Case study
QCYbutMOD: a QCY earbuds client built from reconstructed BLE commands
QCYbutMOD is an Android client built from reverse engineering of the BLE GATT commands used by QCY earbuds with Wuqi WQ7033 and WQ7034 chips. It reads separate earbud and case battery values from characteristic 0008, sends a command to mute firmware voice prompts, and reads back gesture mappings. Device test notes record command acknowledgments and unanswered multipoint queries.
- Targets
- Protocol
- Category
- Independent reconstruction cases
- Relationship
- Independent reconstruction project
- Sources reviewed
- Evidence class
- C2 code & docs, no demo or download
- Stars
- 0
- Last commit
- 2026-11-04
- Language
- Kotlin
- License (GitHub)
- MIT
GitHub data as of 2026-11-10
Evidence
- Observed
- Code, documentation and a download method observed; no demo found.
- Checked
- 2026-11-09
Requirements & limits
- Prerequisites: Android 8.0 to 16+ and a supported QCY earbud model using a Wuqi WQ7033 or WQ7034 chip.
- Prerequisites: Building from source requires JDK 17 and Android SDK 36 with Build Tools 36.0.0 or newer.
- Limits: The author reports that firmware on the tested device did not respond to multipoint queries 0x4D and 0x4F.
- License: MIT license.
Cite
BibTeX
@misc{qcybutmod-case,
title = {{QCYbutMOD: a QCY earbuds client built from reconstructed BLE commands}},
howpublished = {\url{https://github.com/MrSpy00/QCYbutMOD}},
url = {https://github.com/MrSpy00/QCYbutMOD},
urldate = {2026-11-06},
note = {Awesome REA entry: \url{https://awesomerea.org/resources/qcybutmod-case/}}
}Plain text
QCYbutMOD: a QCY earbuds client built from reconstructed BLE commands. https://github.com/MrSpy00/QCYbutMOD (accessed 2026-11-06). Awesome REA entry: https://awesomerea.org/resources/qcybutmod-case/
Useful? Star Awesome REA on GitHub2.4k
About this entry
The description was reviewed against primary sources.
Primary sources
- README.md GitHub · MrSpy00/QCYbutMOD · Revision c0a4b2a
- ADB_LIVE_TEST_NOTES.md GitHub · MrSpy00/QCYbutMOD · Revision c0a4b2a
More in Protocols
- Lian Li UNI HUB SL V2: mapping fan and lighting USB commands · Case study
- SAC9010QC/SAC12010QC: reconstructing an air-conditioner IR protocol · Case study
- hydrao-dump: decoding Hydrao shower-head Bluetooth data · Case study
- LibreConga: investigating the Conga 5490 communication protocol · Case study
- FT017TH: decoding wireless thermometer and hygrometer transmissions · Case study
- mg6250_mqtt: decoding Paradox MG6250 serial events · Case study