Compare commits
9 Commits
4901d5491b
..
main
| Author | SHA1 | Date | |
|---|---|---|---|
| 97fc562a4c | |||
| 5b5d73b67a | |||
| 2a4eb1fd38 | |||
| f16fa58320 | |||
| fdf50e8147 | |||
| 4eb1102acb | |||
| b9aa14c9fc | |||
| 0d7565bb98 | |||
| 0a0b9fb396 |
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
|
After Width: | Height: | Size: 1.9 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 2.9 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 1.0 MiB |
Binary file not shown.
|
After Width: | Height: | Size: 345 KiB |
Binary file not shown.
@@ -0,0 +1,4 @@
|
|||||||
|
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
|
||||||
|
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
|
||||||
|
|
||||||
|
0. You just DO WHAT THE FUCK YOU WANT TO.
|
||||||
@@ -0,0 +1,48 @@
|
|||||||
|
# Files
|
||||||
|
## Naming Convention
|
||||||
|
- Original filename is retained (if applicable), and seperated from this naming convention by underscores (`<ORIGINAL FILE NAME>`)
|
||||||
|
- Each bit of info is seperated by underscores (_)
|
||||||
|
- spaces and other un-websafe characters in source, descriptions, or filenames are replaced by hyphens (-)
|
||||||
|
- files are named for `Vibrator-Kh` or `Buttplug-Bullet` (`<VIBRATOR NAME>`)
|
||||||
|
- the source of the file (application/description or url with https:// removed and slashes and other problematic characters replaced with hyphens (-)) (`<SOURCE STRING>`)
|
||||||
|
- a basic useful description ex how they were sniffed for PCAPS (`<DESCRIPTION STRING>`)
|
||||||
|
- the date the file was made/downloded in `YYYY-MM-DD-HHMM-TZ` format (24 hour time, three character timezone) (`<TIMESTAMP STRING>`)
|
||||||
|
- example: `2025-12-19-2048-MST`
|
||||||
|
- linux: `date +"%Y-%m-%d-%H%M-%Z"`
|
||||||
|
- powershell 7+: `(Get-Date).ToString("yyyy-MM-dd-HHmm") + "-" + ((Get-TimeZone).Id -creplace '[a-z\s]', '')` (better be fuckin happy you windows dorks)
|
||||||
|
- image or video assets include HEIGHTxWIDH in pixels (`<HEIGHT IN PIXELS>`x`<WITH IN PIXELS>`)
|
||||||
|
|
||||||
|
**Format:** (each item only if applicable)
|
||||||
|
`<ORIGINAL FILE NAME>_<VIBRATOR NAME>_<SOURCE STRNG>_<DESCRIPTION STRING>_<TIMESTAMP STRING>_<HEIGHT IN PIXELS>x<WIDTH IN PIXELS>.<FILE EXTENSION>`
|
||||||
|
**Example:**
|
||||||
|
`kstert_Buttplug-Bullet_service.acvioo.com-pages-download-app)APK-from-manufacturers-website_2025-12-19-1919.apk`
|
||||||
|
|
||||||
|
## Files Directory
|
||||||
|
- [.gitignore](.gitignore): Git ignore file
|
||||||
|
- [README.md](README.md): Project Home
|
||||||
|
- [Files.md](Files.md): This file, containing a list of all files in the repository with descriptions
|
||||||
|
- [Notes.md](Notes.md): Notes documenting the project, including todos, methodology, osint, and details on the vibrators
|
||||||
|
- [COPYING.txt](COPYING.txt): License file (WTFPL)
