit315] =
  135. // {315000000, 9, 0, 3, FuriHalSubGhzPresetOok650Async, ChamberlainFileProtocol},
  136. // [SubBruteAttackChamberlain9bit390] =
  137. // {390000000, 9, 0, 3, FuriHalSubGhzPresetOok650Async, ChamberlainFileProtocol},
  138. // [SubBruteAttackLinear10bit300] =
  139. // {300000000, 10, 0, 5, FuriHalSubGhzPresetOok650Async, LinearFileProtocol},
  140. // [SubBruteAttackLinear10bit310] =
  141. // {300000000, 10, 0, 5, FuriHalSubGhzPresetOok650Async, LinearFileProtocol},
  142. // [SubBruteAttackLoadFile] = {0, 0, 0, 3, FuriHalSubGhzPresetOok650Async, RAWFileProtocol},
  143. //};
  144. static const char* subbrute_protocol_names[] = {
  145. [SubBruteAttackCAME12bit303] = "CAME 12bit 303MHz",
  146. [SubBruteAttackCAME12bit307] = "CAME 12bit 307MHz",
  147. [SubBruteAttackCAME12bit433] = "CAME 12bit 433MHz",
  148. [SubBruteAttackCAME12bit868] = "CAME 12bit 868MHz",
  149. [SubBruteAttackNICE12bit433] = "NICE 12bit 433MHz",
  150. [SubBruteAttackNICE12bit868] = "NICE 12bit 868MHz",
  151. [SubBruteAttackChamberlain9bit300] = "Chamberlain 9bit 300MHz",
  152. [SubBruteAttackChamberlain9bit315] = "Chamberlain 9bit 315MHz",
  153. [SubBruteAttackChamberlain9bit390] = "Chamberlain 9bit 390MHz",
  154. [SubBruteAttackLinear10bit300] = "Linear 10bit 300MHz",
  155. [SubBruteAttackLinear10bit310] = "Linear 10bit 310MHz",
  156. [SubBruteAttackLoadFile] = "BF existing dump",
  157. [SubBruteAttackTotalCount] = "Total Count",
  158. };
  159. static const char* subbrute_protocol_presets[] = {
  160. [FuriHalSubGhzPresetIDLE] = "FuriHalSubGhzPresetIDLE",
  161. [FuriHalSubGhzPresetOok270Async] = "FuriHalSubGhzPresetOok270Async",
  162. [FuriHalSubGhzPresetOok650Async] = "FuriHalSubGhzPresetOok650Async",
  163. [FuriHalSubGhzPreset2FSKDev238Async] = "FuriHalSubGhzPreset2FSKDev238Async",
  164. [FuriHalSubGhzPreset2FSKDev476Async] = "FuriHalSubGhzPreset2FSKDev476Async",
  165. [FuriHalSubGhzPresetMSK99_97KbAsync] = "FuriHalSubGhzPresetMSK99_97KbAsync",
  166. [FuriHalSubGhzPresetGFSK9_99KbAsync] = "FuriHalSubGhzPresetGFSK9_99KbAsync",
  167. };
  168. const SubBruteProtocol* subbrute_protocol_registry[] = {
  169. [SubBruteAttackCAME12bit303] = &subbrute_protocol_came_12bit_303,
  170. [SubBruteAttackCAME12bit307] = &subbrute_protocol_came_12bit_307,
  171. [SubBruteAttackCAME12bit433] = &subbrute_protocol_came_12bit_433,
  172. [SubBruteAttackCAME12bit868] = &subbrute_protocol_came_12bit_868,
  173. [SubBruteAttackNICE12bit433] = &subbrute_protocol_nice_12bit_433,
  174. [SubBruteAttackNICE12bit868] = &subbrute_protocol_nice_12bit_868,
  175. [SubBruteAttackChamberlain9bit300] = &subbrute_protocol_chamberlain_9bit_300,
  176. [SubBruteAttackChamberlain9bit315] = &subbrute_protocol_chamberlain_9bit_315,
  177. [SubBruteAttackChamberlain9bit390] = &subbrute_protocol_chamberlain_9bit_390,
  178. [SubBruteAttackLinear10bit300] = &subbrute_protocol_linear_10bit_300,
  179. [SubBruteAttackLinear10bit310] = &subbrute_protocol_linear_10bit_310,
  180. [SubBruteAttackLoadFile] = &subbrute_protocol_load_file};
  181. static const char* subbrute_protocol_file_types[] = {
  182. [CAMEFileProtocol] = "CAME",
  183. [NICEFileProtocol] = "Nice FLO",
  184. [ChamberlainFileProtocol] = "Cham_Code",
  185. [LinearFileProtocol] = "Linear",
  186. [PrincetonFileProtocol] = "Princeton",
  187. [RAWFileProtocol] = "RAW"};
  188. /**
  189. * Values to not use less memory for packet parse operations
  190. */
  191. static const char* subbrute_key_file_start_no_tail =
  192. "Filetype: Flipper SubGhz Key File\nVersion: 1\nFrequency: %u\nPreset: %s\nProtocol: %s\nBit: %d\nKey: %s\nRepeat: %d\n";
