Protocol · Case study:
akp02: reconstructing the Ajazz AKP02 display protocolC2
akp02 reconstructs the Ajazz AKP02 secondary display's USB HID protocol as a Linux Python library.
- Protocol
Reviewed deonspengler/akp02@ee4f446
Curated reverse engineering resources
5,191Evidence class
- C0full software reconstruction
- C1partial scope or analysis entry
- C2code & docs, no demo or download
- C3notes only
- ?Source unavailable or unreadable at review time
Protocols
720Protocol · Case study:
RK M75: reconstructing wired and wireless RGB controlC2
RK M75 reconstructs RGB control for the Royal Kludge RK M75 keyboard from wired USB HID captures and 2.4 GHz wireless experiments.
- Protocol
Reviewed Lightning-13/rk-m75@abf2865
Protocol · Case study:
ACiQ K18W: reconstructing a mini split's UART protocolC2
ACiQ K18W documents the UART protocol between a mini split's indoor board and TCL WBR1 Wi-Fi module.
- Protocol
Protocol · Case study:
RND Companion: reconstructing the RND Synth SysEx protocolC2
RND Companion reconstructs the Cymaforma RND Synth's SysEx control vocabulary and implements a C++ codec and companion plugin for patch seeds.
- Protocol
Reviewed Enkerli/rnd-companion@f98ebb8
Protocol · Case study:
viture-v2: a reconstructed VITURE Gen2 glasses protocol and driverC2
viture-v2 documents and implements the USB HID protocol used by VITURE Gen2 XR glasses.
- Protocol
Reviewed elasticjava/viture-v2@8b29df0
Protocol · Case study:
BikeStation: local Echelon Connect control over Bluetooth LEC1
BikeStation is a local Windows client for Echelon Connect exercise bikes built on community research into their proprietary Bluetooth LE protocol.
- Protocol
Reviewed nathanbrittin/BikeStation@690d805
Protocol · Case study:
PartyBox for Home Assistant: reconstructing JBL speaker control over BluetoothC2
PartyBox for Home Assistant replaces the JBL PartyBox phone app's control path with a Bluetooth client and MQTT entities.
- Protocol
Reviewed BaggaBruh/jbl-partybox-ha@1591ee5
Protocol · Case study:
carlinkit-cxx: Linux receiver for Carlinkit Auto Box USB messagesC2
carlinkit-cxx implements a Linux host for Carlinkit Auto Box USB dongles using their framed bulk-message protocol.
- Protocol
Reviewed jwinarske/carlinkit-cxx@28282e2
Protocol · Case study:
mchose-linux: MCHOSE HID settings protocol and Linux clientC2
mchose-linux reconstructs the MCHOSE mouse settings protocol and implements Linux CLI and GUI clients for it.
- Protocol
Reviewed alexfrih/mchose-linux@75204cc
Protocol · Case study:
K1C CFS without official Creality firmware: CFS protocol client and Klipper integrationC2
K1C CFS without official Creality firmware reconstructs part of the Creality CFS RS-485 control protocol so a K1C running a community Klipper stack can operate the filament box.
- Protocol
Reviewed tomaspakosta/k1c-cfs-klipper@127ed02
Protocol · Case study:
Open TechEd: reconstructing NanoDrop 1000 USB controlC2
Open TechEd reconstructs USB control of the Thermo Fisher NanoDrop 1000 spectrophotometer.
- Protocol
Protocol · Case study:
douze: SSL 12 USB control protocol and Linux clientC2
douze reconstructs the Solid State Logic SSL 12 USB control protocol and applies it in a Linux command-line controller and local mixer interface.
- Protocol
Reviewed xenicle/douze@3714982
Protocol · Case study:
Osmotic: a Mac client for DJI Osmo camera protocolsC1
Osmotic implements a macOS client for DJI Osmo cameras using their BLE pairing, DUML-over-UDP control and file-list protocol.
- Protocol
Reviewed smithplus/Osmotic@e5c1498
Protocol · Case study:
GogglesView: receiving DJI Goggles 3 video over USB-CC1
GogglesView receives the DJI Goggles 3 live video feed over a reverse-engineered USB-C connection on macOS.
