Protocol · Case study:
AK820 Pro Modder implements macOS control of the Epomaker and Ajazz AK820 Pro keyboard through a Rust HID protocol library shared by a Tauri app and CLI.
Reviewed wsclx/ak820pro-modder@55a2ca2
Protocol · Case study:
dj-midi-sender reconstructs the Pioneer Pro DJ Link tempo exchange and bridges it to MIDI clock.
Protocol · Case study:
A protocol study and Python client reconstruct the OxyII Bluetooth LE link used by the Wellue O2Ring-S T8520 pulse oximeter.
Reviewed nglessner/o2ring-s-protocol@8a1d603
Protocol · Case study:
Blackmacro-lib reconstructs the Blackmagic Speed Editor USB HID exchange in reference MicroPython firmware.
Reviewed KipJM/blackmacro-lib@c903b78
Protocol · Case study:
libfprint Goodix SPI Driver reconstructs support for the Goodix GDIX51C0 fingerprint sensor on Linux.
Protocol · Case study:
A Python toolkit and protocol study reconstruct Insta360 GO Ultra control over Wi-Fi TCP port 6666.
Protocol · Case study:
A Linux userspace daemon restores the Chuwi CoreBook X left speaker by configuring its AW88298 amplifier over I2C and mirroring the Conexant SN6180 HDA stream.
Protocol · Case study:
LIBREPODS-RS implements the AirPods Apple Accessory Protocol in Rust over Bluetooth L2CAP.
Reviewed brianpht/librepods-rs@fc50c5a
Protocol · Case study:
Blue Star AC → ESPHome reconstructs the UART protocol of Blue Star smart-ready air conditioners and implements local control on an ESP32-C3.
Reviewed Vikk20/bluestar-ac-esphome@123ad20
Protocol · Case study:
Intel NUC M15 Light Bar Control for Linux reconstructs the WMI commands used to set the laptop's front RGB light bar.
Binary · Case study:
libfprint-microarray reconstructs the USB control workflow of the MicroarrayTechnology MAFP fingerprint reader as a Linux libfprint driver.
Reviewed jdillon/libfprint-microarray@82cd97e
Binary · Case study:
ntrig-calib reconstructs the Surface Pro 3 N-Trig digitizer's calibration exchange as a Linux Python script.
Protocol · Case study:
even-utils explores the Even Realities G1 glasses protocol through an Android app.
Reviewed radioegor146/even-utils@9339a01
Protocol · Case study:
The Opel Insignia A Climatronic panel project investigates control of a 2015 facelift climate panel over LIN.
Reviewed ufnalski/lin_bus_insignia_lift_climatronic_panel_g431kb@a366e56
Protocol · Case study:
An STM32G431KB project investigates LIN bus control of a 2009 Opel Insignia climate-control panel.
Reviewed ufnalski/lin_bus_insignia_climatronic_panel_g431kb@1560d35
Protocol · Case study:
Peugeot 3008 II air conditioning unit investigates CAN control of the vehicle's climate module using brute-force frame-ID exploration.
Reviewed ufnalski/peugeot_3008_air_conditioning_g431kb@c6b4e4d
Protocol · Case study:
BMW E92 CAN Live Data investigates CAN and OBD-II messages from a 2007 BMW E92 335d with an EDC16CP35 ECU.
Reviewed Rafals/E92-CAN-LiveData@8a898d7
Protocol · Case study:
Simplesoft RP5-TY-101 documents the function IDs and payload layouts used by a Toyota CAN interface box for aftermarket head units.
Reviewed zugetor/simplesoft-canbus-box-reverse-engineer@85394e4
Protocol · Case study:
The BMW G08 heater blower project uses an STM32G431KB LIN master node to investigate which payload fields track blower drive voltage, current and fan speed.
Reviewed ufnalski/lin_bus_bmw_g08_heater_blower_g431kb@acdc8f7
Protocol · Case study:
brscanner implements a Go USB client for scanning with the Brother DCP-1512E from an investigated device protocol.
Reviewed maciekmm/brscanner@b87c2d6
Protocol · Case study:
SC75823 reconstructs Arduino control of the H-Buster HBD-2300MP front-panel display.
Reviewed lucas458/SC75823@44786bd
Protocol · Case study:
Gree-Wired-Proto maps the RS-485 exchange between a Gree air-conditioner indoor unit and an XK19 wired controller.
Protocol · Case study:
Nuga library implements Go control of BYK916 NuPhy keyboards through a reconstructed USB HID protocol.
Reviewed mishamyrt/nuga-lib@497e8ed
Protocol · Case study:
Razer Nari Battery Level implements a USB HID exchange to read the headset's reported battery voltage through its dongle.
Protocol · Case study:
Pix Backpack Go reconstructs local BLE control of PIX Backpack LED displays as a Go library and CLI.
