subbrute_protocols.c 16 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545
  1. #include "subbrute_protocols.h"
  2. #include <string.h>
  3. #define TAG "SubBruteProtocols"
  4. /**
  5. * CAME 12bit 303MHz
  6. */
  7. const SubBruteProtocol subbrute_protocol_came_12bit_303 = {
  8. .frequency = 303875000,
  9. .bits = 12,
  10. .te = 0,
  11. .repeat = 3,
  12. .preset = FuriHalSubGhzPresetOok650Async,
  13. .file = CAMEFileProtocol};
  14. /**
  15. * CAME 12bit 307MHz
  16. */
  17. const SubBruteProtocol subbrute_protocol_came_12bit_307 = {
  18. .frequency = 307800000,
  19. .bits = 12,
  20. .te = 0,
  21. .repeat = 3,
  22. .preset = FuriHalSubGhzPresetOok650Async,
  23. .file = CAMEFileProtocol};
  24. /**
  25. * CAME 12bit 433MHz
  26. */
  27. const SubBruteProtocol subbrute_protocol_came_12bit_433 = {
  28. .frequency = 433920000,
  29. .bits = 12,
  30. .te = 0,
  31. .repeat = 3,
  32. .preset = FuriHalSubGhzPresetOok650Async,
  33. .file = CAMEFileProtocol};
  34. /**
  35. * CAME 12bit 868MHz
  36. */
  37. const SubBruteProtocol subbrute_protocol_came_12bit_868 = {
  38. .frequency = 868350000,
  39. .bits = 12,
  40. .te = 0,
  41. .repeat = 3,
  42. .preset = FuriHalSubGhzPresetOok650Async,
  43. .file = CAMEFileProtocol};
  44. /**
  45. * NICE 12bit 433MHz
  46. */
  47. const SubBruteProtocol subbrute_protocol_nice_12bit_433 = {
  48. .frequency = 433920000,
  49. .bits = 12,
  50. .te = 0,
  51. .repeat = 3,
  52. .preset = FuriHalSubGhzPresetOok650Async,
  53. .file = NICEFileProtocol};
  54. /**
  55. * NICE 12bit 868MHz
  56. */
  57. const SubBruteProtocol subbrute_protocol_nice_12bit_868 = {
  58. .frequency = 868350000,
  59. .bits = 12,
  60. .te = 0,
  61. .repeat = 3,
  62. .preset = FuriHalSubGhzPresetOok650Async,
  63. .file = NICEFileProtocol};
  64. /**
  65. * Chamberlain 9bit 300MHz
  66. */
  67. const SubBruteProtocol subbrute_protocol_chamberlain_9bit_300 = {
  68. .frequency = 300000000,
  69. .bits = 9,
  70. .te = 0,
  71. .repeat = 3,
  72. .preset = FuriHalSubGhzPresetOok650Async,
  73. .file = ChamberlainFileProtocol};
  74. /**
  75. * Chamberlain 9bit 315MHz
  76. */
  77. const SubBruteProtocol subbrute_protocol_chamberlain_9bit_315 = {
  78. .frequency = 315000000,
  79. .bits = 9,
  80. .te = 0,
  81. .repeat = 3,
  82. .preset = FuriHalSubGhzPresetOok650Async,
  83. .file = ChamberlainFileProtocol};
  84. /**
  85. * Chamberlain 9bit 390MHz
  86. */
  87. const SubBruteProtocol subbrute_protocol_chamberlain_9bit_390 = {
  88. .frequency = 390000000,
  89. .bits = 9,
  90. .te = 0,
  91. .repeat = 3,
  92. .preset = FuriHalSubGhzPresetOok650Async,
  93. .file = ChamberlainFileProtocol};
  94. /**
  95. * Chamberlain 9bit 433MHz
  96. */
  97. const SubBruteProtocol subbrute_protocol_chamberlain_9bit_433 = {
  98. .frequency = 433920000,
  99. .bits = 9,
  100. .te = 0,
  101. .repeat = 3,
  102. .preset = FuriHalSubGhzPresetOok650Async,
