Protocol · Case study:
Resonance: reconstructing Sony headphone control on WindowsC1
Resonance reconstructs Sony headphone controls in a Windows app using a documented Bluetooth Classic MDR protocol.
- Protocol
Curated reverse engineering resources
5,191Evidence class
- C0full software reconstruction
- C1partial scope or analysis entry
- C2code & docs, no demo or download
- C3notes only
- ?Source unavailable or unreadable at review time
Protocols
720Protocol · Case study:
AtomFast → ESP32 → Web UI: reconstructing dosimeter BLE telemetryC1
AtomFast → ESP32 → Web UI implements a read-only BLE gateway for AtomFast dosimeters.
- Protocol
Protocol · Case study:
moldqueen: Mould King toy control through reconstructed BLE advertisementsC1
moldqueen controls Mould King building-block toys by encoding commands as BLE advertisements derived from a reconstructed device protocol.
- Protocol
Reviewed jrichter24/moldqueen@f5b41fc
Protocol · Case study:
DJI RC: reconstructing joystick values from DUML USB messagesC2
DJI RC Joystick Bridge reconstructs the stick-value exchange of a locked DJI RM-series controller over its DUML USB interface.
- Protocol
Reviewed gregszero/dji-rc-joystick@fc0dbff
Protocol · Case study:
Minisforum MS-A1: reconstructing embedded-controller sensor accessC2
Minisforum MS-A1 EC fan / temperature driver documents the embedded controller's sensor command exchange and implements a Linux hwmon module for CPU temperature, board temperature and three fan RPM readings.
- Protocol
Reviewed Gitii/ms-a1-fan-controller@e5a2187
Protocol · Case study:
NFC PM-Pro: reconstructing the FURUI reader's HID protocolC2
NFC PM-Pro reconstructs the FURUI NFC PM-Pro reader's USB HID command exchange and implements a Linux GUI and CLI around it.
- Protocol
Reviewed frebergguru/nfc-pmpro@fdfc29a
Protocol · Case study:
RF Power Meter V5 Companion: reconstructing the meter's serial protocolC1
RF Power Meter V5 Companion reconstructs the USB RF Power Meter V5 serial exchange and uses it in a Windows monitoring app.
- Protocol
Protocol · Case study:
miband-lit: reconstructing Mi Band 5 BLE heart-rate accessC2
miband-lit implements direct BLE communication with a Mi Band 5 to authenticate, stream heart-rate readings and send notifications or vibration commands.
- Protocol
Reviewed myselfshravan/miband-lit@fc9165c
Protocol · Case study:
Zafro AC: replacing the I4season device cloud locallyC2
zafro-ha-local replaces the cloud endpoint used by a Zafro A9092R air conditioner with a LAN server.
- Protocol
Reviewed cgstever/zafro-ha-local@400d22e
Protocol · Case study:
open-apt-flash: reconstructing the APT 860C UART flasherC2
open-apt-flash reconstructs the UART bootloader exchange used by APT Burn Tools to flash the APT 860C e-bike display.
- Protocol
Reviewed cakebomb999/open-apt-flash@f5360f2
Protocol · Case study:
MADLIONS 60 Configurator: reconstructing MAD60 USB HID configurationC1
MADLIONS 60 Configurator implements a Windows client for the MAD60 keyboard using USB HID commands reconstructed from vendor web app traffic.
- Protocol
Protocol · Case study:
ax206-usb-display-macos: driving the QDtech display over USBC2
ax206-usb-display-macos implements macOS control of a QDtech AX206-derived USB display.
- Protocol
Protocol · Case study:
SP542E MQTT ↔ BLE bridge: local control through the controller protocolC2
An MQTT-to-BLE bridge that controls the SP542E LED controller from Home Assistant using BanlanX_6xx commands.
- Protocol
Reviewed xydac/sp542e-ha-bridge@6723ee3
Protocol · Case study:
ESPHome — Technibel SCDF32C5I IR Climate: reconstructing air-conditioner infrared controlC2
ESPHome — Technibel SCDF32C5I IR Climate reconstructs the air conditioner's 48-bit infrared command format from raw captures.
