# BTHackers: reconstructing the AIREC recorder’s BLE protocol

> BTHackers documents the AIREC voice recorder’s BLE GATT service and command protocol from captured sessions. Its protocol reference maps characteristic handles and the 55 aa command and aa 55 response frames. The repository includes capture parsers, a Python client, and a Flutter app; the author lists connection fixes and the file-download command as open work.

- Type: Case study
- Targets: Protocol
- Category: Independent reconstruction cases
- Relationship: Independent reconstruction project
- Sources reviewed: 2026-11-06
- Added to the catalog: 2026-11-08
- Original resource: <https://github.com/RegeneratusLabs/BTHackers>
- Primary source: <https://github.com/RegeneratusLabs/BTHackers/blob/4b4a67e2e949c5ef0348c19e907e4167da679036/docs/PROTOCOL.md>
- Catalog page: <https://awesomerea.org/resources/bthackers-airec-case/>
- Record JSON: <https://awesomerea.org/resources/bthackers-airec-case/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/bthackers-airec-case/index.md)

## Requirements & limits

- **Prerequisites:** An AIREC voice recorder and BLE access are needed for live interaction.
- **Limits:** The Python client uses bleak and is documented as needing a connection fix.
- **Limits:** The file-download command has not yet been identified.
- **License:** No licence file in the repository.

## Primary sources

1. <https://github.com/RegeneratusLabs/BTHackers/blob/4b4a67e2e949c5ef0348c19e907e4167da679036/docs/PROTOCOL.md>
2. <https://github.com/RegeneratusLabs/BTHackers/blob/4b4a67e2e949c5ef0348c19e907e4167da679036/README.md>

## More in Protocols

- [MacBook ALS: mapping five HID color channels](https://awesomerea.org/resources/macbook-als-spectral-case/index.md) · Case study
- [SteelSeries Apex 3: reconstructing RGB control over USB HID](https://awesomerea.org/resources/apex3-rgb-controller-case/index.md) · Case study
- [rfserver: reconstructing a 433 MHz light remote](https://awesomerea.org/resources/rfserver-light-remote-case/index.md) · Case study
- [ro: a client for the LB-Link BL-WR2000 repeater](https://awesomerea.org/resources/ro-bl-wr2000-case/index.md) · Case study
- [dvf3060: reconstructing Kenwood DVF-3060 front-panel control](https://awesomerea.org/resources/dvf3060-front-panel-case/index.md) · Case study
- [galaxy-buds-plus: controlling Buds Plus through RFCOMM](https://awesomerea.org/resources/galaxy-buds-plus-perl-case/index.md) · Case study

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.