  103. .file = ChamberlainFileProtocol};
  104. /**
  105. * Chamberlain 8bit 300MHz
  106. */
  107. const SubBruteProtocol subbrute_protocol_chamberlain_8bit_300 = {
  108. .frequency = 300000000,
  109. .bits = 8,
  110. .te = 0,
  111. .repeat = 3,
  112. .preset = FuriHalSubGhzPresetOok650Async,
  113. .file = ChamberlainFileProtocol};
  114. /**
  115. * Chamberlain 8bit 315MHz
  116. */
  117. const SubBruteProtocol subbrute_protocol_chamberlain_8bit_315 = {
  118. .frequency = 315000000,
  119. .bits = 8,
  120. .te = 0,
  121. .repeat = 3,
  122. .preset = FuriHalSubGhzPresetOok650Async,
  123. .file = ChamberlainFileProtocol};
  124. /**
  125. * Chamberlain 8bit 390MHz
  126. */
  127. const SubBruteProtocol subbrute_protocol_chamberlain_8bit_390 = {
  128. .frequency = 390000000,
  129. .bits = 8,
  130. .te = 0,
  131. .repeat = 3,
  132. .preset = FuriHalSubGhzPresetOok650Async,
  133. .file = ChamberlainFileProtocol};
  134. /**
  135. * Chamberlain 7bit 300MHz
  136. */
  137. const SubBruteProtocol subbrute_protocol_chamberlain_7bit_300 = {
  138. .frequency = 300000000,
  139. .bits = 7,
  140. .te = 0,
  141. .repeat = 3,
  142. .preset = FuriHalSubGhzPresetOok650Async,
  143. .file = ChamberlainFileProtocol};
  144. /**
  145. * Chamberlain 7bit 315MHz
  146. */
  147. const SubBruteProtocol subbrute_protocol_chamberlain_7bit_315 = {
  148. .frequency = 315000000,
  149. .bits = 7,
  150. .te = 0,
  151. .repeat = 3,
  152. .preset = FuriHalSubGhzPresetOok650Async,
  153. .file = ChamberlainFileProtocol};
  154. /**
  155. * Chamberlain 7bit 390MHz
  156. */
  157. const SubBruteProtocol subbrute_protocol_chamberlain_7bit_390 = {
  158. .frequency = 390000000,
  159. .bits = 7,
  160. .te = 0,
  161. .repeat = 3,
  162. .preset = FuriHalSubGhzPresetOok650Async,
  163. .file = ChamberlainFileProtocol};
  164. /**
  165. * Linear 10bit 300MHz
  166. */
  167. const SubBruteProtocol subbrute_protocol_linear_10bit_300 = {
  168. .frequency = 300000000,
  169. .bits = 10,
  170. .te = 0,
  171. .repeat = 5,
  172. .preset = FuriHalSubGhzPresetOok650Async,
  173. .file = LinearFileProtocol};
  174. /**
  175. * Linear 10bit 310MHz
  176. */
  177. const SubBruteProtocol subbrute_protocol_linear_10bit_310 = {
  178. .frequency = 310000000,
  179. .bits = 10,
  180. .te = 0,
  181. .repeat = 5,
  182. .preset = FuriHalSubGhzPresetOok650Async,
  183. .file = LinearFileProtocol};
  184. /**
  185. * BF existing dump
  186. */
  187. const SubBruteProtocol subbrute_protocol_load_file =
  188. {0, 0, 0, 3, FuriHalSubGhzPresetOok650Async, UnknownFileProtocol};
  189. static const char* subbrute_protocol_names[] = {
  190. [SubBruteAttackCAME12bit303] = "CAME 12bit 303MHz",
  191. [SubBruteAttackCAME12bit307] = "CAME 12bit 307MHz",
  192. [SubBruteAttackCAME12bit433] = "CAME 12bit 433MHz",
  193. [SubBruteAttackCAME12bit868] = "CAME 12bit 868MHz",
  194. [SubBruteAttackNICE12bit433] = "NICE 12bit 433MHz",
