subbrute_worker.c 16 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542
  1. #include "subbrute_worker_private.h"
  2. #include <furi.h>
  3. #include <string.h>
  4. #include <toolbox/stream/stream.h>
  5. #include <flipper_format.h>
  6. #include <flipper_format_i.h>
  7. #include <lib/subghz/subghz_protocol_registry.h>
  8. // use to clear custom_btn
  9. #include <lib/subghz/blocks/custom_btn.h>
  10. #define TAG "SubBruteWorker"
  11. #define SUBBRUTE_TX_TIMEOUT 6
  12. #define SUBBRUTE_MANUAL_TRANSMIT_INTERVAL 250
  13. SubBruteWorker* subbrute_worker_alloc(const SubGhzDevice* radio_device) {
  14. SubBruteWorker* instance = malloc(sizeof(SubBruteWorker));
  15. instance->state = SubBruteWorkerStateIDLE;
  16. instance->step = 0;
  17. instance->worker_running = false;
  18. instance->initiated = false;
  19. instance->last_time_tx_data = 0;
  20. instance->load_index = 0;
  21. instance->opencode = 0;
  22. instance->thread = furi_thread_alloc();
  23. furi_thread_set_name(instance->thread, "SubBruteAttackWorker");
  24. furi_thread_set_stack_size(instance->thread, 2048);
  25. furi_thread_set_context(instance->thread, instance);
  26. furi_thread_set_callback(instance->thread, subbrute_worker_thread);
  27. instance->context = NULL;
  28. instance->callback = NULL;
  29. instance->tx_timeout_ms = SUBBRUTE_TX_TIMEOUT;
  30. instance->decoder_result = NULL;
  31. instance->transmitter = NULL;
  32. instance->environment = subghz_environment_alloc();
  33. subghz_environment_set_protocol_registry(
  34. instance->environment, (void*)&subghz_protocol_registry);
  35. instance->transmit_mode = false;
  36. instance->radio_device = radio_device;
  37. return instance;
  38. }
  39. void subbrute_worker_free(SubBruteWorker* instance) {
  40. furi_assert(instance);
  41. // I don't know how to free this
  42. instance->decoder_result = NULL;
  43. if(instance->transmitter != NULL) {
  44. subghz_transmitter_free(instance->transmitter);
  45. instance->transmitter = NULL;
  46. }
  47. subghz_environment_free(instance->environment);
  48. instance->environment = NULL;
  49. furi_thread_free(instance->thread);
  50. subghz_devices_sleep(instance->radio_device);
  51. subbrute_radio_device_loader_end(instance->radio_device);
  52. free(instance);
  53. }
  54. uint64_t subbrute_worker_get_step(SubBruteWorker* instance) {
  55. return instance->step;
  56. }
  57. bool subbrute_worker_set_step(SubBruteWorker* instance, uint64_t step) {
  58. furi_assert(instance);
  59. if(!subbrute_worker_can_manual_transmit(instance)) {
  60. FURI_LOG_W(TAG, "Cannot set step during running mode");
  61. return false;
  62. }
  63. instance->step = step;
  64. return true;
  65. }
  66. void subbrute_worker_set_opencode(SubBruteWorker* instance, uint8_t opencode) {
  67. // furi_assert(instance);
  68. // if(!subbrute_worker_can_manual_transmit(instance)) {
  69. // FURI_LOG_W(TAG, "Cannot set opencode during running mode");
  70. //
  71. // return false;
  72. // }
  73. instance->opencode = opencode;
  74. // return true;
  75. }
  76. uint8_t subbrute_worker_get_opencode(SubBruteWorker* instance) {
  77. return instance->opencode;
  78. }
  79. bool subbrute_worker_get_is_pt2262(SubBruteWorker* instance) {
  80. if(instance->attack == SubBruteAttackPT226224bit315 ||
  81. instance->attack == SubBruteAttackPT226224bit418 ||