  193. static const char* subbrute_key_file_start_with_tail =
  194. "Filetype: Flipper SubGhz Key File\nVersion: 1\nFrequency: %u\nPreset: %s\nProtocol: %s\nBit: %d\nKey: %s\nTE: %d\nRepeat: %d\n";
  195. static const char* subbrute_key_small_no_tail = "Bit: %d\nKey: %s\nRepeat: %d\n";
  196. static const char* subbrute_key_small_with_tail = "Bit: %d\nKey: %s\nTE: %d\nRepeat: %d\n";
  197. const char* subbrute_protocol_name(SubBruteAttacks index) {
  198. return subbrute_protocol_names[index];
  199. }
  200. const SubBruteProtocol* subbrute_protocol(SubBruteAttacks index) {
  201. return subbrute_protocol_registry[index];
  202. }
  203. const char* subbrute_protocol_preset(FuriHalSubGhzPreset preset) {
  204. return subbrute_protocol_presets[preset];
  205. }
  206. const char* subbrute_protocol_file(SubBruteFileProtocol protocol) {
  207. return subbrute_protocol_file_types[protocol];
  208. }
  209. FuriHalSubGhzPreset subbrute_protocol_convert_preset(FuriString* preset_name) {
  210. for(size_t i = FuriHalSubGhzPresetIDLE; i < FuriHalSubGhzPresetCustom; i++) {
  211. if(furi_string_cmp_str(preset_name, subbrute_protocol_presets[i]) == 0) {
  212. return i;
  213. }
  214. }
  215. return FuriHalSubGhzPresetIDLE;
  216. }
  217. SubBruteFileProtocol subbrute_protocol_file_protocol_name(FuriString* name) {
  218. for(size_t i = CAMEFileProtocol; i < TotalFileProtocol - 1; i++) {
  219. if(furi_string_cmp_str(name, subbrute_protocol_file_types[i]) == 0) {
  220. return i;
  221. }
  222. }
  223. return RAWFileProtocol;
  224. }
  225. void subbrute_protocol_default_payload(
  226. Stream* stream,
  227. uint64_t step,
  228. uint8_t bits,
  229. uint8_t te,
  230. uint8_t repeat) {
  231. FuriString* candidate = furi_string_alloc_set_str(" ");
  232. FuriString* buffer = furi_string_alloc_printf("%16llX", step);
  233. int j = 0;
  234. for(uint8_t i = 0; i < 16; i++) {
  235. if(furi_string_get_char(buffer, i) != ' ') {
  236. furi_string_set_char(candidate, i + j, furi_string_get_char(buffer, i));
  237. } else {
  238. furi_string_set_char(candidate, i + j, '0');
  239. }
  240. if(i % 2 != 0) {
  241. j++;
  242. }
  243. }
  244. furi_string_free(buffer);
  245. #ifdef FURI_DEBUG
  246. //FURI_LOG_D(TAG, "candidate: %s, step: %lld", furi_string_get_cstr(candidate), step);
  247. #endif
  248. stream_clean(stream);
  249. if(te) {
  250. stream_write_format(
  251. stream,
  252. subbrute_key_small_with_tail,
  253. bits,
  254. furi_string_get_cstr(candidate),
  255. te,
  256. repeat);
  257. } else {
  258. stream_write_format(
  259. stream, subbrute_key_small_no_tail, bits, furi_string_get_cstr(candidate), repeat);
  260. }
  261. furi_string_free(candidate);
  262. }
  263. void subbrute_protocol_file_payload(
  264. Stream* stream,
  265. uint64_t step,
  266. uint8_t bits,
  267. uint8_t te,
  268. uint8_t repeat,
  269. uint8_t load_index,
  270. const char* file_key) {
  271. FuriString* candidate = furi_string_alloc();
  272. char subbrute_payload_byte[4];
  273. furi_string_set_str(candidate, file_key);
  274. snprintf(subbrute_payload_byte, 4, "%02X ", (uint8_t)step);
  275. furi_string_replace_at(candidate, load_index * 3, 3, subbrute_payload_byte);
  276. #ifdef FURI_DEBUG
  277. //FURI_LOG_D(TAG, "candidate: %s, step: %lld", furi_string_get_cstr(candidate), step);
  278. #endif
  279. stream_clean(stream);
  280. if(te) {
  281. stream_write_format(
  282. stream,
  283. subbrute_key_small_with_tail,
  284. bits,
  285. furi_string_get_cstr(candidate),
  286. te,
  287. repeat);
