Case study
rtchair: local control of the Rotai RT7709S massage chair
rtchair reconstructs local control of the Rotai RT7709S massage chair from its communication protocol. An OpenWrt router redirects the chair's MQTT connection to a local broker, while a CLI and Home Assistant integration expose controls and timed massage programs.
- Targets
- Protocol
- Category
- Independent reconstruction cases
- Relationship
- Independent reconstruction project
- Sources reviewed
- Evidence class
- C2 code & docs, no demo or download
- Stars
- 0
- Last commit
- 2026-10-28
- Language
- Python
- License (GitHub)
- MIT
GitHub data as of 2026-11-10
Evidence
- Observed
- Code and documentation observed; no download method or demo found.
- Checked
- 2026-11-08
Requirements & limits
- Prerequisites: An RT7709S already configured through the official app, plus an OpenWrt or ImmortalWrt router with passwordless SSH, is required for offline mode.
- Limits: The local broker has no authentication and is intended for a trusted home network.
- License: MIT license.
Cite
BibTeX
@misc{rtchair-case,
title = {{rtchair: local control of the Rotai RT7709S massage chair}},
howpublished = {\url{https://github.com/pinlo7/rtchair}},
url = {https://github.com/pinlo7/rtchair},
urldate = {2026-11-06},
note = {Awesome REA entry: \url{https://awesomerea.org/resources/rtchair-case/}}
}Plain text
rtchair: local control of the Rotai RT7709S massage chair. https://github.com/pinlo7/rtchair (accessed 2026-11-06). Awesome REA entry: https://awesomerea.org/resources/rtchair-case/
Useful? Star Awesome REA on GitHub2.4k
About this entry
The description was reviewed against primary sources.
Primary sources
- README.md GitHub · pinlo7/rtchair · Revision c95ea87
More in Protocols
- zte-cpe-sms: reconstructing ZTE CPE SMS API access · Case study
- gs5-rgb: Creative Sound Blaster GS5 lighting protocol · Case study
- Telly Remote: reconstructing TYRC-1 remote control over Bluetooth and infrared · Case study
- Wave Buds: a client for the JBL Wave Buds control protocol · Case study
- manifold-558s-ble: reconstructing testo 558s measurement messages · Case study
- attackshark-x11prov2: decoding the X11 PRO V2 mouse configuration protocol · Case study