|
||||||
|
- Android/
|
||||||
|
- APKs/
|
||||||
|
- Buttplug-Bullet/
|
||||||
|
- [2025-12-19-1919_kstert.apk](Android/APKs/Buttplug-Bullet/2025-12-19-1919_kstert.apk): APK file for the Buttplug-Bullet vibrator app (kstert)
|
||||||
|
- Vibrator-Kh/
|
||||||
|
- [2025-12-19-1916_Zero Tochu零触-Enjoy Yourself乐享自我.apk](Android/APKs/Vibrator-Kh/2025-12-19-1916_Zero%20Tochu%E9%9B%B6%E8%A7%A6-Enjoy%20Yourself%E4%B9%90%E4%BA%AB%E8%87%AA%E6%88%91.apk): APK file for the Vibrator-Kh app (Zero Tochu)
|
||||||
|
- Sniffs/
|
||||||
|
- Vibrator-Kh/
|
||||||
|
- [2025-12-19-1835-Vibrator-Kh-BTLE-Advertisement-and-Connect-Wireshark-nRF52840-Sniff.pcapng](Sniffs/Vibrator-Kh/2025-12-19-1835-Vibrator-Kh-BTLE-Advertisement-and-Connect-Wireshark-nRF52840-Sniff.pcapng): Wireshark capture of BTLE sniffing for Vibrator-Kh
|
||||||
|
- Assets/
|
||||||
|
- Markdown/
|
||||||
|
- [wtfpl-badge-1_88x31.png](Assets/Markdown/wtfpl-badge-1_88x31.png): WTFPL license badge
|
||||||
|
- [pope.webp](Assets/Markdown/pope.webp): cropped image of the new pope from his first appearance in public after being elected pope :pope:
|
||||||
|
- Media/
|
||||||
|
- Images/
|
||||||
|
- [Buttplug-Bullet_Top_Off_2025-12-19-2040_2268x3582.jpg](Assets/Media/Images/Buttplug-Bullet_Top_Off_2025-12-19-2040_2268x3582.jpg): Image of Buttplug-Bullet top turned off
|
||||||
|
- [Vibrator-Kh_Top_Off_2025-12-19-2039_4032x2268.jpg](Assets/Media/Images/Vibrator-Kh_Top_Off_2025-12-19-2039_4032x2268.jpg): Image of Vibrator-Kh top turned off
|
||||||
|
- Video/
|
||||||
|
- [2025-12-17-1842_Both-Charging.mp4](Assets/Media/Video/2025-12-17-1842_Both-Charging.mp4): Video of both vibrators charging
|
||||||
|
- Original-Files.ignore/
|
||||||
|
- [kstert.apk](Original-Files.ignore/kstert.apk): Original APK for kstert app
|
||||||
|
- [PXL_20251217_1842352262.mp4](Original-Files.ignore/PXL_20251217_1842352262.mp4): Original video file (possibly charging or pairing)
|
||||||
|
- [Zero Tochu零触-Enjoy Yourself乐享自我.apk](Original-Files.ignore/Zero%20Tochu%E9%9B%B6%E8%A7%A6-Enjoy%20Yourself%E4%B9%90%E4%BA%AB%E8%87%AA%E6%88%91.apk): Original APK for Zero Tochu app
|
||||||
@@ -0,0 +1,191 @@
|
|||||||
|
# Notes
|
||||||
|
# Table of Contents
|
||||||
|
|
||||||
|
- [Notes](#notes)
|
||||||
|
- [Table of Contents](#table-of-contents)
|
||||||
|
- [Start](#start)
|
||||||
|
- [Methodology](#methodology)
|
||||||
|
- [Bluetooth](#bluetooth)
|
||||||
|
- [BTLE Sniffing](#btle-sniffing)
|
||||||
|
- [On Computer](#on-computer)
|
||||||
|
- [Resources](#resources)
|
||||||
|
- [On Android Phone](#on-android-phone)
|
||||||
|
- [Vibrator-Kh](#vibrator-kh)
|
||||||
|
- [Product Pages](#product-pages)
|
||||||
|
- [Manufacturer](#manufacturer)
|
||||||
|
- [Hardware](#hardware)
|
||||||
|
- [App](#app)
|
||||||
|
- [Bluetooth](#bluetooth-1)
|
||||||
|
- [Sniffing](#sniffing)
|
||||||