- Protocol
Reviewed Kristian-Buriasco/gogglecast@6ab7e7b
Protocol · Case study:
Xiaomi X-WPFTB LiDAR: decoding a robot-vacuum sensor's UART framesC2
Xiaomi X-WPFTB LiDAR documents the one-way UART data format of the X-WPFTB-V2.6.2 sensor used in Xiaomi and Dreame robot vacuums.
- Protocol
Protocol · Case study:
RedMagic Cooler for macOS: a Bluetooth controller for the VC Cooler 6 ProC2
RedMagic Cooler for macOS reconstructs the REDMAGIC VC Cooler 6 Pro's Bluetooth control path in a menu bar app.
- Protocol
Protocol · Case study:
Panasonic HC-X2 / HC-X20 Remote Control: HC-ROP protocol clientC2
Panasonic HC-X2 / HC-X20 Remote Control implements a Python client for the cameras' HC-ROP/P2Control protocol.
- Protocol
Protocol · Case study:
open-m711pro: reconstructing Redragon M711 Pro USB controlC1
open-m711pro reconstructs the Redragon M711 Pro mouse's USB HID configuration exchanges from vendor-app traffic captured with usbmon and Wireshark.
- Protocol
Reviewed mateusands/open-m711pro@1746631
Protocol · Case study:
vestaboard-offline: local control of a Vestaboard displayC2
vestaboard-offline restores local control of a Vestaboard split-flap display with a Python web controller running on the board.
- Protocol
Protocol · Case study:
Better RGB: reconstructing the Tongfang/ITE8291 keyboard lighting protocolC2
Better RGB reconstructs the USB HID lighting protocol of Tongfang laptops with an ITE8291 keyboard controller and implements a Windows per-key RGB client.
- Protocol
Reviewed EpicYamo/BetterRGB@fd47ee8
Protocol · Case study:
aiowapy: a Python implementation of WhatsApp Multi-Device protocolsC1
aiowapy implements a Python client for WhatsApp Multi-Device using Noise transport, Signal sessions and a WABinary codec.
- Protocol
Reviewed Yarfer800/aiowapy@57a9296
Protocol · Case study:
redmi-buds-linux: rebuilding Redmi earbud controls over JieLi RCSPC2
redmi-buds-linux reimplements Redmi and Xiaomi earbud controls on Linux using a documented variant of JieLi RCSP over Bluetooth Classic RFCOMM.
- Protocol
Protocol · Case study:
iPod Classic LCD: recovering the display pinout and bus protocolC2
The iPod Classic LCD investigation maps the 34-pin display connector and decodes its 18-lane RGB666, 8080-series bus using logic-analyser captures and electrical measurements.
- Protocol
Protocol · Case study:
OBSBOT Tiny 3: USB control protocol investigationC2
obsbot-tiny3-protocol investigates direct USB control of the OBSBOT Tiny 3 camera.
- Protocol
Protocol · Case study:
StargateCryo: an Intel Cryo controller dashboard built on serial-protocol researchC2
StargateCryo is a Rust dashboard that monitors and controls Intel Cryo cooling controllers over a documented reverse-engineered serial protocol.
- Protocol
Reviewed StargateLabs/dashboard-for-intel-cryo-cooling-technology@4e7c92c
Protocol · Case study:
infrared: LG and Vityas remote command mappingsC2
infrared documents command mappings for LG 6710CMA family and Vityas RC-5 remotes through LIRC and irplus configuration files.
- Protocol
Reviewed radioxoma/infrared@9617966
Protocol · Case study:
Winbond Keyboard Colour: reconstructing keyboard lighting commandsC1
Winbond Keyboard Colour implements lighting control for Winbond-based keyboards on Linux using USB command bytes mapped from the original Windows software.
- Protocol
Reviewed Mqlvin/keyboard-colour@c44c7d3
Protocol · Case study:
OBOX Controller ViGEm Driver: a Windows client for the Snail OBox gamepadC2
OBOX Controller ViGEm Driver implements a Windows client for the Snail OBox Bluetooth gamepad using a documented HID protocol.
- Protocol
Reviewed ffexis/obox-controller-vigem@a8d54f3
Protocol · Case study:
OsmoFresh Quella Pro: hardware and UART protocol investigationC2
An OsmoFresh Quella Pro investigation records reconstructed PCB schematics, identified components and a UART communication model for the water dispenser.