- Protocol
Protocol · Case study:
Atomberg BLDC IR Remote: reconstructing fan infrared commandsC1
Atomberg BLDC IR Remote implements an Android infrared client for Atomberg ceiling fans using 38 kHz NEC commands.
- Protocol
Protocol · Case study:
GameGent: reconstructing GameSir Tarantula Pro HID configurationC2
GameGent is a Linux client for configuring GameSir Tarantula Pro controllers through a reconstructed USB HID exchange.
- Protocol
Reviewed HttpKiwi/GameGent@efa91df
Protocol · Case study:
xgecu-t48-reverse: reconstructing the T48 eMMC USB protocolC2
xgecu-t48-reverse reconstructs the XGecu T48 programmer's eMMC USB exchange from Xgpro.exe analysis and captured device traffic.
- Protocol
Protocol · Case study:
Miele XKM3000Z: reconstructing a local Zigbee appliance bridgeC2
The Miele XKM3000Z bridge decodes local Zigbee telemetry from an older Miele washing machine and publishes status, program, timing, and door events through MQTT for Home Assistant.
- Protocol
Reviewed hannes813/miele-xkm3000z-reverse-engineering@2ccca3c
Protocol · Case study:
PolyWollyWin: reconstructing ASUS AniMe Matrix HID controlC1
PolyWollyWin controls the ASUS ROG Strix Flare II Animate keyboard's AniMe Matrix through a USB HID format confirmed from captures of the official software.
- Protocol
Reviewed MikeOpitz99/PolyWollyWin@4c14981
Protocol · Case study:
gloriousctl: mapping Pixart Model I 2 mouse settingsC2
gloriousctl adds Linux control of Pixart Model I 2 mice through a hardware-mapped, write-only HID report format.
- Protocol
Reviewed zeppybabe/gloriousctl-linux@cbf041a
Protocol · Case study:
divoom-protocol: reconstructed BLE control for Divoom displaysC2
divoom-protocol implements a Python BLE client for Divoom Backpack M and TimeBox-Evo-audio displays using reconstructed framing and command sequences.
- Protocol
Reviewed orionparrott/divoom-protocol@f9b661f
Protocol · Case study:
hestia: replacing the Keemple smart-home cloudC2
hestia reimplements the Keemple gateway's cleartext 0x7e-framed protocol for local smart-home control.
- Protocol
Reviewed mateusz-klatt/hestia@5566212
Protocol · Case study:
gigabyte-gpu-lcd: reconstructing AORUS GPU LCD controlC2
gigabyte-gpu-lcd reconstructs I2C control of the LCD on a Gigabyte AORUS GeForce RTX 5090 MASTER ICE.
- Protocol
Reviewed Maheidem/gigabyte-gpu-lcd@787a1ba
Protocol · Case study:
Ricoh SP 200 Linux CUPS Driver: reconstructing the printer's USB print protocolC2
Ricoh SP 200 Linux CUPS Driver reconstructs the printer's USB print exchange from captures of its Windows driver.
- Protocol
Reviewed funinkina/Ricoh-SP200-Linux@5315cd4
Protocol · Case study:
HyperX QuadCast 2 S: reconstructing RGB control on macOSC2
HyperX QuadCast 2 S RGB control implements a macOS client for the microphone's USB HID lighting exchange.
- Protocol
Reviewed matiasromero/hyperx-quadcast-colors-utility@263bdb1
Protocol · Case study:
whoop4-ble: reconstructing Whoop 4.0 sensor data accessC2
whoop4-ble reconstructs direct BLE access to Whoop 4.0 sensor records in a Python client.
- Protocol
Reviewed andyguzmaneth/whoop4-ble@a76ad45
Protocol · Case study:
MSI Mystic Light RGB Web Control Panel: reconstructing B760M-A lighting controlC2
MSI Mystic Light RGB Web Control Panel reconstructs USB HID lighting commands for the MSI PRO B760M-A DDR4 II motherboard.
