Protocol · Case study:
PreSonus StudioLive 16.0.2 USB: documenting mixer control messagesC2
PreSonus StudioLive 16.0.2 USB documents control messages exchanged between the digital mixer and Universal Control software.
- Protocol
Protocol · Case study:
PreSonus StudioLive 16.0.2 USB documents control messages exchanged between the digital mixer and Universal Control software.
Protocol · Case study:
DJI Mic Mini Monitor reads transmitter battery and charging state from the receiver's USB status stream on Windows.

Reviewed hogancv/dji-mic-mini-monitor@6283dc6
Protocol · Case study:
baseus-cli controls Baseus Bass BS1 NC earbuds on Windows through a reconstructed Classic Bluetooth RFCOMM protocol.
Reviewed erenalpars/baseus-cli@2bb1447
Protocol · Case study:
hxoctkl reconstructs USB HID profile control for the HyperX Alloy Origins Core tenkeyless keyboard and writes persistent per-key RGB animations from Linux.
Reviewed identityapproved/hyperx-origins-core-tkl-rgb@2604637
Protocol · Case study:
Wireless Doorbell Clone reconstructs the Grundig QH-831A doorbell remote's transmitted data frame and implements transmitters in Arduino and MicroPython.
Protocol · Case study:
Lucci Air Homey App reconstructs the 433 MHz control protocols of USB-C and CR2032 Lucci Air fan handsets from recorded transmissions.
Reviewed jbothe/homey-app-lucci-air@79c9baa
Protocol · Case study:
Taktil implements wired AULA F99 control through a Rust HID adapter and a Tauri desktop interface.
Reviewed ErenHarmandal/taktil@bb4b8c5
Protocol · Case study:
MG330 Studio recreates configuration control for the 2E Gaming MG330 RGB mouse on macOS using the SPCP6651B HID feature-report protocol recovered from its Windows driver.
Protocol · Case study:
qutie implements Linux printing for the PRT Qutie label printer using a recovered Bluetooth Classic RFCOMM protocol.
Protocol · Case study:
Hush is a macOS menu-bar and command-line client for Sony WH-1000XM6 headphones using their MDR protocol over Bluetooth RFCOMM.

Reviewed ismoilovdevml/hush@e5cdf04
Protocol · Case study:
The Aromatic BLE bridge connects an AF300 Smart scent diffuser to Home Assistant through an ESP32 running ESPHome.
Protocol · Case study:
Teclado RGB via USB HID reconstructs the Redragon K552-M keyboard's lighting commands from captures of its official software.
Protocol · Case study:
wibox-daemon reconstructs Fermax Wi-Box IDS7938 communication in a Go service for door control and media access.
Reviewed gnacho/wibox-daemon@0252618
Protocol · Case study:
MousePods reconstructs AirPods 3 RemoteHID motion access and uses it for Linux cursor control.
Reviewed starman-tech/mousepods@115e4de
Protocol · Case study:
FitFace Studio reconstructs Galaxy Fit3 watch-face editing and Bluetooth delivery in an Android app.

Reviewed satvikgosai/fitface-studio@96d6a2c
Protocol · Case study:
fretwire reconstructs the Line 6 HX family’s USB control protocol for an independent Linux editor.

Reviewed john-baxter-dev/fretwire@e56ffe1
Protocol · Case study:
Kreo Hive 65 RGB Control reconstructs the keyboard's USB HID lighting exchange and implements Linux command-line, desktop and WebSocket controls.