|
- [BTLE](#btle)
|
||||||
|
- [OSINT](#osint)
|
||||||
|
- [Buttplug-Bullet](#buttplug-bullet)
|
||||||
|
- [Product Pages](#product-pages-1)
|
||||||
|
- [Images](#images)
|
||||||
|
- [Media](#media)
|
||||||
|
- [Both](#both)
|
||||||
|
- [Video](#video)
|
||||||
|
- [Vibrator-Kh](#vibrator-kh-1)
|
||||||
|
- [Images](#images-1)
|
||||||
|
- [Buttplug-Bullet](#buttplug-bullet-1)
|
||||||
|
- [Images](#images-2)
|
||||||
|
- [Wireshark](#wireshark)
|
||||||
|
- [Todos](#todos)
|
||||||
|
|
||||||
|
## Start
|
||||||
|
Two Vibrators:
|
||||||
|
1. [Vibrator-Kh](#vibrator-kh) (Purple Bullet One)
|
||||||
|
2. [Buttplug-Bullet](#buttplug-bullet) (Black Buttplug One)
|
||||||
|
## Methodology
|
||||||
|
### Bluetooth
|
||||||
|
#### BTLE Sniffing
|
||||||
|
##### On Computer
|
||||||
|
**[nRF52840 USB-C Dongle](https://www.amazon.com/dp/B0DP6MVDZQ) with [nRF Sniffer for Bluetooth LE firmware](https://www.nordicsemi.com/Products/Development-tools/nrf-sniffer-for-bluetooth-le) installed dumped to [Wireshark](https://www.wireshark.org) on Windows 11 With a Pixel 9 Base Model Running Android (Bluetooth MAC: `CO:1C:6A:6E:58:96`)**
|
||||||
|
[Sniffing Captures](Sniffs/Vibrator-Kh)
|
||||||
|
##### Resources
|
||||||
|
**Official**
|
||||||
|
1. [Official nRF52840 Dongle Page](https://www.nordicsemi.com/Products/Development-hardware/nRF52840-Dongle)
|
||||||
|
2. [Official nRF52840 SoC Page](https://www.nordicsemi.com/Products/nRF52840)
|
||||||
|
1. [Product Specification/Datasheet (Parent)](https://docs.nordicsemi.com/bundle/ps_nrf52840/page/keyfeatures_html5.html)
|
||||||
|
2. [SoC Docs](https://docs.nordicsemi.com/category/nrf52840-category)
|
||||||
|
3. [Official nRF Sniffer for Bluetooth LE firmware page (Parent)](https://www.nordicsemi.com/Products/Development-tools/nrf-sniffer-for-bluetooth-le)
|
||||||
|
**Community**
|
||||||
|
1. [Guide Largely Used](https://dojofive.com/blog/using-the-nordic-nrf-sniffer-for-ble/)
|
||||||
|
2. [Detailed Guide/Info (Parent)](https://wiki.makerdiary.com/nrf52840-mdk-usb-dongle/guides/ble-sniffer/)
|
||||||
|
3. [Guide With Hints on Snifing](https://novelbits.io/nordic-ble-sniffer-guide-using-nrf52840-wireshark/)
|
||||||
|
4. [Adafruit Guide](https://learn.adafruit.com/ble-sniffer-with-nrf52840/working-with-wireshark)
|
||||||
|
##### On Android Phone
|
||||||
|
Pixel 9 Base model used
|
||||||
|
**Apps** (experimenting)
|
||||||
|
- [BlueTooth Termina eDebugger](https://play.google.com/store/apps/details?id=com.e.debugger&hl=en_US)
|
||||||
|
- [Bluefruit LE Connect](https://learn.adafruit.com/bluefruit-le-connect/) ([Google Play Store](https://play.google.com/store/apps/details?id=com.adafruit.bluefruit.le.connect&hl=en_US))
|
||||||
|
|
||||||
|
## Vibrator-Kh
|
||||||
|
### Product Pages
|
||||||
|
* [Amazon](https://www.amazon.com/dp/B0FHB5LCX4) ([Archive](https://archive.is/T7dsm))
