# Berbel Remote Emulator: reconstructing kitchen-hood BLE controls

> Berbel Remote Emulator recreates BFB 6bT, 8bT and 7bT remote commands on ESP32 firmware for Berbel kitchen hoods. It decodes hood status frames and exposes controls through MQTT and Home Assistant. The protocol research uses BLE captures and a Linux fake hood that pairs with real remotes to record button notifications and test status frames.

- Type: Case study
- Targets: Protocol
- Category: Independent reconstruction cases
- Relationship: Independent reconstruction project
- Sources reviewed: 2026-11-06
- Added to the catalog: 2026-11-09
- Original resource: <https://github.com/tfohlmeister/berbel-remote>
- Primary source: <https://github.com/tfohlmeister/berbel-remote/blob/2c3c6c47000802e32e0a8fe5c16e2dd74c2dbf78/REVERSE_ENGINEERING.md>
- Catalog page: <https://awesomerea.org/resources/berbel-remote-emulator-case/>
- Record JSON: <https://awesomerea.org/resources/berbel-remote-emulator-case/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/berbel-remote-emulator-case/index.md)

## Requirements & limits

- **Prerequisites:** An ESP32 board with BLE and Wi-Fi, a compatible Berbel hood and an MQTT broker are required for the firmware.
- **Prerequisites:** The fake-hood research tool requires Linux, BlueZ and a BLE adapter.
- **Testing evidence:** The author reports that the seven BFB 7bT-specific codes were read from a remote but not tried against a Skyline Edge hood.
- **License:** MIT license.

## Primary sources

1. <https://github.com/tfohlmeister/berbel-remote/blob/2c3c6c47000802e32e0a8fe5c16e2dd74c2dbf78/REVERSE_ENGINEERING.md>
2. <https://github.com/tfohlmeister/berbel-remote/blob/2c3c6c47000802e32e0a8fe5c16e2dd74c2dbf78/README.md>
3. <https://github.com/tfohlmeister/berbel-remote/blob/2c3c6c47000802e32e0a8fe5c16e2dd74c2dbf78/tools/fakehood/README.md>
4. <https://github.com/tfohlmeister/berbel-remote/blob/2c3c6c47000802e32e0a8fe5c16e2dd74c2dbf78/LICENSE>

## More in Protocols

- [KuKirin G4: decoding BLE ride-mode notifications](https://awesomerea.org/resources/kukirin-g4-ble-mode-case/index.md) · Case study
- [Mutant Brain: mapping its SysEx configuration format](https://awesomerea.org/resources/reveng-mutantbrain-case/index.md) · Case study
- [TBBT A9 mini camera: reconstructing PPPP video login](https://awesomerea.org/resources/tbbt-a9-pppp-ha-case/index.md) · Case study
- [loxone-link-dotnet: implementing Loxone Link NAT-over-CAN devices](https://awesomerea.org/resources/loxone-link-dotnet-case/index.md) · Case study
- [Polycab PSIS-3K-SM1: recovering Bluetooth telemetry for MQTT](https://awesomerea.org/resources/polycab-solar-inverter-to-mqtt-case/index.md) · Case study
- [aquacomputer-quadro-control: reconstructing Quadro USB configuration](https://awesomerea.org/resources/aquacomputer-quadro-control-case/index.md) · Case study

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.