- Protocol
Protocol · Case study:
Open Trofeo LCD: implementing Thermalright Trofeo USB display controlC1
Open Trofeo LCD drives the Thermalright Trofeo Vision 9.16-inch display from Linux using documented USB transfers.
- Protocol
Reviewed Abigor-DIY/Open-Trofeo-LCD@9ecbf33
Protocol · Case study:
Soundpeats Mini Pro HS Controller: rebuilding earbud controls over BluetoothC2
Soundpeats Mini Pro HS Controller rebuilds earbud control through a Kotlin Android app and Python tool using reverse-engineered Bluetooth SPP commands.
- Protocol
Protocol · Case study:
breezyd: reconstructing local control of Twinfresh Breezy ventilatorsC1
breezyd implements local UDP/4000 control for Vents Twinfresh Breezy 160 and Elite 160 Pro ventilators.
- Protocol
Reviewed hughobrien/breezyd@a87809d
Protocol · Case study:
ebkn-m61-protocol: reconstructing biometric terminal communicationsC2
ebkn-m61-protocol documents communication with EBKN and Realand BioFace M61 biometric access terminals and supplies a Python reference listener.
- Protocol
Protocol · Case study:
Divoom Times Frame: partial cloud and local API reconstructionC2
Divoom Times Frame research maps parts of the photo frame's cloud and local HTTP command interfaces and provides Python probes for login, photo listing, file upload and local display control.
- Protocol
Reviewed konst3658-crypto/divoom-times-frame-research@70f10dc
Protocol · Case study:
labelwriter: DYMO LabelWriter protocol driversC1
labelwriter implements TypeScript drivers for DYMO LabelWriter printers around a shared command-encoding core.
Demo available · no screenshot - Protocol
Reviewed thermal-label/labelwriter@1fdbb55
Protocol · Case study:
jl-dv-viewer: reconstructing Jieli-DV camera streamingC2
jl-dv-viewer reconstructs the local streaming exchange of Jieli-DV-style Wi-Fi rearview and dash cameras in a Kotlin Android viewer.
- Protocol
Reviewed marcodelpin/jl-dv-viewer@be39bb1
Protocol · Case study:
picoscope-libusb: reconstructing PicoScope 2204A USB controlC2
picoscope-libusb reconstructs PicoScope 2204A USB control from SDK traces and device experiments.
- Protocol
Reviewed Wasabules/picoscope-libusb@8f1f469
Protocol · Case study:
pyPredator: reconstructing Predator PH18-73 RGB controlC2
pyPredator reconstructs RGB control for the Acer Predator PH18-73 keyboard from PredatorSense USB captures.
- Protocol
Reviewed ahuou/rgb_predator_PH18_73@32d58eb
Protocol · Case study:
FT9201 Linux: reconstructing fingerprint-reader USB captureC2
FT9201 Linux documents the USB exchanges needed to poll finger presence and capture a 64×80 grayscale frame from a FocalTech FT9201 reader.
- Protocol
Reviewed vitasnay-droid/ft9201-linux@8154d87
Protocol · Case study:
SP656E CLI: a BanlanX Bluetooth lighting clientC2
SP656E CLI implements a Bluetooth Low Energy client for SP656E and SP638E lighting controllers using the documented BanlanX 0x53 command format.
- Protocol
Reviewed TadejPolajnar/sp656e-cli@24d4fbf
Protocol · Case study:
Claude Code inbox socket: documenting session messages and deliveryC2
The Claude Code inbox-socket project documents the internal session messaging protocol carried over a Unix socket or Windows named pipe.
- Protocol
Protocol · Case study:
Fujitsu FGL Type A Bus Protocol: decoding an air-conditioner wired remoteC2
Fujitsu FGL Type A Bus Protocol reconstructs BWR wired-remote messages of an older Fujitsu/General air conditioner from logic-analyzer captures.
- Protocol
Reviewed thaserge-primary/AC-fujitsu-General-EZ-0001HSEFR-integration@b71b543
Protocol · Case study:
UniFi Protect: reconstructing siren and AI Horn audio controlC2
The UniFi Protect audio investigation maps private HTTP endpoints and a WebSocket talkback stream for a UNVR running Protect 7.1.x.