  195. [SubBruteAttackNICE12bit868] = "NICE 12bit 868MHz",
  196. [SubBruteAttackChamberlain9bit300] = "Chamberlain 9bit 300MHz",
  197. [SubBruteAttackChamberlain9bit315] = "Chamberlain 9bit 315MHz",
  198. [SubBruteAttackChamberlain9bit390] = "Chamberlain 9bit 390MHz",
  199. [SubBruteAttackChamberlain9bit433] = "Chamberlain 9bit 433MHz",
  200. [SubBruteAttackChamberlain8bit300] = "Chamberlain 8bit 300MHz",
  201. [SubBruteAttackChamberlain8bit315] = "Chamberlain 8bit 315MHz",
  202. [SubBruteAttackChamberlain8bit390] = "Chamberlain 8bit 390MHz",
  203. [SubBruteAttackChamberlain7bit300] = "Chamberlain 7bit 300MHz",
  204. [SubBruteAttackChamberlain7bit315] = "Chamberlain 7bit 315MHz",
  205. [SubBruteAttackChamberlain7bit390] = "Chamberlain 7bit 390MHz",
  206. [SubBruteAttackLinear10bit300] = "Linear 10bit 300MHz",
  207. [SubBruteAttackLinear10bit310] = "Linear 10bit 310MHz",
  208. [SubBruteAttackLoadFile] = "BF existing dump",
  209. [SubBruteAttackTotalCount] = "Total Count",
  210. };
  211. static const char* subbrute_protocol_presets[] = {
  212. [FuriHalSubGhzPresetIDLE] = "FuriHalSubGhzPresetIDLE",
  213. [FuriHalSubGhzPresetOok270Async] = "FuriHalSubGhzPresetOok270Async",
  214. [FuriHalSubGhzPresetOok650Async] = "FuriHalSubGhzPresetOok650Async",
  215. [FuriHalSubGhzPreset2FSKDev238Async] = "FuriHalSubGhzPreset2FSKDev238Async",
  216. [FuriHalSubGhzPreset2FSKDev476Async] = "FuriHalSubGhzPreset2FSKDev476Async",
  217. [FuriHalSubGhzPresetMSK99_97KbAsync] = "FuriHalSubGhzPresetMSK99_97KbAsync",
  218. [FuriHalSubGhzPresetGFSK9_99KbAsync] = "FuriHalSubGhzPresetGFSK9_99KbAsync",
  219. };
  220. const SubBruteProtocol* subbrute_protocol_registry[] = {
  221. [SubBruteAttackCAME12bit303] = &subbrute_protocol_came_12bit_303,
  222. [SubBruteAttackCAME12bit307] = &subbrute_protocol_came_12bit_307,
  223. [SubBruteAttackCAME12bit433] = &subbrute_protocol_came_12bit_433,
  224. [SubBruteAttackCAME12bit868] = &subbrute_protocol_came_12bit_868,
  225. [SubBruteAttackNICE12bit433] = &subbrute_protocol_nice_12bit_433,
  226. [SubBruteAttackNICE12bit868] = &subbrute_protocol_nice_12bit_868,
  227. [SubBruteAttackChamberlain9bit300] = &subbrute_protocol_chamberlain_9bit_300,
  228. [SubBruteAttackChamberlain9bit315] = &subbrute_protocol_chamberlain_9bit_315,
  229. [SubBruteAttackChamberlain9bit390] = &subbrute_protocol_chamberlain_9bit_390,
  230. [SubBruteAttackChamberlain9bit433] = &subbrute_protocol_chamberlain_9bit_433,
  231. [SubBruteAttackChamberlain8bit300] = &subbrute_protocol_chamberlain_8bit_300,
  232. [SubBruteAttackChamberlain8bit315] = &subbrute_protocol_chamberlain_8bit_315,
  233. [SubBruteAttackChamberlain8bit390] = &subbrute_protocol_chamberlain_8bit_390,
  234. [SubBruteAttackChamberlain7bit300] = &subbrute_protocol_chamberlain_7bit_300,
  235. [SubBruteAttackChamberlain7bit315] = &subbrute_protocol_chamberlain_7bit_315,
  236. [SubBruteAttackChamberlain7bit390] = &subbrute_protocol_chamberlain_7bit_390,