Protocol · Case study:
The Cavium SNIC10E project reconstructs a PCIe BAR2 shared-memory datapath for the CN6640-SNIC10E card.
Reviewed nicologiuliani6/cavium-cn6640-snic10e-octeon-ii-nic@142e019
Protocol · Case study:
Deadband reconstructs configuration exchanges for GameSir controllers and the Logitech G502 X LIGHTSPEED mouse in a Linux GUI.
Protocol · Case study:
Pocket Libre reconstructs the Pocket AI recorder's BLE command and audio-transfer behavior in a Python client.
Reviewed shahcolate/pocket-libre@5962722
Protocol · Case study:
Open Apollo reconstructs Linux control of Universal Audio Apollo Thunderbolt and USB audio interfaces through hardware and driver analysis.
Reviewed rolotrealanis98/open-apollo@5a79fc1
Protocol · Case study:
attack-shark-x11-driver reconstructs Attack Shark X11 mouse configuration over USB HID as a TypeScript client.
Protocol · Case study:
Hisense/Hitachi H-NET-Protocol investigates the H-NET bus used by Hi-Therma and Air H₂O 400 heat pumps.
Protocol · Case study:
YenKeyControl reconstructs the Yenkee YKB3700 Rogue keyboard's USB HID configuration protocol and implements Python commands for RGB effects, per-key colors and key remapping.
Reviewed p3t3r50n-cz/YenKeyControl@3a6e5df
Protocol · Case study:
Deye Battery Serial Bus maps CAN frames from a Deye battery system and reads RS485 cell-voltage data.
Protocol · Case study:
Bonaparte implements a Python client for Napoleon eFIRE fireplace controllers and documents their Bluetooth LE control protocol.
Reviewed kaechele/bonaparte@1760e4a
Protocol · Case study:
skyrcUSB implements a Python client for a reverse-engineered skyRC charger protocol.
Reviewed qduff/skyrcUSB@ad9153b
Protocol · Case study:
mqtt-energi investigates myenergi device-to-device Ethernet traffic and bridges decoded readings to MQTT.
Reviewed PeterTM/mqtt-energi@9aa07ae
Protocol · Case study:
RedFIS investigates the Audi A3 8P dashboard Driver Information System protocol and implements an alternative display controller on ESP32.
Reviewed tothpetiszilard/a3_8p_redFIS@5349d0d
Protocol · Case study:
GalaxyBuds-rs implements Galaxy Buds Bluetooth messages as a Rust library.
Reviewed JojiiOfficial/GalaxyBuds-rs@e9e6492
Protocol · Case study:
ETEKCITY Smart Nutrition Scale research maps the ESN00 scale’s Bluetooth Low Energy characteristics and packet payloads.
Reviewed hertzg/metekcity@e971276
Protocol · Case study:
mi-scale-2 decodes Xiaomi Mi Smart Scale 2 BLE weight data and publishes the readings to MQTT.
Reviewed qbbr/mi-scale-2@cac6537
Protocol · Case study:
PSA VAN Bus documents vehicle bus packets researched chiefly on a Peugeot 307 and described as applicable to listed Peugeot and Citroën models.
Protocol · Case study:
Apple Wi-Fi Password Sharing reconstructs grantor and requestor behavior for Apple's Wi-Fi password-sharing protocol on macOS.
Protocol · Case study:
Schellenberg USB protocol research documents communication with the 21009 Magenta SmartHome dongle through its USB serial interface.
Protocol · Case study:
433home reconstructs the 433 MHz control signals of REV wireless power sockets.
Reviewed jadeaffenjaeger/433home@4f5e29c
Protocol · Case study:
fcp-stuff documents the FirstClass client-server protocol over TCP.
Reviewed thatoddmailbox/fcp-stuff@7a856cc
Protocol · Case study:
Orthoplay records a reconstructed WebSocket exchange for the OD-11 speaker.
Reviewed Marcocanc/orthoplay-re@dd22b9d
Protocol · Case study:
Chsmartbulb documents Bluetooth control of a combined RGB bulb and speaker sold as BL08A.
Protocol · Case study:
mf4700-print-scan reconstructs printing and scanning for Canon MF4700-series devices in a macOS app.

Reviewed pkhr/mf4700-print-scan@c3a08d7
Protocol · Case study:
Kenwood KNS documents the ARCP-590G client's communication with a TS-590SG radio over serial and KNS TCP connections.
Protocol · Case study:
truemove3-re records an investigation of the TrueMove3 gaming mouse sensor's SPI interface.
Reviewed you-wouldnt-reverse-engineer-a-rat/truemove3-re@07b966e
Protocol · Case study:
Implements access to the Aqara G410 doorbell through cloud calls and a P2P connection reconstructed from the Aqara Home app.

Reviewed nxm/aqara-doorbell@c4a1feb
Protocol · Case study:
crowdstrike-cloudproto reconstructs the cloud protocol used between Falcon Sensor and its TS event and LFO file services as an asynchronous Rust crate.
Reviewed tux3/crowdstrike-cloudproto@c79852f
Protocol · Case study:
KC Control implements Keychron M6 profile switching over a reconstructed HID command exchange.
Reviewed YouHusam/kc-control@b928ecb
Protocol · Case study:
Reconstructs the 433 MHz RF remote protocol of the non-Wi-Fi Xiaomi Whale Spout bidet seat and implements it in ESPHome on an ESP32 with a CC1101 radio.
Protocol · Case study:
skypsu reconstructs the Modbus RTU register map of the SKY TOPPOWER STP2S3010E22 laboratory power supply.
Protocol · Case study:
Smart-AC-Modernizer documents the Haier YRW02 air conditioner's infrared control format and implements an ESP32 bridge for it.
Protocol · Case study:
Implements the iDotMatrix BLE display protocol as a typed Python SDK while documenting findings from vendor APK analysis and hardware probes.
Reviewed Madhat69/pyidotmatrix@da00f35
Protocol · Case study:
Skannerz Commander trade research reconstructs the electronic toy's three-pin exchange protocol from a 200 kHz logic-analyzer capture and controlled hardware experiments.
Protocol · Case study:
AUKEY KM-G15 RGB Control reconstructs the keyboard's USB HID lighting protocol and supplies a Go command-line client.
Reviewed ffexis/aukey-km-g15-rgb@9aa56fa
Protocol · Case study:
SonyBridge extends a desktop Sony headset client to handle a second generation of its Bluetooth RFCOMM control protocol.