- Protocol
Protocol · Case study:
sr16-bridge: reconstructing SR16 smart-ring BLE history syncC2
sr16-bridge reconstructs the SR16 smart ring's vendor BLE history-sync protocol in a local Python client.
- Protocol
Reviewed mooe20-commits/sr16-bridge@0624b08
Protocol · Case study:
alpha1s: reconstructing UBTECH Alpha 1S Bluetooth controlC2
alpha1s reconstructs the UBTECH Alpha 1S robot's Bluetooth control link as a Python SDK for telemetry, servo movement and stored actions.
- Protocol
Reviewed andresjjn/alpha1s-sdk@daa6c11
Protocol · Case study:
Daybreak: rebuilding COLMI R09 BLE communication for an offline ring clientC2
Daybreak rebuilds COLMI R09 smart-ring communication in an offline Android client.
- Protocol
Reviewed reuhenbhalod/DayBreak@21dd3e3
Protocol · Case study:
USB-Endoscope: reconstructing Usee Plus USB video streamingC2
USB-Endoscope reconstructs the i4season Usee Plus endoscope’s vendor USB video protocol in a local WebUSB viewer.
- Protocol
Reviewed esdreiem/usb-endoscope@b798987
Protocol · Case study:
Cigar Oasis: reconstructing SmartHumidor cloud controlC2
The Cigar Oasis Home Assistant integration reconstructs the SmartHumidor app’s cloud calls for humidity and temperature readings and setpoint control.
- Protocol
Protocol · Case study:
qss-switch-api: reconstructing QNAP QSS switch controlC2
qss-switch-api reconstructs access to the private REST interface of a QNAP QSS-managed switch from its web UI JavaScript.
- Protocol
Reviewed Gotham-Sound/qss-switch-api@3a89625
Protocol · Case study:
NameLand: reconstructing Casio KL-A45 serial printingC2
NameLand reconstructs serial printing for the Casio KL-A45 label printer from communication observed between the device and Casio's Windows XP software.
- Protocol
Reviewed zubonturi-cloud/NameLand@1f1f581
Protocol · Case study:
dh360d: reconstructing the Darkflash cooler LCD protocolC2
dh360d reconstructs the Darkflash DH360D cooler LCD's serial protocol from traffic captured between the hardware and its Windows Electron app.
- Protocol
Reviewed clarkse/dh360d@1fd0a67
Protocol · Case study:
Sony WH-CH720N: reconstructing headset control over RFCOMMC2
Sony WH-CH720N control is reconstructed as a Linux Python client for the headset's Bluetooth Classic RFCOMM service.
- Protocol
Reviewed skaka/sony-headphones-linux@990b100
Protocol · Case study:
Kosmos CP1: reconstructing the CP2 cassette formatC2
The Kosmos CP1 toolchain reconstructs the CP2 cassette interface from a digitized real save and implements Python WAV encoding and decoding.
- Protocol
Protocol · Case study:
ISDT PB40: reconstructing a power bank's BLE protocolC2
pb40-bluetooth reconstructs the ISDT PB40/LIMETA EB40 power bank's BLE advertisement and GATT protocol from LiMeta app analysis and device captures.
- Protocol
Reviewed PetePeter/pb40-bluetooth@d6b6060
Protocol · Case study:
Jacuzzi JB1HL: decoding the J185 panel-link busC2
Jacuzzi JB1HL Panel-Link Protocol documents the RS-485 messages between a Jacuzzi J185 hot tub's topside panel and I/O board.
- Protocol
Protocol · Case study:
Tenx USB Missile Launcher: reconstructing USB control commandsC2
The Tenx USB Missile Launcher controller implements movement and firing commands in PureBasic for a specific USB device.
- Protocol
Reviewed CheshirCa/Controller-for-the-USB-Missile-Launcher@7dd4fbb
Protocol · Case study:
Crypto Kakadu Alternative: reconstructing device transfers and .kkd backupsC2
Crypto Kakadu Alternative reconstructs the Crypto Kakadu password manager's serial database transfer and .kkd backup format from analysis of its Java manager and device behavior.
