24 bit support possible?
Closed this issue · 9 comments
Is it possible to support Princeton 24 with this proof of concept?
https://phreakerclub.com/447
https://phreakerclub-com.translate.goog/447?_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en&_x_tr_pto=wapp
https://github.com/flipperdevices/flipperzero-firmware/blob/dev/lib/subghz/protocols/princeton.c
Brute force a 24 bit gate is not practical at all, you would need weeks, theoretically the code can be modified to work with any protocol
Actually it's just 20bit for the address and 4 bit for the buttons, following the specs. Depending on the distribution of generated address numbers, it can be doable in a much smaller time.
Even if it was "weeks" that would be ok with this specific application of attacking a robot dog. Sometimes they sit deployed at the same location for an extended amount of time. There will be one for example patrolling a local airport from now until the foreseeable future. Every day it will be there for years to come. Absolutely not ideal if the thing is running at you, but a usable situation none the less.
This repo has support for it (just commented out due to size in the python code): https://github.com/tobiabocchi/flipperzero-bruteforce
This repo has support for it (just commented out due to size in the python code): https://github.com/tobiabocchi/flipperzero-bruteforce
I have the missing files here: https://github.com/UberGuidoZ/Flipper/tree/main/Sub-GHz/OOK_bruteforce
@UberGuidoZ I'm still a bit ignorant to this, do the subs brute both the SN & key press? Button 4 is what triggers this specific device I'm working with. It would be nice to narrow the search to eliminate other buttons.
I actually left a comment on your repo about exactly that. How did you generate the SUB in the video, to begin with?
I was curious if the Go1 robots varied the required signal (serial/button) or if they were all the same.
We can chat in the Flipper discord if you'd rather do this a little more live: https://discord.gg/rUKdeJXM (tag me!)
Reply of an actual button press on the included "emergency stop" remote that is paired with my dog. The place stickers on both the remote & dog with the serial number to the remote also.
This repo has support for it (just commented out due to size in the python code): https://github.com/tobiabocchi/flipperzero-bruteforce
I have the missing files here: https://github.com/UberGuidoZ/Flipper/tree/main/Sub-GHz/OOK_bruteforce