Reviewed AmitRajput-Dev/SonyBridge@d0ecd56
Protocol · Case study:
The HP Laser 1008a project reconstructs the SPL3/QPDL printing path for HP Laser 1003, 1006, and 1008 devices on Apple Silicon macOS.
Protocol · Case study:
BMW iDrive Controller CAN Bus Interpreter decodes controls from an F44 iDrive controller using an ESP32-C3 and TJA1441A/B CAN transceiver.
Reviewed LeanWasTaken/iDrive@d9789d1
Protocol · Case study:
ESP32 Controller for Charlton & Jenrick Fireplace recreates remote commands by transmitting captured RF payloads through a CC1101 module.
Protocol · Case study:
GMK87 Configurator reconstructs the Zuoya GMK87 keyboard's USB HID control exchanges from captures of its official application.
Reviewed codedgar/gmk87-node@a9a1e90
Protocol · Case study:
Ajazz AK820 Pro Linux Software reconstructs lighting control for the Ajazz SONiX AK820 Pro keyboard from USB traffic captured with Wireshark and PCapUSB.
Protocol · Case study:
OPUS-QUAD Pro DJ Link Reverse Engineer Packet Analysis documents how the Pioneer DJ OPUS-QUAD exchanges Pro DJ Link packets.
Protocol · Case study:
MiraBox StreamDock reverse-engineer is a TypeScript demonstration of direct USB control derived from the device's packets.
Protocol · Case study:
SiriRemote-Linux decodes Apple TV Siri Remote Bluetooth input for use on Linux.
Reviewed Yanndroid/SiriRemote-Linux@b3840c4
Protocol · Case study:
ZydDash builds an ESP32 dashboard for an ePowerFun ePF-1 scooter from decoded Zydtech BLE telemetry.
Reviewed Ennar1991/ZydDash@8da48eb
Protocol · Case study:
catlink-local reconstructs the CATLINK Open X litter box's login and MQTT exchanges for local Home Assistant use.
Reviewed yorgossot/catlink-local@78f275e
Protocol · Case study:
Aurora reconstructs EvoFox Blaze mouse configuration through its Linux hidraw interface.
Reviewed rugbedbugg/Aurora@7758da0
Protocol · Case study:
CR-BYOB reconstructs Creality Scan Bridge behavior in an Android app, letting Creality Scan discover a USB-connected scanner over a network.

Reviewed NickLD/CR-BYOB@4e90ba3
Protocol · Case study:
HappyLighting-py reconstructs BLE communication for HappyLighting-compatible LED controllers from analysis of the original APK.
Reviewed MikeCoder96/HappyLighting-py@82fdd49
Protocol · Case study:
pd-usb implements Playdate USB communication in a JavaScript WebSerial library using commands recovered through packet sniffing.

Reviewed cranksters/pd-usb@a200e8a
Protocol · Case study:
GlanceClock documents the wall clock's BLE command protocol for building a local bridge.
Reviewed Hypfer/glance-clock@3f0bfc0
Protocol · Case study:
prolink-connect implements Pioneer PROLINK network exchanges in TypeScript for DJ equipment.
Protocol · Case study:
Open Remote Start investigates the antenna data-link protocol of Fortin remote starters and alarm systems.
Reviewed jmaxxz/OpenRemoteStart@d913a0a
Protocol · Case study:
PythonWifiBulb reconstructs MagicLight Wi-Fi bulb control from captured phone-to-bulb traffic.
Protocol · Case study:
Laser Drift emulates the infrared controllers of Carrera Digital 132/124 slot cars.
Reviewed buntine/laser-drift@6fca994
Protocol · Case study:
mx3000control configures the Perixx MX-3000 mouse on Linux using HID feature reports recovered from its Windows driver.
Reviewed gianluca-nitti/mx3000control@6ee7f23
Protocol · Case study:
jeep-canbus documents byte-level meanings of observed CAN-B frames in a Jeep Grand Cherokee WH.
Reviewed latonita/jeep-canbus@3926b4d
Protocol · Case study:
Samsung Galaxy Book4 Edge Linux Research & Support investigates the ENE KB9058 embedded controller and its I2C mailbox communication.