  237. [SubBruteAttackLinear10bit300] = &subbrute_protocol_linear_10bit_300,
  238. [SubBruteAttackLinear10bit310] = &subbrute_protocol_linear_10bit_310,
  239. [SubBruteAttackLoadFile] = &subbrute_protocol_load_file};
  240. static const char* subbrute_protocol_file_types[] = {
  241. [CAMEFileProtocol] = "CAME",
  242. [NICEFileProtocol] = "Nice FLO",
  243. [ChamberlainFileProtocol] = "Cham_Code",
  244. [LinearFileProtocol] = "Linear",
  245. [PrincetonFileProtocol] = "Princeton",
  246. [RAWFileProtocol] = "RAW",
  247. [BETTFileProtocol] = "BETT",
  248. [ClemsaFileProtocol] = "Clemsa",
  249. [DoitrandFileProtocol] = "Doitrand",
  250. [GateTXFileProtocol] = "GateTX",
  251. [MagellanFileProtocol] = "Magellan",
  252. [IntertechnoV3FileProtocol] = "Intertechno_V3",
  253. [UnknownFileProtocol] = "Unknown"};
  254. /**
  255. * Values to not use less memory for packet parse operations
  256. */
  257. static const char* subbrute_key_file_start_no_tail =
  258. "Filetype: Flipper SubGhz Key File\nVersion: 1\nFrequency: %u\nPreset: %s\nProtocol: %s\nBit: %d\nKey: %s\nRepeat: %d\n";
  259. static const char* subbrute_key_file_start_with_tail =
  260. "Filetype: Flipper SubGhz Key File\nVersion: 1\nFrequency: %u\nPreset: %s\nProtocol: %s\nBit: %d\nKey: %s\nTE: %d\nRepeat: %d\n";
  261. static const char* subbrute_key_small_no_tail = "Bit: %d\nKey: %s\nRepeat: %d\n";
  262. static const char* subbrute_key_small_with_tail = "Bit: %d\nKey: %s\nTE: %d\nRepeat: %d\n";
  263. const char* subbrute_protocol_name(SubBruteAttacks index) {
  264. return subbrute_protocol_names[index];
  265. }
  266. const SubBruteProtocol* subbrute_protocol(SubBruteAttacks index) {
  267. return subbrute_protocol_registry[index];
  268. }
  269. uint8_t subbrute_protocol_repeats_count(SubBruteAttacks index) {
  270. return subbrute_protocol_registry[index]->repeat;
  271. }
  272. const char* subbrute_protocol_preset(FuriHalSubGhzPreset preset) {
  273. return subbrute_protocol_presets[preset];
  274. }
  275. const char* subbrute_protocol_file(SubBruteFileProtocol protocol) {
  276. return subbrute_protocol_file_types[protocol];
  277. }
  278. FuriHalSubGhzPreset subbrute_protocol_convert_preset(FuriString* preset_name) {
  279. for(size_t i = FuriHalSubGhzPresetIDLE; i < FuriHalSubGhzPresetCustom; i++) {
  280. if(furi_string_cmp_str(preset_name, subbrute_protocol_presets[i]) == 0) {
  281. return i;
  282. }
  283. }
  284. return FuriHalSubGhzPresetIDLE;
  285. }
  286. SubBruteFileProtocol subbrute_protocol_file_protocol_name(FuriString* name) {
  287. for(size_t i = CAMEFileProtocol; i < TotalFileProtocol - 1; i++) {
  288. if(furi_string_cmp_str(name, subbrute_protocol_file_types[i]) == 0) {
  289. return i;
  290. }
  291. }
  292. return UnknownFileProtocol;
  293. }
  294. void subbrute_protocol_default_payload(
  295. Stream* stream,
  296. uint64_t step,
  297. uint8_t bits,
