Willy-JL aab807ae76 Format 2 år sedan
..
.github f79de7fb29 Merge subghz_bruteforcer from https://github.com/DarkFlippers/flipperzero-subbrute 2 år sedan
.idea d552c1dd48 Add 'subghz_bruteforcer/' from commit '02a1df1d46d2a8af1f2a73cc007aa86da95570bd' 2 år sedan
.vscode d552c1dd48 Add 'subghz_bruteforcer/' from commit '02a1df1d46d2a8af1f2a73cc007aa86da95570bd' 2 år sedan
helpers d552c1dd48 Add 'subghz_bruteforcer/' from commit '02a1df1d46d2a8af1f2a73cc007aa86da95570bd' 2 år sedan
scenes d552c1dd48 Add 'subghz_bruteforcer/' from commit '02a1df1d46d2a8af1f2a73cc007aa86da95570bd' 2 år sedan
screenshots d552c1dd48 Add 'subghz_bruteforcer/' from commit '02a1df1d46d2a8af1f2a73cc007aa86da95570bd' 2 år sedan
views d552c1dd48 Add 'subghz_bruteforcer/' from commit '02a1df1d46d2a8af1f2a73cc007aa86da95570bd' 2 år sedan
.gitignore d552c1dd48 Add 'subghz_bruteforcer/' from commit '02a1df1d46d2a8af1f2a73cc007aa86da95570bd' 2 år sedan
.gitsubtree f5a64c96a8 Add trailing subdir to subtree remote files 2 år sedan
CHANGELOG.md f79de7fb29 Merge subghz_bruteforcer from https://github.com/DarkFlippers/flipperzero-subbrute 2 år sedan
LICENSE d552c1dd48 Add 'subghz_bruteforcer/' from commit '02a1df1d46d2a8af1f2a73cc007aa86da95570bd' 2 år sedan
README.md d552c1dd48 Add 'subghz_bruteforcer/' from commit '02a1df1d46d2a8af1f2a73cc007aa86da95570bd' 2 år sedan
application.fam aab807ae76 Format 2 år sedan
manifest.yml d552c1dd48 Add 'subghz_bruteforcer/' from commit '02a1df1d46d2a8af1f2a73cc007aa86da95570bd' 2 år sedan
subbrute.c d552c1dd48 Add 'subghz_bruteforcer/' from commit '02a1df1d46d2a8af1f2a73cc007aa86da95570bd' 2 år sedan
subbrute.h d552c1dd48 Add 'subghz_bruteforcer/' from commit '02a1df1d46d2a8af1f2a73cc007aa86da95570bd' 2 år sedan
subbrute_10px.png d552c1dd48 Add 'subghz_bruteforcer/' from commit '02a1df1d46d2a8af1f2a73cc007aa86da95570bd' 2 år sedan
subbrute_custom_event.h d552c1dd48 Add 'subghz_bruteforcer/' from commit '02a1df1d46d2a8af1f2a73cc007aa86da95570bd' 2 år sedan
subbrute_device.c 9329c66b56 Format 2 år sedan
subbrute_device.h d552c1dd48 Add 'subghz_bruteforcer/' from commit '02a1df1d46d2a8af1f2a73cc007aa86da95570bd' 2 år sedan
subbrute_i.h d552c1dd48 Add 'subghz_bruteforcer/' from commit '02a1df1d46d2a8af1f2a73cc007aa86da95570bd' 2 år sedan
subbrute_protocols.c d552c1dd48 Add 'subghz_bruteforcer/' from commit '02a1df1d46d2a8af1f2a73cc007aa86da95570bd' 2 år sedan
subbrute_protocols.h d552c1dd48 Add 'subghz_bruteforcer/' from commit '02a1df1d46d2a8af1f2a73cc007aa86da95570bd' 2 år sedan
subbrute_settings.c d552c1dd48 Add 'subghz_bruteforcer/' from commit '02a1df1d46d2a8af1f2a73cc007aa86da95570bd' 2 år sedan
subbrute_settings.h d552c1dd48 Add 'subghz_bruteforcer/' from commit '02a1df1d46d2a8af1f2a73cc007aa86da95570bd' 2 år sedan

README.md

SubGHz Bruteforcer Application for Flipper Zero

image

SubGhz Bruteforcer from Unleashed Firmware

Disclaimer

This software is for experimental purposes only and is not meant for any illegal activity/purposes. We do not condone illegal activity and strongly encourage keeping transmissions to legal/valid uses allowed by law.