- Protocol
Protocol · Case study:
alienware-m15-rgb: Linux control of the m15 R2 lighting controllersC2
alienware-m15-rgb implements Linux control of the Alienware m15 R2's per-key keyboard and chassis lighting through HID reports.
- Protocol
Reviewed Louisreed/alienware-m15-rgb@3a7bd44
Protocol · Case study:
Ideal Clima Nemo 1000: reconstructing local Tuya MCU controlC2
Ideal Clima Nemo 1000 local control replaces its Wi-Fi module with an ESP32-C3 on the CN2 connector and speaks the documented Tuya MCU UART exchange.
- Protocol
Protocol · Case study:
Switch 2 Pro Controller: bridging its USB HID reports to Windows XInputC2
Windows-Switch2-Pro-Controller reconstructs the Switch 2 Pro Controller's USB wake and HID report behavior in a Windows bridge.
- Protocol
Protocol · Case study:
cyberboard-cli: reconstructing CyberBoard R4 configuration writesC1
cyberboard-cli reconstructs the AngryMiao CyberBoard R4 configuration protocol used by AM Master.
- Protocol
Reviewed GeneralD/cyberboard-cli@c8e3be4
Protocol · Case study:
gm1356-recordings: reading a sound meter through its USB-HID protocolC2
gm1356-recordings implements a Python client for live readings and stored logs from the Benetech GM1356 sound level meter.
- Protocol
Reviewed schappim/gm1356-recordings@3b8b3ed
Protocol · Case study:
TwoTrees SK1: reconstructing the display UART interfaceC2
TwoTrees SK1 display research documents the printer's HMI UART commands and incoming touch, numeric and startup frames.
- Protocol
Protocol · Case study:
KW330 OBD Data Access: reconstructing the scanner's USB data streamC2
KW330 OBD Data Access reconstructs how the KONNWEI KW330 handheld scanner exposes live OBD data through its USB CDC serial port.
- Protocol
Protocol · Case study:
AstralPool Halo Cloud: reconstructing chlorinator cloud controlC2
AstralPool Halo Cloud reconstructs cloud control of Halo chlorinators as a Home Assistant integration.
- Protocol
Protocol · Case study:
zen-go-tui: reconstructing Zen Go USB HID controlsC2
zen-go-tui reconstructs control of the Antelope Zen Go Synergy Core audio interface through its USB HID protocol.
- Protocol
Reviewed ryodeushii/zen-go-tui@10035df
Protocol · Case study:
tinyscreen: reconstructing an ArtInChip USB display protocolC2
tinyscreen implements a Linux client for ArtInChip USB bar displays using a reconstructed device protocol.
- Protocol
Reviewed hevnsnt/artinchip-linux@f483d9a
Protocol · Case study:
WB-SG1-8G: reconstructing a signal generator's serial commandsC2
The WB-SG1-8G project documents the BG7TBL signal generator's serial protocol and implements a browser controller over Web Serial.
- Protocol
Reviewed katzenjens/wbsg1@a48faf1
Protocol · Case study:
Brother HL-4150CDN: reconstructing the XL2HB print streamC2
The Brother HL-4150CDN driver reconstructs the proprietary XL2HB print stream produced by Brother's 32-bit x86 filter.
- Protocol
Protocol · Case study:
monclub-bot: reconstructing MonClub booking requestsC2
monclub-bot reconstructs MonClub app booking exchanges from intercepted HTTPS traffic.
- Protocol
Reviewed TomPlanche/monclub-bot@7a259d9
Protocol · Case study:
glow-linux: reconstructing Spacetronik Glow Three LED controlC2
glow-linux reconstructs the Spacetronik Glow Three 27V LED controller's USB serial exchange from captured traffic.
- Protocol
Reviewed piotrgolawski/glow-linux@73a2c80
Protocol · Case study:
nanparty: reconstructing PavoTube II 6C BLE mesh controlC2
nanparty reconstructs Nanlite PavoTube II 6C control over BLE mesh and bridges MIDI controls to light settings.