  82. instance->attack == SubBruteAttackPT226224bit430 ||
  83. instance->attack == SubBruteAttackPT226224bit4305 ||
  84. instance->attack == SubBruteAttackPT226224bit433) {
  85. return true;
  86. } else {
  87. return false;
  88. }
  89. }
  90. bool subbrute_worker_init_default_attack(
  91. SubBruteWorker* instance,
  92. SubBruteAttacks attack_type,
  93. uint64_t step,
  94. const SubBruteProtocol* protocol,
  95. uint8_t repeats) {
  96. furi_assert(instance);
  97. if(instance->worker_running) {
  98. FURI_LOG_W(TAG, "Init Worker when it's running");
  99. subbrute_worker_stop(instance);
  100. }
  101. instance->attack = attack_type;
  102. instance->frequency = protocol->frequency;
  103. instance->preset = protocol->preset;
  104. instance->file = protocol->file;
  105. instance->step = step;
  106. instance->bits = protocol->bits;
  107. instance->te = protocol->te;
  108. instance->opencode = protocol->opencode;
  109. instance->repeat = repeats;
  110. instance->load_index = 0;
  111. instance->file_key = 0;
  112. instance->two_bytes = false;
  113. instance->max_value =
  114. subbrute_protocol_calc_max_value(instance->attack, instance->bits, instance->two_bytes);
  115. instance->initiated = true;
  116. instance->state = SubBruteWorkerStateReady;
  117. subbrute_worker_send_callback(instance);
  118. #ifdef FURI_DEBUG
  119. FURI_LOG_I(
  120. TAG,
  121. "subbrute_worker_init_default_attack: %s, bits: %d, preset: %s, file: %s, te: %ld, repeat: %d, max_value: %lld",
  122. subbrute_protocol_name(instance->attack),
  123. instance->bits,
  124. subbrute_protocol_preset(instance->preset),
  125. subbrute_protocol_file(instance->file),
  126. instance->te,
  127. instance->repeat,
  128. instance->max_value);
  129. #endif
  130. return true;
  131. }
  132. bool subbrute_worker_init_file_attack(
  133. SubBruteWorker* instance,
  134. uint64_t step,
  135. uint8_t load_index,
  136. uint64_t file_key,
  137. SubBruteProtocol* protocol,
  138. uint8_t repeats,
  139. bool two_bytes) {
  140. furi_assert(instance);
  141. if(instance->worker_running) {
  142. FURI_LOG_W(TAG, "Init Worker when it's running");
  143. subbrute_worker_stop(instance);
  144. }
  145. instance->attack = SubBruteAttackLoadFile;
  146. instance->frequency = protocol->frequency;
  147. instance->preset = protocol->preset;
  148. instance->file = protocol->file;
  149. instance->step = step;
  150. instance->bits = protocol->bits;
  151. instance->te = protocol->te;
  152. instance->load_index = load_index;
  153. instance->repeat = repeats;
  154. instance->file_key = file_key;
  155. instance->two_bytes = two_bytes;
  156. instance->max_value =
  157. subbrute_protocol_calc_max_value(instance->attack, instance->bits, instance->two_bytes);
  158. instance->initiated = true;
  159. instance->state = SubBruteWorkerStateReady;
  160. subbrute_worker_send_callback(instance);
  161. #ifdef FURI_DEBUG
  162. FURI_LOG_I(
  163. TAG,
  164. "subbrute_worker_init_file_attack: %s, bits: %d, preset: %s, file: %s, te: %ld, repeat: %d, max_value: %lld, key: %llX",
  165. subbrute_protocol_name(instance->attack),
  166. instance->bits,
  167. subbrute_protocol_preset(instance->preset),
  168. subbrute_protocol_file(instance->file),
  169. instance->te,
  170. instance->repeat,
  171. instance->max_value,