Installation

The application is included in the standard firmware package of Unleashed Firmware. You just need to install the latest firmware.
You can also download the release and unzip/untar it to the SD Card/apps/Sub-GHz directory.

Warning

The application is not compatible with the official firmware version. Also, it has not been tested on other firmware versions other than Unleashed Firmware and OFW.

User Guide

Main Menu

image

Here you can select the protocol and frequency that will be used for bruteforce. According to our observations, CAME 12bit 433MHz is the most protocol, so it is selected by default. To identify other devices and protocols, you should inspect the device. According to the protocol, when probe a key, each value is sent 3 times. Most of the devices this works but there are devices that don't work and more repetitions are needed. The number of repetitions can be increased with the right button, the left button decreases the value. The negative side of increasing the number of repetitions will be a longer key find time.

image

Buttons

Button Action
:arrow_backward: Decrease repeat value
:arrow_up_small: Move up
:arrow_forward: Increase repeat value
:arrow_down_small: Move down
:record_button: Select protocol
:leftwards_arrow_with_hook: Close application

Supported Protocols

image

CAME

  • CAME 12bit 303MHz
  • CAME 12bit 307MHz
  • CAME 12bit 315MHz
  • CAME 12bit 433MHz
  • CAME 12bit 868MHz

NICE

  • NICE 12bit 433MHz
  • NICE 12bit 868MHz

Ansonic

  • Ansonic 12bit 433.075MHz
  • Ansonic 12bit 433.920MHz
  • Ansonic 12bit 434.075MHz

Holtek

  • Holtek HT12X 12bit FM 433.920MHz (TE: 204μs)
  • Holtek HT12X 12bit AM 433.920MHz (TE: 433μs)
  • Holtek HT12X 12bit AM 315MHz (TE: 433μs)
  • Holtek HT12X 12bit AM 868MHz (TE: 433μs)
  • Holtek HT12X 12bit AM 915MHz (TE: 433μs)

Chamberlain

  • Chamberlain 9bit 300MHz
  • Chamberlain 9bit 315MHz
  • Chamberlain 9bit 390MHz
  • Chamberlain 9bit 433MHz
  • Chamberlain 8bit 300MHz
  • Chamberlain 8bit 315MHz
  • Chamberlain 8bit 390MHz
  • Chamberlain 7bit 300MHz
  • Chamberlain 7bit 315MHz
  • Chamberlain 7bit 390MHz

Linear

  • Linear 10bit 300MHz
  • Linear 10bit 310MHz
  • Linear Delta 3 8bit 310MHz

UNILARM

Note

Only dip switch combinations, not full 25bit bruteforce

  • UNILARM 25bit 330MHz (TE: 209μs)
  • UNILARM 25bit 433MHz (TE: 209μs)

SMC5326

Note

Only dip switch combinations, not full 25bit bruteforce

  • SMC5326 25bit 330MHz (TE: 320μs)
  • SMC5326 25bit 433MHz (TE: 320μs)

PT2260

Note

Only for 8 dip switch remote, not full 24bit bruteforce

  • PT2260 24bit 315MHz (TE: 286μs)
  • PT2260 24bit 330MHz (TE: 286μs)
  • PT2260 24bit 390MHz (TE: 286μs)
  • PT2260 24bit 433MHz (TE: 286μs)

Additional

  • BF Existing dump works for most other static protocols supported by Flipper Zero