- Protocol
Reviewed LostCacher/osmofresh-quellapro-reverse-engineering@6a51b2b
Protocol · Case study:
Colorful 2F4C:1018: reconstructing a motherboard ARGB HID interfaceC2
Colorful 2F4C:1018 reconstructs the HID commands used to drive a COLORFIRE motherboard's ARGB headers from vendor-app analysis and live probing.
- Protocol
Reviewed czw63/colorful-2f4c-openrgb@5af8761
Protocol · Case study:
Deli XiangYinBao X1: reconstructing a Bluetooth label printer protocolC2
Deli XiangYinBao X1 reconstructs the portable label printer's proprietary Bluetooth printing protocol from HCI captures and Frida observations.
- Protocol
Protocol · Case study:
KardiaMobile 6L Unlocked: a direct BLE ECG clientC2
KardiaMobile 6L Unlocked reconstructs the BLE exchange used to obtain ECG samples from the AliveCor KardiaMobile 6L.
- Protocol
Reviewed ipanalytics/KardiaMobile-6L-Unlocked-Reverse-Engineering@9f1fb7e
Protocol · Case study:
Elan 04f3:0903: reconstructing a fingerprint sensor's Linux interfaceC2
Elan 04f3:0903 reconstructs a laptop fingerprint sensor's USB interface after analysis of its Windows driver DLLs and provides a Linux capture and authentication pipeline.
- Protocol
Protocol · Case study:
FIIL 耳机控制: a Windows client for FIIL headphone BLE commandsC2
FIIL 耳机控制 implements a Windows client from reverse-engineered BLE GATT commands used by FIIL headphones.
- Protocol
Reviewed FNKG9527/fiil-pods-pc@e7a1198
Protocol · Case study:
Wireless AA Bridge: reconstructing a wireless Android Auto relayC2
Wireless AA Bridge reconstructs a wireless Android Auto relay on a spare Android phone.
- Protocol
Reviewed elezabi/wireless-aa-bridge@c93ffa0
Protocol · Case study:
atmos-lcd: a replacement client for the MasterLiquid Atmos II LCDC2
atmos-lcd is a Windows client for the Cooler Master MasterLiquid Atmos II LCD built around a reverse-engineered USB HID protocol.
- Protocol
Reviewed KastanEr/atmos-lcd@2e65f04
Protocol · Case study:
B&K 2318: reconstructing a thermal printer's serial interfaceC2
B&K 2318 documents measured behavior of a vintage thermal printer's ZI 0054 serial interface, including XON/XOFF flow control, text commands, character sets, and graphics.
- Protocol
Reviewed saschapo/bk2318-esp32@70756cf
Protocol · Case study:
TCOMAS LG600: reconstructing a cooler LCD's USB HID display protocolC2
TCOMAS LG600 reconstructs the USB HID image-transfer protocol of a 480×480 cooler LCD from vendor-app traffic.
- Protocol
Reviewed diand26/tcomas-lg600-lcd@58145f8
Protocol · Case study:
Wanderer: rebuilding sensor control over a reverse-engineered serial linkC2
Wanderer implements control software and a data plotter for an Elektrobit/Extrabit portable sensor device from around 1991.
- Protocol
Reviewed susji/wanderer@1c85cc4
Protocol · Case study:
Clockwise Calipers Data Interface: reconstructing the DTCR-02 cableC2
Clockwise Calipers Data Interface reconstructs the DTCR-02 data cable for Clockwise Tools DCLR-XX05 calipers.
- Protocol
Reviewed dthomas1202/clockwise-calipers-data-interface@7ac10a2
Protocol · Case study:
pocket_polar: WOOSIM PORTI-SM40 printer commandsC3
pocket_polar investigates command bytes for a WOOSIM PORTI-SM40 Bluetooth receipt printer.
- Protocol
Reviewed jongwony/pocket_polar@cd65eac
Protocol · Case study:
autowonder-claude-executor: reconstructing the AutoWonder executor interfaceC2
autowonder-claude-executor reconstructs AutoWonder's scheduler-to-executor interface in a Node and TypeScript daemon that runs Claude Code for dispatched tasks.
- Protocol
Protocol · Case study:
LocalAC: local Gree air-conditioner control from protocol researchC1
LocalAC reconstructs local control of a Gree Pular T3 air conditioner through its LAN protocol.
