from alex_02@infosec.pub to hardware@infosec.pub on 04 Apr 2024 06:06
https://infosec.pub/post/10647466
Found this while I was exploring the internet for some interesting things to do with the flipper and just taking in all I can find: www.ifoedit.com/garagehack.html
This is a nice resource that seems to have a lovely collection of various garage doors, and they used a RPi, but this can easily be done on the flipper. Also has a nice chart here: www.ifoedit.com/RemoteDup.html
Also, I found this which seems like the flipper zero equivalent and looks interesting in itself: github.com/tobiabocchi/flipperzero-bruteforce
I did get rid of the if statement that doesn’t generate the files for PT-2240-433 since I wasn’t going to put it on GitHub, but this takes a while to run to generate all the files.
This part explains why it can work: “Brute Force attack is possible for all fixed code remotes which are using up to 20 bits for the code, which are:
Came, Tedsen, Kaeuferle, Nice, Ruku / Ansonic, Tormatic, Cardin, Dickert, Endress, Marantec, Hoermann, Einhell, Berner, Chamberlain, Rademacher, CDS, Bosch 12 DIP, Bosch 20 DIP.”
#hardware
threaded - newest
I also found this, which is in unleashed and xtreme firmware: github.com/derskythe/flipperzero-subbrute/
Seems like it includes other bits and frequencies that are missing from the generated sub files from the other GitHub.
Also, from reading I think you can sync the remotes to new ones on some of them which is convenient for the consumer, but not sure if that would cause problems with the original remote or not, and I don’t want to screw up the remote quite yet.
EDIT: Supported vendors: docs.flipper.net/sub-ghz/supported-vendors
EDIT 2: A post that explains a bit more on rolling codes and basics: linkedin.com/…/noob-diaries-attacking-rolling-cod…
Patent on Security 2.0+ here: patents.google.com/patent/US20110317835A1/?trk=ar…
Downloaded the patent and added to my notes.