- Protocol
Reviewed thebabush/nanparty@606beef
Protocol · Case study:
M3508I: reconstructing the motor RS485 protocolC2
m3508i reconstructs the M3508I motor’s half-duplex RS485 command and reply format.
- Protocol
Reviewed ChenYehuiCN/m3508i@654e068
Protocol · Case study:
KeyMission 360 Tools: reconstructing the camera's USB formatting commandC2
KeyMission 360 Tools documents and implements USB PTP control of the Nikon KeyMission 360, including the FormatStore command for its SD card.
- Protocol
Reviewed Innomen/KeyMission360Tools@6a7074d
Protocol · Case study:
Evnia: reconstructing Philips 49M2C8900 Ambiglow USB controlC2
Evnia reconstructs USB control of the Philips Evnia 49M2C8900 monitor's 44 Ambiglow LEDs in a macOS Swift library.
- Protocol
Reviewed tomasf/evnia@80e94f8
Protocol · Case study:
audeze-filter-cli: reconstructing Audeze Filter HID controlsC2
audeze-filter-cli reconstructs the Audeze Filter USB speaker's settings interface as a Python CLI.
- Protocol
Reviewed jkjuopperi/audeze-filter-cli@afff7dd
Protocol · Case study:
casio_fx: documenting Casio calculator serial transfersC2
casio_fx implements Linux serial transfers for Casio calculators and documents their section-based message exchange and CAS file structure.
- Protocol
Reviewed tarapitha/casio_fx@4f89424
Protocol · Case study:
Falmec Nuvola 90: reconstructing a 433 MHz remote protocolC2
Falmec Nuvola 90 remote research reconstructs the range hood's 433 MHz OOK control messages from captured signals.
- Protocol
Reviewed Kalmend/falmec_radio@efa48e2
Protocol · Case study:
HeronSquawk: reconstructing RYLR999 LoRa framing for a mesh networkC2
HeronSquawk reconstructs the RYLR999 LoRa module's on-air framing from SDR captures so it can exchange packets with Heltec V3.1 SX1262 nodes.
- Protocol
Reviewed HogWorxsLabs/Heron_Squawk@f14ed40
Protocol · Case study:
TP-Link SG3428: reconstructing its USB console accessC2
TP-Link SG3428 USB Reset reconstructs access to a JetStream switch's USB console through a Python raw-USB client.
- Protocol
Protocol · Case study:
ak820-linux: reconstructing AJAZZ AK820 Pro USB controlC1
ak820-linux reconstructs USB HID control for the AJAZZ AK820 Pro keyboard from the vendor's Windows configurator.
- Protocol
Reviewed hcristosm/ak820-linux@36d11e7
Protocol · Case study:
LUMIX Remote: reconstructing Panasonic S5 camera communicationC2
LUMIX Remote reconstructs Panasonic LUMIX camera control in a Python server, web interface and CLI.
- Protocol
Reviewed sapoepsilon/lumix-remote@9859776
Protocol · Case study:
fix-whxm4-voice: reconstructing WH-1000XM4 voice-pack uploadC2
fix-whxm4-voice creates replacement voice packs for Sony WH-1000XM4 headphones and uploads them over Bluetooth.
- Protocol
Reviewed aaron-p1/fix-whxm4-voice@d9c5138
Protocol · Case study:
OrangeCar: reconstructing the wired CarPlay phone sideC2
OrangeCar reconstructs the phone side of wired Apple CarPlay on an Orange Pi 5 Plus so a car displays a locally rendered dashboard.
- Protocol
Reviewed sbuysse/orangecar@31a4625
Protocol · Case study:
AirDrop-for-Everything: reimplementing AirDrop file transferC2
AirDrop-for-Everything reimplements Apple's AirDrop discovery and file transfer in a Rust core with command-line, desktop, Android and macOS interfaces.
- Protocol
Protocol · Case study:
IQOS Bar: a USB HID client for IQOS ILUMA usage countersC1
IQOS Bar implements read-only USB HID access to an IQOS ILUMA i ONE, displaying battery status and lifetime usage counters in a desktop tray or menu bar.