- Protocol
Reviewed AdeelGameDev/LocalAC@7b3910e
Protocol · Case study:
Panoptes: reconstructing Hik-Connect live-stream encryptionC2
Panoptes reconstructs the encryption layout of Hik-Connect live video streams for a self-hosted Hikvision DVR video wall.
- Protocol
Reviewed Batuhan-Kahraman35/panoptes@f60474f
Protocol · Case study:
mchose-linux: reconstructing MCHOSE mouse controls on LinuxC1
mchose-linux reconstructs MCHOSE A5 and AX5 Pro mouse settings on Linux from a decompiled Windows driver.
- Protocol
Reviewed Wangpinglan/mchose-linux@5f5ad5f
Protocol · Case study:
epson-scan-to-mac: reconstructing Epson panel scanning on MacsC2
epson-scan-to-mac reconstructs Epson's Scan to Computer exchange for Macs from captured printer and Event Manager traffic.
- Protocol
Protocol · Case study:
OpenMouse: reconstructing Kysona M600 V2 mouse controlC2
OpenMouse implements a macOS client for the Kysona M600 V2 mouse from recovered HID control messages.
- Protocol
Reviewed rajvosave/open-kysona-m600@d7a9787
Protocol · Case study:
WDA Konfigurator: a reconstructed Microsoft Wireless Display Adapter configuration clientC1
WDA Konfigurator reconstructs the configuration client for Microsoft Wireless Display Adapters.
- Protocol
Reviewed KumaXOXO/wireless-display-adapter-configurator@86c8726
Protocol · Case study:
irca-ble-protocol: reconstructing heater control over Bluetooth LEC2
irca-ble-protocol documents the Bluetooth LE control protocol observed on an Olle POWER-family towel rail.
- Protocol
Reviewed niklas-a/irca-ble-protocol@2711be6
Protocol · Case study:
egm6-nixie-clock: reconstructing a nixie clock's Wi-Fi protocolC2
egm6-nixie-clock reconstructs the EGM6 six-tube clock's Wi-Fi control protocol from vendor Windows-app traffic.
- Protocol
Protocol · Case study:
Guoran nixie clock: reconstructing its Bluetooth control protocolC1
Guoran nixie clock documents the BLE control protocol of GANXIN IN1204M family clocks and implements it in a Web Bluetooth app and Home Assistant integration.
- Protocol
Reviewed chiva/guoran-nixie-clock@bd2f491
Protocol · Case study:
1st Player RT LCD: reconstructing a case-display HID protocolC2
1st Player RT LCD reconstructs the USB HID control protocol for displays in 1st Player RT5, RT7, and RT9 cases.
- Protocol
Reviewed TaZ1kS/1stplayer-rt-lcd@7fc4a9b
Protocol · Case study:
Ecovacs Deebot X1: reconstructing local map and control interfacesC2
Ecovacs Deebot X1 Local Control Research documents the robot's map format, ROS messages, state stream, and control services for local operation.
- Protocol
Protocol · Case study:
MyEnergy Dashboard: reconstructing INFINITY 1000 Bluetooth controlsC2
MyEnergy Dashboard reconstructs Bluetooth control and telemetry for the INFINITY 1000 portable power station in a browser app.
- Protocol
Protocol · Case study:
sk700v-linux: a Linux display client for the Sudokoo SK700VC2
sk700v-linux drives the Sudokoo SK700V cooler LCD from Linux using its observed USB HID protocol.
- Protocol
Reviewed canoptic-vis/sk700v-linux@f80ccd7
Protocol · Case study:
OpenNoiseRep: a BLE client for the Noise REP fitness bandC2
OpenNoiseRep implements a BLE client for the Noise REP band, with desktop, menu-bar and command-line views for historical health data and local CSV or JSON export.
- Protocol
Reviewed mohammedr3za/OpenNoiseRep@ff1b8e1
Protocol · Case study:
rtchair: local control of the Rotai RT7709S massage chairC2
rtchair reconstructs local control of the Rotai RT7709S massage chair from its communication protocol.
- Protocol
Reviewed pinlo7/rtchair@c95ea87
Protocol · Case study:
zte-cpe-sms: reconstructing ZTE CPE SMS API accessC2
zte-cpe-sms reconstructs access to the internal SMS API of ZTE MC889 and related 5G CPE devices.