|
||||||
|
### Manufacturer
|
||||||
|
#### Hardware
|
||||||
|
* [zero-tochu.com (Home Page)](https://www.zero-tochu.com) ([Archive]())
|
||||||
|
* [Store](https://zerochu.com/?shpxid=d3b9436e-fb3d-4966-9092-be55f18e9d79) ([Archive](https://archive.is/TbgMc))
|
||||||
|
* todo
|
||||||
|
#### App
|
||||||
|
* [zero-tochu.com](https://www.zero-tochu.com) ([Archive]())
|
||||||
|
* [APK (zero-touchu.com)](https://www.zero-tochu.com/Zero%20Tochu%E9%9B%B6%E8%A7%A6-Enjoy%20Yourself%E4%B9%90%E4%BA%AB%E8%87%AA%E6%88%91.apk) ([Archive]())
|
||||||
|
* [Google Play Store](https://play.google.com/store/apps/details?id=apk.zero.tochu) ([Archive]())
|
||||||
|
* [Apple Store (iPhone)](https://apps.apple.com/us/app/zero-tochu%E9%9B%B6%E8%A7%A6/id6467008871) ([Archive]())
|
||||||
|
### Bluetooth
|
||||||
|
Phone MAC Address: `CO:1C:6A:6E:58:96`
|
||||||
|
Toy MAC Address: `13:25:AC:02:36:9C`
|
||||||
|
#### Sniffing
|
||||||
|
* External
|
||||||
|
* [ADV/IRQ/Connect/Scan Sniffs (PCAPNG) (2025-12-19-1835)](Sniffs/Vibrator-Kh/2025-12-19-1835-Vibrator-Kh-BTLE-Advertisement-and-Connect-Wireshark-nRF52840-Sniff.pcapng)
|
||||||
|
#### BTLE
|
||||||
|
**External**
|
||||||
|
* [Sniffing]()
|
||||||
|
### OSINT
|
||||||
|
- No MAC address assignment or OUI found for `13:25:AC:02:36:9C` is prolly random
|
||||||
|
|
||||||
|
## Buttplug-Bullet
|
||||||
|
### Product Pages
|
||||||
|
* [Amazon](https://www.amazon.com/dp/B0D5YDP6Y5) ([Archive](https://archive.is/7Jlxz))
|
||||||
|
* [APK Download](https://service.acvioo.com/pages/download/app)
|
||||||
|
* [App Manufacturer](https://kstert.vip/col.jsp?id=105)
|
||||||
|
* [Apple Store (iPad/iPhone)](https://apps.apple.com/us/app/kstert/id6476297297)
|
||||||
|
### Images
|
||||||
|
|
||||||
|
## Media
|
||||||
|
### Both
|
||||||
|
#### Video
|
||||||
|
[Both Charging via USB](Assets/Media/Video/2025-12-17-1842_Both-Charging.mp4)
|
||||||
|
### Vibrator-Kh
|
||||||
|
#### Images
|
||||||
|

|
||||||
|
### Buttplug-Bullet
|
||||||
|
#### Images
|
||||||
|

|
||||||
|
|
||||||
|
## Wireshark
|
||||||
|
- android developer options enabled
|
||||||
|
- enable hci snoop log
|
||||||
|
- run bug report
|
||||||
|
- do the shit
|
||||||
|
- save the bug report zip to downloads
|
||||||
|
- move bug report zip to box
|
||||||
|
- extract
|
||||||
|
- search for `btsnoop`
|
||||||
|
- `\FS\data\misc\bluetooth\logs\btsnoop_hci.log`
|
||||||
|
- `\FS\data\misc\bluetooth\logs\btsnoop_hci.log.filtered`
|
||||||
|
- `\FS\data\misc\bluetooth\logs\btsnoop_hci.log.filtered.last`
|
||||||
|
- possible names
|
||||||
|
- btsnoop_hci.log
|
||||||
|
- btsnoop_hci.log.filtered
|
||||||
|
- btsnoop_hci.log.last
|
||||||
|
- open in wireshark
|
||||||
|
- filter for the Vibrator-Kh `(_ws.col.def_src == "13:25:ac:02:36:9c (ZT BAR 1)") || (_ws.col.def_dst == "13:25:ac:02:36:9c (ZT BAR 1)")`