Reviewed temamagic/pix-backpack-go@c32b408
Protocol · Case study:
VFS495 fingerprint reader on Linux reconstructs capture and login support for the Validity USB 138a:003f sensor.
Reviewed saifulmd0/vfs495-linux@18a2f4d
Protocol · Case study:
VTech VM901 reconstructs the camera's authentication and media workflow for a Home Assistant bridge.
Protocol · Case study:
KATASYMBOL E12 Lab reconstructs BLE printing for E12-class label makers in Python.
Reviewed eteriall/katasymbol-e12-lab@9e1d79f
Protocol · Case study:
GE Opal 2 research maps the ice maker's connectors, nominal voltages, plumbing and front-panel I2C communication to support an Arduino-based replacement control board.
Reviewed SomeAspy/GE-Opal-Reverse-Engineering-Project@c2282f1
Binary · Case study:
magicJack HOME is investigated through its vendor macOS driver, USB register interface and captured SIP traffic to build a Linux-controlled analog phone endpoint.
Reviewed Gbrothers1/magicjack-hacking@8673832
Protocol · Case study:
PyKS2 reconstructs the Pentax K-S2 camera's undocumented Wi-Fi HTTP and WebSocket interface as a Python library, CLI and camera simulator.
Reviewed PICKLERICK2005/PyKS2@647255c
Protocol · Case study:
ESPHome — Maytronics Air Cover BLE recreates pool-cover control through a BLE GATT profile observed in the official Android app.
Protocol · Case study:
RevCar CLI is a Python controller for WowWee RevCar toys built from BLE command observations.
Reviewed madkaye/revcar-cli@c49a0ae
Protocol · Case study:
Open Steigen documents the local control protocol of Steigen Automatic Laundry Systems, including readable and writable data points for rack movement, lights, fan and heater.
Reviewed achrinza/open-steigen@0b64e7f
Protocol · Case study:
The Tchibo 287717 investigation decodes its weather sensor's 433.85 MHz OOK transmissions.
Reviewed fphammerle/tchibo-287717-weather-station-signal@5809d20
Protocol · Case study:
BPM documents a study of USB communication with the Aponorm Blutdruckmessgerät Oberarm Professionell blood pressure monitor and provides a Python reader for backing up measurements on Linux.
Reviewed phako/BPM@b20cd11
Protocol · Case study:
deco-network-optimize implements the TP-Link Deco app's private TMP/App-V2 Network Optimization sequence for a Deco X20-DSL.
Protocol · Case study:
An STM32U545RE project reconstructs the LEGO SPIKE medium motor's UART startup exchange from observations of the original hub.
Protocol · Case study:
An ESP32 client investigates the BC54 blood-pressure monitor's BLE exchange and parses measurements from the Blood Pressure Service.
Protocol · Case study:
The LD2410S investigation documents the I2C and SPI traffic between a Hi-Link FMCW radar board's components and examines its Puya controller firmware.
Protocol · Case study:
MiniToo Pixeldeck implements and documents the Divoom MiniToo's Bluetooth Classic display exchange.
Protocol · Case study:
fnb58-ble-logger reconstructs the FNIRSI FNB58's Bluetooth LE measurement exchange and logs voltage, current and power to daily CSV files.
Reviewed melnykai/fnb58-ble-logger@569f0b7
Protocol · Case study:
KBM TG700 Control reconstructs the USB HID settings protocol of KBM!
Reviewed JorgesOS7/kbm-tg700@d4abf50
Protocol · Case study:
ssmouse implements a client for the SteelSeries Rival 3 Wireless HID protocol recovered from SteelSeries GG.
Reviewed ViktorPetrov0605/ssmouse@c515a30
Protocol · Case study:
KuKirin G2 Master UART protocol documents the single-wire link between the display and Lenzod controller of a late-2025 Version C scooter.
Protocol · Case study:
RJ Connect documents Ruijie campus-network authentication at the packet, field, cryptographic and state-machine levels.
Reviewed Jason-skd/rj-connect.zig@731841a
Protocol · Case study:
aula-hero68-protocol documents the HID lighting protocol of the AULA HERO 68 HE keyboard.
Protocol · Case study:
MCHOSE V9 Turbo+ protocol research reconstructs the headset's USB HID RGB control exchange.
Protocol · Case study:
sindri-led reconstructs the K671 Sindri keyboard's HID lighting controls from study of the Windows software and device responses.
Protocol · Case study:
clevo-wmi-rgb documents the WMI commands used to control keyboard backlighting on a Colorful X15 AT23 laptop with a Clevo NP50SNE chassis.
Reviewed SlumberMin/clevo-wmi-rgb@f06df34
Protocol · Case study:
Osmo+ Studio reconstructs DJI Osmo+ camera control and live video transport over Wi-Fi in Python.