- Protocol
Reviewed FratteFlorian/zte-cpe-sms@fcc32d4
Protocol · Case study:
gs5-rgb: Creative Sound Blaster GS5 lighting protocolC2
gs5-rgb reconstructs the Creative Sound Blaster GS5 lighting protocol from USB captures and implements it as a Linux Python library and CLI.
- Protocol
Reviewed JRiley2025/gs5-rgb@4319840
Protocol · Case study:
Telly Remote: reconstructing TYRC-1 remote control over Bluetooth and infraredC2
Telly Remote controls a Telly TV through a Flipper Zero that emulates the TYRC-1 remote over Bluetooth HID and infrared.
- Protocol
Reviewed jonmayfield/telly-remote@f9f3505
Protocol · Case study:
Wave Buds: a client for the JBL Wave Buds control protocolC1
Wave Buds implements an Android companion for the original JBL Wave Buds using a Bluetooth control protocol documented from the author's traffic captures.
- Protocol
Reviewed 3xa228148/wavebuds@c33bb57
Protocol · Case study:
manifold-558s-ble: reconstructing testo 558s measurement messagesC2
manifold-558s-ble reconstructs the testo 558s refrigeration manifold's Bluetooth LE message format from observed traffic between the device and its phone app.
- Protocol
Reviewed damtro/manifold-558s-ble@78be99c
Protocol · Case study:
attackshark-x11prov2: decoding the X11 PRO V2 mouse configuration protocolC2
attackshark-x11prov2 reconstructs the ATTACK SHARK X11 PRO V2 mouse's HID configuration exchanges and implements a Python CLI for DPI stages, polling rate and lift-off distance.
- Protocol
Protocol · Case study:
AULA Hub: reconstructing the AULA F99 Pro keyboard protocolC1
AULA Hub reconstructs the AULA F99 Pro keyboard's wired and 2.4 GHz HID commands and uses them in a Windows control app.
- Protocol
Reviewed xx12ek/aula-f99-pro-hub@228fddb
Protocol · Case study:
hpcs330: reconstructing the Hopoo spectrometer serial protocolC2
hpcs330 implements a Python reader for the Hopoo HPCS-330 spectrometer using a USB serial protocol recovered from the vendor's Windows application.
- Protocol
Reviewed markchadwick/hpcs330@8e56990
Protocol · Case study:
LB-M8 Settings: reconstructing Lingbao M8 mouse commandsC2
LB-M8 Settings implements a browser client for the Lingbao M8 mouse using HID commands recovered from its Windows driver.
- Protocol
Reviewed Muktaditbf/lingbao-m8-linux@4b3b9ff
Protocol · Case study:
iMist: local diffuser control from a reconstructed Bluetooth protocolC2
iMist implements local Home Assistant control for an aroma diffuser whose Bluetooth command format was inferred by observing reports while its buttons were pressed.
- Protocol
Reviewed ElektroGandhi/iMist@5700d85
Protocol · Case study:
Toshiba e-STUDIO2323AM: reconstructing a PJL/JBIG print stream for CUPSC2
Toshiba e-STUDIO2323AM/2823AM CUPS driver reconstructs the printers' PJL and JBIG-1 print stream from captured Windows GDI driver output.
- Protocol
Protocol · Case study:
CustomWatch: a Prixton Life Fit companion from BLE protocol researchC2
CustomWatch implements an Android companion for the Prixton Life Fit smartwatch using a BLE protocol studied through static analysis, limited capture and one-device tests.
- Protocol
Reviewed kta41/CustomWatch@206f304
Protocol · Case study:
reticos-rgb: Speedlink RETICOS RGB mouse profile protocolC2
reticos-rgb reconstructs the Speedlink RETICOS RGB mouse's HID profile protocol from a capture of its vendor driver.
- Protocol
Reviewed inxomnyaa/reticos-rgb@4a73081
Protocol · Case study:
SPL Lab Web: NEXT LAB measurement client and device protocolC1
SPL Lab Web replaces the measurement functions of the NEXT LAB bass meter's Windows software with a Node service, browser interface and Electron app.
- Protocol
Reviewed proteinklumpen/spl-lab-web@9b6377a
Protocol · Case study:
SainSmartDDS140: a USB oscilloscope client built from protocol researchC2
SainSmartDDS140 reimplements control of the SainSmart DDS140 USB oscilloscope through its recovered USB protocol.