  172. instance->file_key);
  173. #endif
  174. return true;
  175. }
  176. bool subbrute_worker_start(SubBruteWorker* instance) {
  177. furi_assert(instance);
  178. if(!instance->initiated) {
  179. FURI_LOG_W(TAG, "Worker not init!");
  180. return false;
  181. }
  182. if(instance->worker_running) {
  183. FURI_LOG_W(TAG, "Worker is already running!");
  184. return false;
  185. }
  186. if(instance->state != SubBruteWorkerStateReady &&
  187. instance->state != SubBruteWorkerStateFinished) {
  188. FURI_LOG_W(TAG, "Worker cannot start, invalid device state: %d", instance->state);
  189. return false;
  190. }
  191. instance->worker_running = true;
  192. furi_thread_start(instance->thread);
  193. return true;
  194. }
  195. void subbrute_worker_stop(SubBruteWorker* instance) {
  196. furi_assert(instance);
  197. if(!instance->worker_running) {
  198. return;
  199. }
  200. instance->worker_running = false;
  201. furi_thread_join(instance->thread);
  202. subghz_devices_idle(instance->radio_device);
  203. }
  204. bool subbrute_worker_transmit_current_key(SubBruteWorker* instance, uint64_t step) {
  205. furi_assert(instance);
  206. if(!instance->initiated) {
  207. FURI_LOG_W(TAG, "Worker not init!");
  208. return false;
  209. }
  210. if(instance->worker_running) {
  211. FURI_LOG_W(TAG, "Worker in running state!");
  212. return false;
  213. }
  214. if(instance->state != SubBruteWorkerStateReady &&
  215. instance->state != SubBruteWorkerStateFinished) {
  216. FURI_LOG_W(TAG, "Invalid state for running worker! State: %d", instance->state);
  217. return false;
  218. }
  219. uint32_t ticks = furi_get_tick();
  220. if((ticks - instance->last_time_tx_data) < SUBBRUTE_MANUAL_TRANSMIT_INTERVAL) {
  221. #ifdef FURI_DEBUG
  222. FURI_LOG_D(TAG, "Need to wait, current: %ld", ticks - instance->last_time_tx_data);
  223. #endif
  224. return false;
  225. }
  226. instance->last_time_tx_data = ticks;
  227. instance->step = step;
  228. bool result;
  229. instance->protocol_name = subbrute_protocol_file(instance->file);
  230. FlipperFormat* flipper_format = flipper_format_string_alloc();
  231. Stream* stream = flipper_format_get_raw_stream(flipper_format);
  232. stream_clean(stream);
  233. if(instance->attack == SubBruteAttackLoadFile) {
  234. subbrute_protocol_file_payload(
  235. stream,
  236. step,
  237. instance->bits,
  238. instance->te,
  239. instance->repeat,
  240. instance->load_index,
  241. instance->file_key,
  242. instance->two_bytes);
  243. } else {
  244. subbrute_protocol_default_payload(
  245. stream,
  246. instance->file,
  247. step,
  248. instance->bits,
  249. instance->te,
  250. instance->repeat,
  251. instance->opencode);
  252. }
  253. subbrute_worker_subghz_transmit(instance, flipper_format);
  254. result = true;
  255. #ifdef FURI_DEBUG
  256. FURI_LOG_W(TAG, "Manual transmit done");
  257. #endif
  258. flipper_format_free(flipper_format);
  259. return result;
  260. }
  261. bool subbrute_worker_is_running(SubBruteWorker* instance) {
  262. return instance->worker_running;
  263. }
  264. bool subbrute_worker_can_manual_transmit(SubBruteWorker* instance) {
  265. furi_assert(instance);
  266. if(!instance->initiated) {
  267. FURI_LOG_W(TAG, "Worker not init!");
  268. return false;
  269. }