|
||||||
|
|
||||||
|
## Todos
|
||||||
|
1. Archive Pages
|
||||||
|
1. Vibrator-Kh
|
||||||
|
1. x Amazon
|
||||||
|
2. APK Site
|
||||||
|
1. o Homepage
|
||||||
|
2. Product Pages
|
||||||
|
3. x Store
|
||||||
|
3. Google Play Store
|
||||||
|
4. Apple Store
|
||||||
|
2. Buttplug-Bullet
|
||||||
|
1. x Amazon
|
||||||
|
2. APK Site
|
||||||
|
3. Google Play Store
|
||||||
|
4. Apple Store
|
||||||
|
2. Find aliexpress vendor
|
||||||
|
3. Find manufacturers
|
||||||
|
1. Hardware
|
||||||
|
2. x APKs
|
||||||
|
1. x Vibrator-Kh
|
||||||
|
2. x Buttplug-Bullet
|
||||||
|
4. Media
|
||||||
|
1. Images
|
||||||
|
1. Vibrator-Kh
|
||||||
|
1. External
|
||||||
|
2. FCC?
|
||||||
|
3. Teardown?
|
||||||
|
4. OSINT?
|
||||||
|
2. Buttplug-Bullet
|
||||||
|
1. External
|
||||||
|
2. FCC?
|
||||||
|
3. Teardown?
|
||||||
|
4. OSINT?
|
||||||
|
2. Video
|
||||||
|
1. x charging (both)
|
||||||
|
2. pairing mode
|
||||||
|
1. Vibrator-Kh
|
||||||
|
2. Buttplug-Bullet
|
||||||
|
5. Get MAC Addresses
|
||||||
|
1. x phone
|
||||||
|
2. x Vibrator-Kh
|
||||||
|
3. Buttplug-Bullet
|
||||||
|
6. Sniff
|
||||||
|
1. Vibrator-Kh
|
||||||
|
1. External (nRF)
|
||||||
|
1. BTLE
|
||||||
|
1. Advertisement
|
||||||
|
2. INQ results
|
||||||
|
3. Scan results
|
||||||
|
4. Connect
|
||||||
|
5. External sniff
|
||||||
|
2. Internal
|
||||||
|
1. Decoded shit?
|
||||||
|
2. Buttplug-Bullet
|
||||||
|
1. BTLE
|
||||||
|
1. Advertisement
|
||||||
|
2. INQ results
|
||||||
|
3. Scan results
|
||||||
|
4. Connect
|
||||||
|
2. BT Classic?
|
||||||
|
7. OSINT
|
||||||
|
1. FCC
|
||||||
|
2. existing work
|
||||||
|
3. hardware
|
||||||
|
1. bluetooth chip
|
||||||
|
2. soc/mcu/etc
|
||||||
@@ -1,2 +1,32 @@
|
|||||||
# Sex-Toy-Hackin-Pope
|
# Sex Toy Hackin :pope:
|
||||||
|
[](https://www.youtube.com/watch?v=ePbDgoNrKbM&list=RDePbDgoNrKbM&start_radio=1)
|
||||||
|
hueheuhue hackin cheap ass \<$10 app controlled bluetooth vibrators
|
||||||
|
## Project
|
||||||
|
### The Unwilling Patients
|
||||||
|
In absense of proper product names (at time of writing) i have named them
|
||||||
|
1. ["Vibrator-Kh" on Amazon](https://www.amazon.com/dp/B0D5YDP6Y5) ([Archive](https://archive.is/7Jlxz))
|
||||||
|
2. ["Buttplug-Bullet" on Amazon](https://www.amazon.com/dp/B0D5YDP6Y5) ([Archive](https://archive.is/7Jlxz))
|
||||||
|
### Where Shit Be
|
||||||
|
**[Notes.md](Notes.md): Most work is goin on in here**
|
||||||
|
[FILES.md](FILES.md): File list and description i'll try to ffuckin keep updated
|
||||||
|
|
||||||
|
### Project Theme
|
||||||
|
[Official Project Theme to Loop (YouTube)](https://music.youtube.com/watch?v=aOEKu8L5UqQ)
|
||||||
|
|
||||||
|
## LICENSE
|
||||||
|
**Do What the Fuck You Want to Public License (WTFPL)**
|
||||||
|
"Free as in freedom **AND** free as in free beer"
|
||||||
|
"The freest, simplest possible license"
|
||||||
|
|
||||||
|
[WTFPL Home](https://www.wtfpl.net) ([Archive](https://web.archive.org/web/20251218082119/https://www.wtfpl.net/))
|
||||||
|
[WTFPL Local Copy (./COPYING.txt)](COPYING.txt)
|
||||||
|
|
||||||
|
[](COPYING.txt)
|
||||||
|
|
||||||
|
### WTFPL Text
|
||||||
|
```
|
||||||
|
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
|
||||||
|
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
|
||||||
|
|
||||||
|
0. You just DO WHAT THE FUCK YOU WANT TO.
|
||||||
|
```
|
||||||
BIN
Binary file not shown.
Reference in New Issue
Block a user