Protocol · Case study:
cherry-mx-lighting-mac reconstructs lighting control for the Cherry MX 10.0N RGB keyboard in a macOS menu bar app.
Protocol · Case study:
labelibre implements direct Bluetooth printing to the SUPVAN T50M Pro using protocol knowledge from community analysis of the Katasymbol app.
Reviewed louisalexander/labelibre@ea908d4
Protocol · Case study:
synaptics-009b-fprintd reconstructs Linux support for the Synaptics Prometheus 06cb:009b fingerprint sensor.
Protocol · Case study:
STRIDE reconstructs the FitPro motor-board interface for a replacement Android console app on a NordicTrack treadmill.
Reviewed keranm/strideApp@d9e1b53
Protocol · Case study:
TonePush reconstructs the Line 6 HX USB editor protocol in reusable Rust crates, a CLI and a desktop editor.
Reviewed crmne/tonepush@77cb778
Protocol · Case study:
ESP32Drop reimplements Apple Wireless Direct Link and AirDrop on an ESP32-S3 from observed traffic.
Reviewed s-iwaki-d/ESP32Drop@92bdc12
Protocol · Case study:
Valeton GP-50 Editor controls GP-50 and GP-5 guitar pedals through a reconstructed MIDI SysEx protocol.
Reviewed drewmerc302/valeton-gp50@47b2b58
Protocol · Case study:
r8link reconstructs the Uniden R8w radar detector's Bluetooth LE data exchange as a Python client and protocol reference.
Reviewed AegisX86/UnidenR8wlink@9072bc2
Protocol · Case study:
esphome-panasonic-erv replaces a Panasonic ERV's optional module with an ESP32-S3 that speaks the reconstructed CN12 serial protocol.
Protocol · Case study:
EdgeLine investigates the Corsair Xeneon Edge display's Linux control interfaces and provides a panel control app.
Protocol · Case study:
FreeMicro implements Codex Micro key input and LED output through the device's vendor HID protocol, linking six keys to Claude Code project states.
Reviewed eliBenven/freemicro@64258eb
Protocol · Case study:
The Mittzon Standing Desk project investigates the LIN bus between an IKEA Mittzon desk controller and its handset.
Reviewed qbus00/mittzon-homeassistant@db54a8d
Protocol · Case study:
zenvision-linux reconstructs USB control of the ASUS ZenVision lid OLED on the Zenbook 14X OLED Space Edition.
Reviewed tarpediem/zenvision-linux@c0df6b5
Protocol · Case study:
orba-protocol reconstructs the Artiphon Orba 2 control protocol across USB-MIDI and BLE-MIDI.
Reviewed holofermes/orba-protocol@055610b
Protocol · Case study:
TrikiEmu recreates the Żabka Triki motion controller's BLE behavior on ESP32 firmware.
Reviewed Maku-hub/TrikiEmu@569a90c
Protocol · Case study:
TrikiScope investigates the Żabka Triki controller with a Python BLE terminal inspector.
Reviewed Maku-hub/TrikiScope@8ad3764
Protocol · Case study:
G2CC reconstructs communication with Even Realities G2 smart glasses through a replacement Android BLE client and a PC-side display compositor.
Reviewed expectbugs/G2CC@a401fc3
Protocol · Case study:
Melitta Barista & Nivona for Home Assistant implements Bluetooth LE control of supported coffee machines through their shared Eugster/Frismag protocol.
Reviewed dzerik/melitta-barista-ha@859fb90
Protocol · Case study:
OpenHX implements selected Line 6 HX and Helix preset controls in a Rust CLI and includes an early GUI.
Reviewed allansomensi/openhx@ab8aed4
Protocol · Case study:
BunATV reconstructs Apple TV control protocols as a Bun and TypeScript library with a companion CLI.
Reviewed JarekToro/bunatv@b3842e3
Protocol · Case study:
The Ember Mug app decodes the undocumented fc540013 Bluetooth LE statistics stream from an Ember Mug 2 into a drink log.
Reviewed gwhillhouse/ember-mug-app@9700820
Protocol · Case study:
PreSonus Quantum Linux documents control and audio behavior of the Quantum 2626 Thunderbolt interface while developing Linux support.
Protocol · Case study:
Berbel Remote Emulator recreates BFB 6bT, 8bT and 7bT remote commands on ESP32 firmware for Berbel kitchen hoods.
Reviewed tfohlmeister/berbel-remote@2c3c6c4
Protocol · Case study:
The KuKirin G4 BLE Mode Monitor parses observed FFF2 notifications from a scooter and prints changes between ECO, SPORT, and RACE modes.
Protocol · Case study:
Mutant Brain's SysEx configuration format is mapped through comparisons of generated presets.