  270. return !instance->worker_running && instance->state != SubBruteWorkerStateIDLE &&
  271. instance->state != SubBruteWorkerStateTx &&
  272. ((furi_get_tick() - instance->last_time_tx_data) > SUBBRUTE_MANUAL_TRANSMIT_INTERVAL);
  273. }
  274. void subbrute_worker_set_callback(
  275. SubBruteWorker* instance,
  276. SubBruteWorkerCallback callback,
  277. void* context) {
  278. furi_assert(instance);
  279. instance->callback = callback;
  280. instance->context = context;
  281. }
  282. void subbrute_worker_subghz_transmit(SubBruteWorker* instance, FlipperFormat* flipper_format) {
  283. const uint8_t timeout = instance->tx_timeout_ms;
  284. while(instance->transmit_mode) {
  285. furi_delay_ms(timeout);
  286. }
  287. instance->transmit_mode = true;
  288. if(instance->transmitter != NULL) {
  289. subghz_transmitter_free(instance->transmitter);
  290. instance->transmitter = NULL;
  291. }
  292. // instance->protocol_name = subbrute_protocol_file(instance->file);
  293. instance->transmitter =
  294. subghz_transmitter_alloc_init(instance->environment, instance->protocol_name);
  295. subghz_transmitter_deserialize(instance->transmitter, flipper_format);
  296. subghz_devices_reset(instance->radio_device);
  297. subghz_devices_idle(instance->radio_device);
  298. subghz_devices_load_preset(instance->radio_device, instance->preset, NULL);
  299. subghz_devices_set_frequency(
  300. instance->radio_device, instance->frequency); // TODO is freq valid check
  301. if(subghz_devices_set_tx(instance->radio_device)) {
  302. subghz_devices_start_async_tx(
  303. instance->radio_device, subghz_transmitter_yield, instance->transmitter);
  304. while(!subghz_devices_is_async_complete_tx(instance->radio_device)) {
  305. furi_delay_ms(timeout);
  306. }
  307. subghz_devices_stop_async_tx(instance->radio_device);
  308. }
  309. subghz_devices_idle(instance->radio_device);
  310. subghz_transmitter_stop(instance->transmitter);
  311. subghz_transmitter_free(instance->transmitter);
  312. instance->transmitter = NULL;
  313. instance->transmit_mode = false;
  314. Stream* stream = flipper_format_get_raw_stream(flipper_format);
  315. stream_rewind(stream);
  316. //test_read_full_stream(stream, "Transmit data");
  317. subghz_custom_btns_reset();
  318. }
  319. void subbrute_worker_send_callback(SubBruteWorker* instance) {
  320. if(instance->callback != NULL) {
  321. instance->callback(instance->context, instance->state);
  322. }
  323. }
  324. /**
  325. * Entrypoint for worker
  326. *
  327. * @param context SubBruteWorker*
  328. * @return 0 if ok
  329. */
  330. int32_t subbrute_worker_thread(void* context) {
  331. furi_assert(context);
  332. SubBruteWorker* instance = (SubBruteWorker*)context;
  333. if(!instance->worker_running) {
  334. FURI_LOG_W(TAG, "Worker is not set to running state!");
  335. return -1;
  336. }
  337. if(instance->state != SubBruteWorkerStateReady &&
  338. instance->state != SubBruteWorkerStateFinished) {
  339. FURI_LOG_W(TAG, "Invalid state for running worker! State: %d", instance->state);
  340. return -2;
  341. }
  342. #ifdef FURI_DEBUG
  343. FURI_LOG_I(TAG, "Worker start");
  344. #endif
  345. SubBruteWorkerState local_state = instance->state = SubBruteWorkerStateTx;
  346. subbrute_worker_send_callback(instance);
  347. instance->protocol_name = subbrute_protocol_file(instance->file);
