Sen descrición

DerSkythe e2d9194ce8 Update README.md		hai 1 ano
.github	37436c7224 Create pr-build.yaml	hai 1 ano
.idea	6d6f174d3f fix: pwsh script	%!s(int64=2) %!d(string=hai) anos
.vscode	22ccbee7a1 setup calling pwsh and fixing ps1 script	%!s(int64=2) %!d(string=hai) anos
helpers	6fd7fac638 feat: Some refactoring to clean-up the code	hai 1 ano
images	e6d3a79208 remove: screenshots from images	%!s(int64=2) %!d(string=hai) anos
scenes	7c5b5485e9 feat: Update Sub-GHz BruteForcer version to 3.C	hai 1 ano
screenshots	37348dced7 change: add manifest.yml	%!s(int64=2) %!d(string=hai) anos
views	6fd7fac638 feat: Some refactoring to clean-up the code	hai 1 ano
.gitignore	d024183624 Update v3.6	%!s(int64=2) %!d(string=hai) anos
CHANGELOG.md	fabc835ce2 Update CHANGELOG.md	%!s(int64=2) %!d(string=hai) anos
LICENSE	7c5b5485e9 feat: Update Sub-GHz BruteForcer version to 3.C	hai 1 ano
README.md	e2d9194ce8 Update README.md	hai 1 ano
application.fam	d024183624 Update v3.6	%!s(int64=2) %!d(string=hai) anos
manifest.yml	c8f18ab18d change: update manifest.yml	%!s(int64=2) %!d(string=hai) anos
subbrute.c	6fd7fac638 feat: Some refactoring to clean-up the code	hai 1 ano
subbrute.h	f4fb122ff0 change: convert to use OFW SDK	%!s(int64=2) %!d(string=hai) anos
subbrute_custom_event.h	6fd7fac638 feat: Some refactoring to clean-up the code	hai 1 ano
subbrute_device.c	6fd7fac638 feat: Some refactoring to clean-up the code	hai 1 ano
subbrute_device.h	6fd7fac638 feat: Some refactoring to clean-up the code	hai 1 ano
subbrute_i.h	6fd7fac638 feat: Some refactoring to clean-up the code	hai 1 ano
subbrute_protocols.c	6fd7fac638 feat: Some refactoring to clean-up the code	hai 1 ano
subbrute_protocols.h	7c5b5485e9 feat: Update Sub-GHz BruteForcer version to 3.C	hai 1 ano
subbrute_settings.c	ea3d6cae05 fix settings and name gen	%!s(int64=2) %!d(string=hai) anos
subbrute_settings.h	6fd7fac638 feat: Some refactoring to clean-up the code	hai 1 ano

SubGHz BruteForcer Application for Flipper Zero

SubGhz BruteForcer from Unleashed Firmware

Disclaimer

This software is for experimental purposes only and is not meant for any illegal activity/purposes. We do not condone illegal activity and strongly encourage keeping transmissions to legal/valid uses allowed by law.

Installation

The application is included in the standard firmware package of Unleashed Firmware. You just need to install the latest firmware.
You can also download the release and unzip/untar it to the SD Card/apps/Sub-GHz directory.

[!WARNING]

The application has not been tested on other firmware versions other than Unleashed Firmware and OFW.

User Guide

Main Menu

Here you can select the protocol and frequency that will be used for bruteforce.

According to our observations, CAME 12bit 433MHz is the most common protocol, so it is selected by default.

To identify other devices and protocols you should inspect the device.

According to the protocol, when probe a key, each value is sent 3 times. For most of the devices this works but there are devices that don't work and more repetitions are needed.

The number of repetitions can be increased with the right button, the left button decreases the value.

But negative side of increasing the number of repetitions will be a longer key find time.

Buttons

Button	Action
:arrow_backward:	Decrease repeat value
:arrow_up_small:	Move up
:arrow_forward:	Increase repeat value
:arrow_down_small:	Move down
:record_button:	Select protocol
:leftwards_arrow_with_hook:	Close application

Supported Protocols

CAME

CAME 12bit 303MHz
CAME 12bit 307MHz
CAME 12bit 315MHz
CAME 12bit 330MHz
CAME 12bit 433MHz
CAME 12bit 868MHz

NICE

NICE 12bit 433MHz
NICE 12bit 868MHz

Ansonic

Ansonic 12bit 433.075MHz
Ansonic 12bit 433.920MHz
Ansonic 12bit 434.075MHz

Holtek

Holtek HT12X 12bit FM 433.920MHz (TE: 204μs)
Holtek HT12X 12bit AM 433.920MHz (TE: 433μs)
Holtek HT12X 12bit AM 315MHz (TE: 433μs)
Holtek HT12X 12bit AM 868MHz (TE: 433μs)
Holtek HT12X 12bit AM 915MHz (TE: 433μs)

Chamberlain

Chamberlain 9bit 300MHz
Chamberlain 9bit 315MHz
Chamberlain 9bit 318MHz
Chamberlain 9bit 390MHz
Chamberlain 9bit 433MHz
Chamberlain 8bit 300MHz
Chamberlain 8bit 315MHz
Chamberlain 8bit 390MHz
Chamberlain 7bit 300MHz
Chamberlain 7bit 315MHz
Chamberlain 7bit 390MHz

Linear

Linear 10bit 300MHz
Linear 10bit 310MHz
Linear Delta 3 8bit 310MHz

UNILARM

[!NOTE]

Only DIP switch combinations, not full 25bit bruteforce

UNILARM 25bit 330MHz (TE: 209μs)
UNILARM 25bit 433MHz (TE: 209μs)

SMC5326