Reviewed noriah/reveng-mutantbrain@ebbeef0
Protocol · Case study:
The TBBT A9 mini camera investigation reconstructs the camera's PPPP login and video-start exchanges over UDP/32108.
Reviewed ItzOmii/tbbt-a9-pppp-ha@40357b8
Protocol · Case study:
loxone-link-dotnet implements the Loxone Link NAT protocol over CAN in a .NET 8 library.
Reviewed VVlasy/loxone-link-dotnet@6c1d5b0
Protocol · Case study:
Polycab Solar Inverter to MQTT reads Bluetooth telemetry from a PSIS-3K-SM1 inverter using values the author says were recovered from its Android monitoring app.
Protocol · Case study:
aquacomputer-quadro-control reconstructs USB configuration access for the Aquacomputer Quadro fan controller.
Protocol · Case study:
HT2000Lib implements a C# client for the HT2000 CO2 logger using a USB HID interface recovered by monitoring the manufacturer's Windows application at runtime.
Reviewed gsuberland/HT2000Lib@568baa5
Protocol · Case study:
The ASUS XG34WCDG reference maps DDC/CI controls for display modes, colour, HDR, OLED care, proximity sensing and Aura effects.
Protocol · Case study:
The MSI Optix G27C2 reference maps the monitor's DDC/CI controls from Windows API reads and writes on one unit.
Protocol · Case study:
QCYbutMOD is an Android client built from reverse engineering of the BLE GATT commands used by QCY earbuds with Wuqi WQ7033 and WQ7034 chips.
Reviewed MrSpy00/QCYbutMOD@c0a4b2a
Protocol · Case study:
The Lian Li UNI HUB SL V2 reference reconstructs the controller's USB HID commands for fan duty, RPM reporting, LED effects and motherboard passthrough.
Protocol · Case study:
SAC9010QC/SAC12010QC reconstructs the IR control format of a HomeFit Living or Alaska air-conditioner remote from captured signals.
Protocol · Case study:
hydrao-dump investigates the Bluetooth exchanges between Hydrao shower heads and their phone app, with packet captures, a Wireshark dissector and an MQTT receiver for Home Assistant.
Reviewed kamaradclimber/hydrao-dump@c9a7cef
Protocol · Case study:
LibreConga investigates the Cecotec Conga 5490 robot vacuum's communication protocol through captured app traffic.
Reviewed Xumeiquer/LibreConga@b6c559e
Protocol · Case study:
The FT017TH study decodes transmissions from a wireless thermometer and hygrometer.
Reviewed fphammerle/FT017TH-wireless-thermometer-hygrometer-signal@18a4d4b
Protocol · Case study:
mg6250_mqtt reconstructs part of the Paradox MG6250 alarm console's serial event protocol.
Reviewed bmpc/mg6250_mqtt@5f51c7d
Protocol · Case study:
Tanzmaus Sysex Parser investigates MFB Tanzmaus MIDI SysEx bank dumps.
Reviewed Windfisch/tanzmaus-reversing@7928424
Protocol · Case study:
avea implements Python control of the Elgato Avea bulb using a BLE protocol investigated through an Android btsnoop log and Wireshark.
Reviewed k0rventen/avea@f2cd98c
Protocol · Case study:
Cetus3D reconstructs status communication between UP Studio and a Cetus3D printer using Wireshark captures and experiments.
Reviewed maarten-pennings/Cetus3D@5dab90e
Protocol · Case study:
LILO reconstructs Bluetooth Low Energy control of the Prêt à Pousser LILO device in JavaScript.
Reviewed jzarca01/LILO@78db40c
Protocol · Case study:
helix investigates USB HID communication with the DNA 75 vaporizer controller while prototyping configuration from Linux.
Reviewed cleanuplater/helix@985c4cc
Protocol · Case study:
Ha-Kake documents how Nissan Leaf CAN and OBD-II signals were identified and decoded for a local vehicle dashboard.
Reviewed davidkarnowski/Ha-Kake@2312f0a
Protocol · Case study:
The Ökoboiler study reconstructs the single-wire UART exchange between a heat-pump water heater's display and control boards.
Reviewed splattner/oekoboiler-uart-reverse-engineering@8a164da
Protocol · Case study:
ritto-esp investigates the Ritto 7630 TwinBus intercom's board signals with oscilloscope captures, distinguishing apartment and street bell events by their chime and apartment-line behavior.
Reviewed duramson/ritto-esp@872acd2
Protocol · Case study:
ha-c14 documents the C14 RS-485 bus between a COMPIT AERO 3B ventilator and Nano Color CTP room panel and implements an ESPHome bridge for ESP32.
Reviewed Pioszym/ha-c14@3746e03
Protocol · Case study:
Homiq Rescue documents the ASCII frame protocol used by older Homiq home-automation systems through a Moxa NE-4110S serial-to-TCP bridge.