  348. FlipperFormat* flipper_format = flipper_format_string_alloc();
  349. Stream* stream = flipper_format_get_raw_stream(flipper_format);
  350. while(instance->worker_running) {
  351. stream_clean(stream);
  352. if(instance->attack == SubBruteAttackLoadFile) {
  353. subbrute_protocol_file_payload(
  354. stream,
  355. instance->step,
  356. instance->bits,
  357. instance->te,
  358. instance->repeat,
  359. instance->load_index,
  360. instance->file_key,
  361. instance->two_bytes);
  362. } else {
  363. subbrute_protocol_default_payload(
  364. stream,
  365. instance->file,
  366. instance->step,
  367. instance->bits,
  368. instance->te,
  369. instance->repeat,
  370. instance->opencode);
  371. }
  372. #ifdef FURI_DEBUG
  373. //FURI_LOG_I(TAG, "Payload: %s", furi_string_get_cstr(payload));
  374. //furi_delay_ms(SUBBRUTE_MANUAL_TRANSMIT_INTERVAL / 4);
  375. #endif
  376. subbrute_worker_subghz_transmit(instance, flipper_format);
  377. if(instance->step + 1 > instance->max_value) {
  378. #ifdef FURI_DEBUG
  379. FURI_LOG_I(TAG, "Worker finished to end");
  380. #endif
  381. local_state = SubBruteWorkerStateFinished;
  382. break;
  383. }
  384. instance->step++;
  385. furi_delay_ms(instance->tx_timeout_ms);
  386. }
  387. flipper_format_free(flipper_format);
  388. instance->worker_running = false; // Because we have error states
  389. instance->state = local_state == SubBruteWorkerStateTx ? SubBruteWorkerStateReady :
  390. local_state;
  391. subbrute_worker_send_callback(instance);
  392. #ifdef FURI_DEBUG
  393. FURI_LOG_I(TAG, "Worker stop");
  394. #endif
  395. return 0;
  396. }
  397. uint8_t subbrute_worker_get_timeout(SubBruteWorker* instance) {
  398. return instance->tx_timeout_ms;
  399. }
  400. void subbrute_worker_set_timeout(SubBruteWorker* instance, uint8_t timeout) {
  401. instance->tx_timeout_ms = timeout;
  402. }
  403. uint8_t subbrute_worker_get_repeats(SubBruteWorker* instance) {
  404. return instance->repeat;
  405. }
  406. void subbrute_worker_set_repeats(SubBruteWorker* instance, uint8_t repeats) {
  407. instance->repeat = repeats;
  408. }
  409. uint32_t subbrute_worker_get_te(SubBruteWorker* instance) {
  410. return instance->te;
  411. }
  412. void subbrute_worker_set_te(SubBruteWorker* instance, uint32_t te) {
  413. instance->te = te;
  414. }
  415. bool subbrute_worker_is_tx_allowed(SubBruteWorker* instance, uint32_t value) {
  416. furi_assert(instance);
  417. bool res = false;
  418. if(!subghz_devices_is_frequency_valid(instance->radio_device, value)) {
  419. return false;
  420. } else {
  421. subghz_devices_set_frequency(instance->radio_device, value);
  422. res = subghz_devices_set_tx(instance->radio_device);
  423. subghz_devices_idle(instance->radio_device);
  424. }
  425. return res;
  426. }
  427. /*
  428. void test_read_full_stream(Stream* stream, const char* msg) {
  429. // read data
  430. // 循环读取stream中的数据每次读取一个字节(uint8_t)
  431. size_t size_2 = stream_size(stream);
  432. // read data
  433. // 循环读取stream中的数据每次读取一个字节(uint8_t)
  434. char* data_2 = (char*)malloc(size_2 + 1);
  435. for(size_t i = 0; i < size_2; i++) {
  436. stream_read(stream, (uint8_t*)&data_2[i], 1);
  437. }
  438. data_2[size_2] = '\0';
  439. FURI_LOG_W(TAG, "%s Transmit data: %s", msg, data_2);
  440. free(data_2);
  441. }
  442. */