  288. } else {
  289. stream_write_format(
  290. stream, subbrute_key_small_no_tail, bits, furi_string_get_cstr(candidate), repeat);
  291. }
  292. furi_string_free(candidate);
  293. }
  294. void subbrute_protocol_default_generate_file(
  295. Stream* stream,
  296. uint32_t frequency,
  297. FuriHalSubGhzPreset preset,
  298. SubBruteFileProtocol file,
  299. uint64_t step,
  300. uint8_t bits,
  301. uint8_t te,
  302. uint8_t repeat) {
  303. FuriString* candidate = furi_string_alloc_set_str(" ");
  304. FuriString* buffer = furi_string_alloc_printf("%16llX", step);
  305. int j = 0;
  306. for(uint8_t i = 0; i < 16; i++) {
  307. if(furi_string_get_char(buffer, i) != ' ') {
  308. furi_string_set_char(candidate, i + j, furi_string_get_char(buffer, i));
  309. } else {
  310. furi_string_set_char(candidate, i + j, '0');
  311. }
  312. if(i % 2 != 0) {
  313. j++;
  314. }
  315. }
  316. furi_string_free(buffer);
  317. #ifdef FURI_DEBUG
  318. FURI_LOG_D(TAG, "candidate: %s, step: %lld", furi_string_get_cstr(candidate), step);
  319. #endif
  320. stream_clean(stream);
  321. if(te) {
  322. stream_write_format(
  323. stream,
  324. subbrute_key_file_start_with_tail,
  325. frequency,
  326. subbrute_protocol_preset(preset),
  327. subbrute_protocol_file(file),
  328. bits,
  329. furi_string_get_cstr(candidate),
  330. te,
  331. repeat);
  332. } else {
  333. stream_write_format(
  334. stream,
  335. subbrute_key_file_start_no_tail,
  336. frequency,
  337. subbrute_protocol_preset(preset),
  338. subbrute_protocol_file(file),
  339. bits,
  340. furi_string_get_cstr(candidate),
  341. repeat);
  342. }
  343. furi_string_free(candidate);
  344. }
  345. void subbrute_protocol_file_generate_file(
  346. Stream* stream,
  347. uint32_t frequency,
  348. FuriHalSubGhzPreset preset,
  349. SubBruteFileProtocol file,
  350. uint64_t step,
  351. uint8_t bits,
  352. uint8_t te,
  353. uint8_t repeat,
  354. uint8_t load_index,
  355. const char* file_key) {
  356. FuriString* candidate = furi_string_alloc();
  357. char subbrute_payload_byte[4];
  358. furi_string_set_str(candidate, file_key);
  359. snprintf(subbrute_payload_byte, 4, "%02X ", (uint8_t)step);
  360. furi_string_replace_at(candidate, load_index * 3, 3, subbrute_payload_byte);
  361. #ifdef FURI_DEBUG
  362. FURI_LOG_D(TAG, "candidate: %s, step: %lld", furi_string_get_cstr(candidate), step);
  363. #endif
  364. stream_clean(stream);
  365. if(te) {
  366. stream_write_format(
  367. stream,
  368. subbrute_key_file_start_with_tail,
  369. frequency,
  370. subbrute_protocol_preset(preset),
  371. subbrute_protocol_file(file),
  372. bits,
  373. furi_string_get_cstr(candidate),
  374. te,
  375. repeat);
  376. } else {
  377. stream_write_format(
  378. stream,
  379. subbrute_key_file_start_no_tail,
  380. frequency,
  381. subbrute_protocol_preset(preset),
  382. subbrute_protocol_file(file),
  383. bits,
  384. furi_string_get_cstr(candidate),
  385. repeat);
  386. }
  387. furi_string_free(candidate);
  388. }
  389. uint64_t subbrute_protocol_calc_max_value(SubBruteAttacks attack_type, uint8_t bits) {
  390. uint64_t max_value;
  391. if(attack_type == SubBruteAttackLoadFile) {
  392. max_value = 0x3F;
  393. } else {
  394. FuriString* max_value_s;
  395. max_value_s = furi_string_alloc();
  396. for(uint8_t i = 0; i < bits; i++) {
  397. furi_string_cat_printf(max_value_s, "1");
  398. }
  399. max_value = (uint64_t)strtol(furi_string_get_cstr(max_value_s), NULL, 2);
  400. furi_string_free(max_value_s);
  401. }
  402. return max_value;
  403. }