Protocol · Case study:
Bose-Reverse-Engineering investigates the SmartSpeaker link between a Bose 321GS Series III console and bass module.
Protocol · Case study:
The Pioneer DJM-850 study maps USB exchanges between the mixer and its Windows driver and Setting Utility to inform Linux support.
Reviewed nm2107/Pioneer-DJM-850-driver-reverse-engineering@3d067c7
Protocol · Case study:
HyperX Pulsefire Dart Reverse Engineering documents the mouse's USB control protocol from captured exchanges with NGenuity Beta and trial-and-error probing.
Reviewed santeri3700/hyperx_pulsefire_dart_reverse_engineering@22d298d
Protocol · Case study:
Govee H6159 light-strip reverse engineer provides Linux shell scripts that send Bluetooth GATT commands directly to the H6159 light strip.
Reviewed jurassic-marc/govee-h6159-light-strip-reverse-engineer@b76ea47
Protocol · Case study:
Redragon RGB Controller sends recovered USB HID commands to set colors on Redragon Kala keyboards and Griffin mice.
Protocol · Case study:
Magenta Bridge implements direct HID communication with the Octavi IFR-1 flight-simulator panel in a Windows client for Microsoft Flight Simulator 2024.

Protocol · Case study:
motospeedv40-re documents USB HID commands used by the Motospeed V40 mouse.
Reviewed ljmf00/motospeedv40-re@00c8054
Protocol · Case study:
The Exway X1 Pro study investigates radio traffic between an electric skateboard and its remote.
Reviewed sieveandsand/Hacking_X1_Pro@fac81ed
Protocol · Case study:
CoffeConnect investigates the DeLonghi ESAM 4000 control-panel circuit and its clock, serial-input and strobe signaling.
Protocol · Case study:
Vibease documents the BLE communication used by a Vibease vibrator.
Reviewed eldstal/vibease@09c5ec0
Protocol · Case study:
The Mieo HA102 study reconstructs the power meter's 433.9 MHz FSK packet format from recorded signals.
Protocol · Case study:
esphome-midea-ir-tap reconstructs the demodulated infrared commands carried between a Midea-built heat pump's display and control boards.
Protocol · Case study:
The Tesvor X500/X500 Pro project reconstructs the robot vacuum's local UART control and path-point messages for its ESP8266/ESP-12S module.
Protocol · Case study:
The Bambu Lab P2S bridge reconstructs LAN control and monitoring for the printer from direct protocol probes.
Reviewed Kevinlibaba/bambu-p2s-bridge@5988e39
Protocol · Case study:
Beurer BM59 Unlocked documents the BLE exchange used by a BM59 blood pressure monitor to transfer measurements.
Reviewed ipanalytics/Beurer-BM59-Unlocked-Reverse-Engineering@f16553f
Protocol · Case study:
PiBuddyCam recreates the Prusa Buddy3D camera's cloud communication on a Raspberry Pi Zero 2 W using a protocol the author says was recovered from firmware.
Reviewed bullitt186/pibuddycam@8f2fc1b
Protocol · Case study:
AirDrop for Windows investigates how an iPhone discovers receivers and sends files over AWDL.
Reviewed businessbaum/AirDrop-Windows@ac53b2d
Protocol · Case study:
PSA VAN-CAN protocol bridge converts vehicle messages from AEE2001 to AEE2004 or AEE2010, and from AEE2004 to AEE2010, so newer PSA head units and displays can work in older cars.

Reviewed morcibacsi/PSAVanCanBridge@14268bf
Protocol · Case study:
aioharmony documents Logitech Harmony Hub authentication and control messages while providing an asyncio client for the device.
Reviewed Harmony-Libs/aioharmony@09e1680
Protocol · Case study:
MQB-sniffer documents CAN diagnostic traffic on a 2016 Volkswagen Golf MK7 by capturing exchanges between an OBDeleven adapter and the car.
Reviewed mrfixpl/MQB-sniffer@b3df8f0
Protocol · Case study:
ktm-can documents and parses CAN messages observed on a 2020 KTM 690 Enduro R motorcycle.
Reviewed blalor/ktm-can@299b4e0
Protocol · Case study:
Xbox-Smartglass-Core implements Xbox One SmartGlass communication in Python, including console discovery and control, media commands, Stump Live TV functions and title auxiliary streams.
Protocol · Case study:
Comet reimplements the game-facing GOG Galaxy Communication Service in Rust for use with alternative game launchers.
Reviewed imLinguin/comet@46c9152
Protocol · Case study:
PS3Sharp implements a cross-platform .NET client for PlayStation 3 memory access through TMAPI and other backends.
Reviewed score3229/PS3Sharp@f0ded45
Protocol · Case study:
PFire reconstructs an XFire server for client 1.127 using the service's messaging protocol.
Reviewed darcymiranda/PFire@58cb039