- Protocol
Reviewed tiritfurkan/iqos-bar@9d56260
Protocol · Case study:
Chorus: reconstructing Logitech Harmony remote programmingC2
Chorus identifies and backs up Logitech Harmony USB remotes, learns and decodes IR codes, and controls hubs over a local network.
- Protocol
Reviewed av1452/chorus@a5b5138
Protocol · Case study:
tinycoral: reconstructing the Coral Edge TPU instruction set and USB runtimeC2
tinycoral reconstructs the Google Coral Edge TPU instruction set and USB runtime for a tinygrad backend.
- Protocol
Reviewed FrederikRogalski/tinycoral@6079494
Protocol · Case study:
ninebot-go: reconstructing Ninebot app cloud communicationC2
ninebot-go reconstructs the Ninebot app's encrypted cloud communication in a Go client.
- Protocol
Reviewed likz0421/ninebot-go@d29b31d
Protocol · Case study:
open-g2-hub: a local Even G2 client built on BLE protocol findingsC2
open-g2-hub replaces the Even Realities G2 companion app with a local hub for native widgets and voice input on stock firmware.
- Protocol
Reviewed ithinkthisiscool/open-g2-hub@ffda9d6
Protocol · Case study:
Edifier Speakers BLE: reconstructing M60 and M90 speaker controlC2
Edifier Speakers BLE reconstructs the M60 and M90 speakers' BLE control protocols and uses them in a Home Assistant integration.
- Protocol
Protocol · Case study:
Halyard: reconstructing Shadow cloud PC streaming on handheldsC1
Halyard reimplements the Shadow cloud PC streaming protocol for Nintendo Switch and PS Vita homebrew.
- Protocol
Reviewed Wasabules/Halyard@ab7754b
Protocol · Case study:
Axial: mapping and controlling the DJI RS 4 Mini over BluetoothC2
Axial documents and implements Bluetooth control of the DJI RS 4 Mini gimbal.
- Protocol
Reviewed sky43535/axial@4db3bd7
Protocol · Case study:
Fiat Ducato X250: decoding the body CAN busC2
The Fiat Ducato X250 WiCAN project decodes the 2009 vehicle's 50 kbit/s body-CAN messages into speed, RPM, lights, doors and other signals.
- Protocol
Protocol · Case study:
Unrack: extending reconstructed t.racks DSP controlC1
Unrack controls the t.racks DSP 4x4 Mini Pro through WebHID, an Android USB bridge, or an ESP32-S3 Wi-Fi bridge.
- Protocol
Reviewed askz/unrack@41cc12f
Protocol · Case study:
ArmorX Toolkit: reconstructing ARMORX Pro configuration and controlC1
ArmorX Toolkit reconstructs configuration and control behavior for the BIGBIG WON ARMORX Pro controller accessory.
- Protocol
Protocol · Case study:
dsh-ls125-uv-probe: reconstructing the LS125 probe protocol and hostC2
dsh-ls125-uv-probe reconstructs the UART exchange between a LinShang LS125 meter and its UVALED-X3 UV probe and implements a replacement STM32F103 host.
- Protocol
Reviewed 2333hutao/dsh-ls125-uv-probe@c252d58
Protocol · Case study:
HT-203U: reconstructing thermal camera capture on LinuxC2
HT-203U Linux tools reconstruct video and temperature capture for the HT-203U USB thermal camera.
- Protocol
Reviewed Krastanov/ht-203u-linux@7d9eeba
Protocol · Case study:
Pair-Raught: bridging Steam Controller RF to Switch 2 USBC2
Pair-Raught implements an nRF52840 controller bridge that receives Steam Controller input over Valve's RF link and presents a Pro Controller over USB to Nintendo Switch 2.
- Protocol
Reviewed Inriconus/pair-raught@b264fa1
Protocol · Case study:
SPORTident SRR: reconstructing the short-range radio linkC2
SPORTident SRR reconstructs the 2.4 GHz radio exchange used by SIAC cards and BSF8-SRR stations to send punches.
- Protocol