Ei kuvausta

2 Haarat

MX b9f8c0fbcb add feron		8 kuukautta sitten
.github	c47a5cc16c Update pr-build.yaml	1 vuosi sitten
.idea	6d6f174d3f fix: pwsh script	2 vuotta sitten
helpers	1fb8063cad remove debug	10 kuukautta sitten
images	e6d3a79208 remove: screenshots from images	2 vuotta sitten
scenes	a42ff524d1 fix menu item being not reset	10 kuukautta sitten
screenshots	37348dced7 change: add manifest.yml	2 vuotta sitten
views	e29f159186 fix: `subbrute_main_view.c` invalid button	1 vuosi sitten
.deepsource.toml	2bcae57967 ci: add .deepsource.toml	1 vuosi sitten
.gitignore	e032d322cc update .gitignore	10 kuukautta sitten
CHANGELOG.md	fabc835ce2 Update CHANGELOG.md	2 vuotta sitten
LICENSE	7c5b5485e9 feat: Update Sub-GHz BruteForcer version to 3.C	1 vuosi sitten
README.md	e2d9194ce8 Update README.md	1 vuosi sitten
application.fam	d024183624 Update v3.6	2 vuotta sitten
manifest.yml	c8f18ab18d change: update manifest.yml	2 vuotta sitten
subbrute.c	7d3589d3e4 remove deprecated	1 vuosi sitten
subbrute.h	f4fb122ff0 change: convert to use OFW SDK	2 vuotta sitten
subbrute_custom_event.h	6fd7fac638 feat: Some refactoring to clean-up the code	1 vuosi sitten
subbrute_device.c	5bfb55ef51 clear debug code	10 kuukautta sitten
subbrute_device.h	7e415b26fb support save pt2262 file	10 kuukautta sitten
subbrute_i.h	1fc0390676 bump version	10 kuukautta sitten
subbrute_protocols.c	b9f8c0fbcb add feron	8 kuukautta sitten
subbrute_protocols.h	b9f8c0fbcb add feron	8 kuukautta sitten
subbrute_settings.c	ea3d6cae05 fix settings and name gen	2 vuotta sitten
subbrute_settings.h	6fd7fac638 feat: Some refactoring to clean-up the code	1 vuosi sitten

SubGHz BruteForcer Application for Flipper Zero

SubGhz BruteForcer from Unleashed Firmware

Disclaimer

This software is for experimental purposes only and is not meant for any illegal activity/purposes. We do not condone illegal activity and strongly encourage keeping transmissions to legal/valid uses allowed by law.

Installation

The application is included in the standard firmware package of Unleashed Firmware. You just need to install the latest firmware.
You can also download the release and unzip/untar it to the SD Card/apps/Sub-GHz directory.

[!WARNING]

The application has not been tested on other firmware versions other than Unleashed Firmware and OFW.

User Guide

Main Menu

Here you can select the protocol and frequency that will be used for bruteforce.

According to our observations, CAME 12bit 433MHz is the most common protocol, so it is selected by default.

To identify other devices and protocols you should inspect the device.

According to the protocol, when probe a key, each value is sent 3 times. For most of the devices this works but there are devices that don't work and more repetitions are needed.

The number of repetitions can be increased with the right button, the left button decreases the value.

But negative side of increasing the number of repetitions will be a longer key find time.

Buttons

Button	Action
:arrow_backward:	Decrease repeat value
:arrow_up_small:	Move up
:arrow_forward:	Increase repeat value
:arrow_down_small:	Move down
:record_button:	Select protocol
:leftwards_arrow_with_hook:	Close application

Supported Protocols

CAME

CAME 12bit 303MHz
CAME 12bit 307MHz
CAME 12bit 315MHz
CAME 12bit 330MHz
CAME 12bit 433MHz
CAME 12bit 868MHz

NICE

NICE 12bit 433MHz
NICE 12bit 868MHz

Ansonic

Ansonic 12bit 433.075MHz
Ansonic 12bit 433.920MHz
Ansonic 12bit 434.075MHz

Holtek

Holtek HT12X 12bit FM 433.920MHz (TE: 204μs)
Holtek HT12X 12bit AM 433.920MHz (TE: 433μs)
Holtek HT12X 12bit AM 315MHz (TE: 433μs)
Holtek HT12X 12bit AM 868MHz (TE: 433μs)
Holtek HT12X 12bit AM 915MHz (TE: 433μs)

Chamberlain

Chamberlain 9bit 300MHz
Chamberlain 9bit 315MHz
Chamberlain 9bit 318MHz
Chamberlain 9bit 390MHz
Chamberlain 9bit 433MHz
Chamberlain 8bit 300MHz
Chamberlain 8bit 315MHz
Chamberlain 8bit 390MHz
Chamberlain 7bit 300MHz
Chamberlain 7bit 315MHz
Chamberlain 7bit 390MHz

Linear

Linear 10bit 300MHz
Linear 10bit 310MHz
Linear Delta 3 8bit 310MHz

UNILARM

[!NOTE]

Only DIP switch combinations, not full 25bit bruteforce

UNILARM 25bit 330MHz (TE: 209μs)
UNILARM 25bit 433MHz (TE: 209μs)

SMC5326