- Protocol
Reviewed 4noha/SainSmartDDS140@e6d06f6
Protocol · Case study:
haylou-rt-tools: reconstructing Haylou RT BLE and watch-face formatsC2
haylou-rt-tools reconstructs selected Haylou RT LS05S watch interactions and the .tbwf watch-face format from device observation and study of the Hello Haylou app.
- Protocol
Reviewed jvitorcosta/haylou-rt-tools@cfb4c22
Protocol · Case study:
DJI RC Plus 2: control protocol and gamepad bridgeC2
A DJI RC Plus 2 investigation reconstructs its control-report protocol and maps the handheld’s sticks, wheels and buttons to gamepad input.
- Protocol
Reviewed IamEmery/DJI-RC-Plus-2-TKPL2-Native-Gamepad-Bridge-for-Gaming@b1669d7
Protocol · Case study:
AK820 Center: a Linux configurator for the AJAZZ AK820 ProC1
AK820 Center implements a Linux configurator for the AJAZZ AK820 Pro keyboard using a vendor HID protocol recovered from the Windows DeviceDriver.exe.
- Protocol
Reviewed Twyx22/ak820-center@415819c
Protocol · Case study:
Komimi: a Redmi Buds 6 Lite client built on its reconstructed control protocolC1
Komimi reconstructs the Redmi Buds 6 Lite control protocol and uses it in a Windows tray client for battery status, noise control, and equalizer presets.
- Protocol
Reviewed muirbil/Komimi@f25bb77
Protocol · Case study:
Fisher & Paykel RF505BRNUX1: decoding refrigerator board trafficC2
The Fisher & Paykel RF505BRNUX1 bridge decodes two 9600-baud serial links on the refrigerator's main board and exposes door, setting, compressor, defrost, and temperature states to Home Assistant.
- Protocol
Protocol · Case study:
Lightstick Vibed Studio: reconstructing the Super Junior Ver. 2 BLE controlsC2
Lightstick Vibed Studio reconstructs BLE control of the Super Junior Ver.
- Protocol
Protocol · Case study:
IOTBT701: BLE LED strip protocol and Windows clientC1
IOTBT701 BLE LED Strip applies the protocol from the open-source lednetwf_ble integration to a Zengge-family Bluetooth light strip, checks it against the physical device and implements Windows C# clients.
- Protocol
Protocol · Case study:
Heat & Glo RC300: a Homey client for the reconstructed 433 MHz protocolC2
The Heat & Glo RC300 Homey app reimplements 433 MHz commands from the IntelliFire Plus RC300 fireplace remote.
- Protocol
Reviewed jbothe/homey-heatnglo-rc300@d5eed0f
Protocol · Case study:
APC SU1400RM2U: display pinout and LED driver reconstructionC3
An Arduino sketch reconstructs control of the APC SU1400RM2U display panel from its cable pinout and LED mapping.
- Protocol
Reviewed BiggRanger/APC-SU1400RM2U-Reverse-Engineering@502e173
Protocol · Case study:
Silverbud: Galaxy Buds3 control over a documented RFCOMM protocolC1
Silverbud implements a Windows manager for Galaxy Buds3 over Samsung's RFCOMM control channel.
- Protocol
Reviewed Sliv3er/Silverbud@fd579bb
Protocol · Case study:
hiska-keg450-lcd: reconstructing HISKA keyboard HID controlC2
hiska-keg450-lcd reconstructs Linux control of the HISKA HX-KEG450 keyboard from vendor HID traffic captured under Wine.
- Protocol
Protocol · Case study:
week-aqua-ble: reconstructing Week Aqua light control over BLEC2
week-aqua-ble reconstructs the Week Aqua P1200 Pro aquarium light's BLE commands by decompiling the Android app and recording its writes to a simulated light.
- Protocol
Protocol · Case study:
etnga-obd: mapping Toyota eTNGA vehicle diagnosticsC2
etnga-obd maps the OBD-II diagnostic surface of Toyota eTNGA vehicles, including the bZ4X, Subaru Solterra and Lexus RZ.
- Protocol
Reviewed kezarjg/etnga-obd@817da3e
Protocol · Case study:
DMR-39 Remote Bridge: reconstructing set-top-box remote controlC2
DMR-39 Remote Bridge reconstructs remote control of the SUPER DMR-39 set-top box by probing its I2C front panel and capturing NEC infrared signals.