  298. uint8_t te,
  299. uint8_t repeat) {
  300. FuriString* candidate = furi_string_alloc_set_str(" ");
  301. FuriString* buffer = furi_string_alloc_printf("%16llX", step);
  302. int j = 0;
  303. for(uint8_t i = 0; i < 16; i++) {
  304. if(furi_string_get_char(buffer, i) != ' ') {
  305. furi_string_set_char(candidate, i + j, furi_string_get_char(buffer, i));
  306. } else {
  307. furi_string_set_char(candidate, i + j, '0');
  308. }
  309. if(i % 2 != 0) {
  310. j++;
  311. }
  312. }
  313. furi_string_free(buffer);
  314. #ifdef FURI_DEBUG
  315. FURI_LOG_D(
  316. TAG,
  317. "candidate: %s, step: %lld, repeat: %d, te: %s",
  318. furi_string_get_cstr(candidate),
  319. step,
  320. repeat,
  321. te ? "true" : "false");
  322. #endif
  323. stream_clean(stream);
  324. if(te) {
  325. stream_write_format(
  326. stream,
  327. subbrute_key_small_with_tail,
  328. bits,
  329. furi_string_get_cstr(candidate),
  330. te,
  331. repeat);
  332. } else {
  333. stream_write_format(
  334. stream, subbrute_key_small_no_tail, bits, furi_string_get_cstr(candidate), repeat);
  335. }
  336. furi_string_free(candidate);
  337. }
  338. void subbrute_protocol_file_payload(
  339. Stream* stream,
  340. uint64_t step,
  341. uint8_t bits,
  342. uint8_t te,
  343. uint8_t repeat,
  344. uint8_t load_index,
  345. const char* file_key) {
  346. FuriString* candidate = furi_string_alloc();
  347. char subbrute_payload_byte[4];
  348. furi_string_set_str(candidate, file_key);
  349. snprintf(subbrute_payload_byte, 4, "%02X ", (uint8_t)step);
  350. furi_string_replace_at(candidate, load_index * 3, 3, subbrute_payload_byte);
  351. #ifdef FURI_DEBUG
  352. FURI_LOG_D(
  353. TAG,
  354. "candidate: %s, step: %lld, repeat: %d, te: %s",
  355. furi_string_get_cstr(candidate),
  356. step,
  357. repeat,
  358. te ? "true" : "false");
  359. #endif
  360. stream_clean(stream);
  361. if(te) {
  362. stream_write_format(
  363. stream,
  364. subbrute_key_small_with_tail,
  365. bits,
  366. furi_string_get_cstr(candidate),
  367. te,
  368. repeat);
  369. } else {
  370. stream_write_format(
  371. stream, subbrute_key_small_no_tail, bits, furi_string_get_cstr(candidate), repeat);
  372. }
  373. furi_string_free(candidate);
  374. }
  375. void subbrute_protocol_default_generate_file(
  376. Stream* stream,
  377. uint32_t frequency,
  378. FuriHalSubGhzPreset preset,
  379. SubBruteFileProtocol file,
  380. uint64_t step,
  381. uint8_t bits,
  382. uint8_t te,
  383. uint8_t repeat) {
  384. FuriString* candidate = furi_string_alloc_set_str(" ");
  385. FuriString* buffer = furi_string_alloc_printf("%16llX", step);
  386. int j = 0;
  387. for(uint8_t i = 0; i < 16; i++) {
  388. if(furi_string_get_char(buffer, i) != ' ') {
  389. furi_string_set_char(candidate, i + j, furi_string_get_char(buffer, i));
  390. } else {
  391. furi_string_set_char(candidate, i + j, '0');
  392. }
  393. if(i % 2 != 0) {