- Protocol
Reviewed evnchn-agentic/dmr39@f1d46b5
Binary · Case study:
open-drong-display: reconstructing Drong Display USB controlC2
open-drong-display replaces the Drong Display 1CBE:0003 dongle's Windows software with an IddCx display driver using a reconstructed USB protocol.
- Binary
- Protocol
Reviewed Duoslow/open-drong-display@113feef
Protocol · Case study:
INNO X2 for macOS: reconstructing mouse control over HIDC1
INNO X2 for macOS reconstructs configuration of the VortexSeries INNO X2 PRO mouse through its vendor HID feature reports.
- Protocol
Reviewed codewithwan/innox2-mac@50500d1
Protocol · Case study:
pro2-linux: reconstructing Logitech PRO 2 LIGHTSPEED control on LinuxC2
pro2-linux reconstructs configuration of the Logitech G PRO 2 LIGHTSPEED mouse on Linux from its HID++ 2.0 exchanges and onboard profile format 0x07.
- Protocol
Reviewed opigod/pro2-linux@9855f1a
Protocol · Case study:
beam-revival: local Beam+ control from motor protocol researchC2
beam-revival reconstructs local control of the Suitable Technologies Beam+ telepresence robot after its cloud service ended.
- Protocol
Reviewed vpi/beam-revival@5dc3b6d
Protocol · Case study:
NXOSC Reborn: reconstructing Waves Nx Head Tracker BLE outputC2
NXOSC Reborn reconstructs the Waves Nx Head Tracker's BLE communication from analysis of Nxosc and captures from a physical tracker.
- Protocol
Reviewed migwag/nx-bridge@991d7cf
Protocol · Case study:
BLE LED Matrix Controller: reconstructing GIF upload for a 96×20 displayC2
BLE LED Matrix Controller investigates the BLE commands of an ATOTOZONE CI-VIALD19 96×20 LED matrix and supplies a Python uploader for GIFs and static images.
- Protocol
Protocol · Case study:
LSC Smart Connect / Battletron: reconstructing LAN lighting controlC2
LSC Smart Connect / Battletron reconstructs the desktop application's LAN lighting protocol in a Rust bridge for SignalRGB.
- Protocol
Reviewed StargateLabs/signalrgb-lsc-battletron-bridge@8b03006
Protocol · Case study:
Razer Key Light Chroma: a SignalRGB client for its lighting protocolC2
Razer Key Light Chroma adds local RGB control to SignalRGB using the lamp's documented TCP and UDP message sequence.
- Protocol
Reviewed StargateLabs/signalrgb-razer-key-light-chroma@6b7985f
Protocol · Case study:
lochinvar-native-modbus: mapping Knight boiler telemetryC2
lochinvar-native-modbus reconstructs the read-only Modbus register map exposed by Lochinvar Knight boilers through the SMART SYSTEM display's USB PC Connection port.
- Protocol
Protocol · Case study:
Cindy Band: a client for the Xiaomi Smart Band 8 BLE protocolC1
Cindy Band implements PC and Android clients for Xiaomi Smart Band 8 NFC using a documented BLE protocol.
- Protocol
Reviewed Shunamxiao/xiaomi-band8@e9f8474
Protocol · Case study:
hd60-macos: reconstructing Elgato HD60 USB control on macOSC2
hd60-macos recreates host control of the original Elgato Game Capture HD60 on macOS from USB traces of Elgato's application.
- Protocol
Reviewed fbritoferreira/hd60-macos@344b704
Protocol · Case study:
Lumalou Revival: reconstructing the lamp's encrypted BLE controlC2
Lumalou Revival reconstructs control of the Fisher-Price Lumalou lamp after its app was discontinued.
- Protocol
Reviewed dxxx/lumalou-revival@ae1ebd2
Protocol · Case study:
openedu09: reconstructing WSEDU09 oscilloscope controlC1
openedu09 reconstructs control of the Whadda WSEDU09 USB oscilloscope from analysis of the vendor software and captures from a real device.
- Protocol
Reviewed BonBear/openedu09@0b2bb55
Protocol · Case study:
Tonebook: decoding NanoCore preset SysEx commandsC2
Tonebook documents and implements MIDI control of the LIVTRA NanoCore guitar pedal from a browser.
- Protocol
Reviewed patogordo/Tonebook@c1de868