  394. j++;
  395. }
  396. }
  397. furi_string_free(buffer);
  398. #ifdef FURI_DEBUG
  399. FURI_LOG_D(TAG, "candidate: %s, step: %lld", furi_string_get_cstr(candidate), step);
  400. #endif
  401. stream_clean(stream);
  402. if(te) {
  403. stream_write_format(
  404. stream,
  405. subbrute_key_file_start_with_tail,
  406. frequency,
  407. subbrute_protocol_preset(preset),
  408. subbrute_protocol_file(file),
  409. bits,
  410. furi_string_get_cstr(candidate),
  411. te,
  412. repeat);
  413. } else {
  414. stream_write_format(
  415. stream,
  416. subbrute_key_file_start_no_tail,
  417. frequency,
  418. subbrute_protocol_preset(preset),
  419. subbrute_protocol_file(file),
  420. bits,
  421. furi_string_get_cstr(candidate),
  422. repeat);
  423. }
  424. furi_string_free(candidate);
  425. }
  426. void subbrute_protocol_file_generate_file(
  427. Stream* stream,
  428. uint32_t frequency,
  429. FuriHalSubGhzPreset preset,
  430. SubBruteFileProtocol file,
  431. uint64_t step,
  432. uint8_t bits,
  433. uint8_t te,
  434. uint8_t repeat,
  435. uint8_t load_index,
  436. bool two_bytes,
  437. uint64_t file_key) {
  438. FuriString* candidate = furi_string_alloc();
  439. char subbrute_payload_byte[8];
  440. furi_string_set_str(candidate, file_key);
  441. for(int8_t shift = 8 * sizeof(step) - 4; shift >= 0; shift -= 4) {
  442. uint8_t hexDigit = (step >> shift) & 0xF;
  443. snprintf(subbrute_payload_byte, 4, "%02X ", hexDigit);
  444. if(((shift & 0xF) == 0) && (shift > 0)) {
  445. //ptr->print(" ");
  446. }
  447. }
  448. furi_string_replace_at(candidate, load_index * 3, 3, subbrute_payload_byte);
  449. #ifdef FURI_DEBUG
  450. FURI_LOG_D(TAG, "candidate: %s, step: %lld", furi_string_get_cstr(candidate), step);
  451. #endif
  452. stream_clean(stream);
  453. if(te) {
  454. stream_write_format(
  455. stream,
  456. subbrute_key_file_start_with_tail,
  457. frequency,
  458. subbrute_protocol_preset(preset),
  459. subbrute_protocol_file(file),
  460. bits,
  461. furi_string_get_cstr(candidate),
  462. te,
  463. repeat);
  464. } else {
  465. stream_write_format(
  466. stream,
  467. subbrute_key_file_start_no_tail,
  468. frequency,
  469. subbrute_protocol_preset(preset),
  470. subbrute_protocol_file(file),
  471. bits,
  472. furi_string_get_cstr(candidate),
  473. repeat);
  474. }
  475. furi_string_free(candidate);
  476. }
  477. uint64_t subbrute_protocol_calc_max_value(SubBruteAttacks attack_type, uint8_t bits) {
  478. uint64_t max_value;
  479. if(attack_type == SubBruteAttackLoadFile) {
  480. max_value = 0xFFFF;
  481. } else {
  482. FuriString* max_value_s;
  483. max_value_s = furi_string_alloc();
  484. for(uint8_t i = 0; i < bits; i++) {
  485. furi_string_cat_printf(max_value_s, "1");
  486. }
  487. max_value = (uint64_t)strtol(furi_string_get_cstr(max_value_s), NULL, 2);
  488. furi_string_free(max_value_s);
  489. }
  490. return max_value;
  491. }