Compare commits
1 Commits
main
..
4901d5491b
| Author | SHA1 | Date | |
|---|---|---|---|
| 4901d5491b |
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
|
Before Width: | Height: | Size: 1.9 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 2.9 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 1.0 MiB |
Binary file not shown.
|
Before Width: | Height: | Size: 345 KiB |
Binary file not shown.
@@ -1,4 +0,0 @@
|
|||||||
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
|
|
||||||
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
|
|
||||||
|
|
||||||
0. You just DO WHAT THE FUCK YOU WANT TO.
|
|
||||||
@@ -1,48 +0,0 @@
|
|||||||
# Files
|
|
||||||
## Naming Convention
|
|
||||||
- Original filename is retained (if applicable), and seperated from this naming convention by underscores (`<ORIGINAL FILE NAME>`)
|
|
||||||
- Each bit of info is seperated by underscores (_)
|
|
||||||
- spaces and other un-websafe characters in source, descriptions, or filenames are replaced by hyphens (-)
|
|
||||||
- files are named for `Vibrator-Kh` or `Buttplug-Bullet` (`<VIBRATOR NAME>`)
|
|
||||||
- the source of the file (application/description or url with https:// removed and slashes and other problematic characters replaced with hyphens (-)) (`<SOURCE STRING>`)
|
|
||||||
- a basic useful description ex how they were sniffed for PCAPS (`<DESCRIPTION STRING>`)
|
|
||||||
- the date the file was made/downloded in `YYYY-MM-DD-HHMM-TZ` format (24 hour time, three character timezone) (`<TIMESTAMP STRING>`)
|
|
||||||
- example: `2025-12-19-2048-MST`
|
|
||||||
- linux: `date +"%Y-%m-%d-%H%M-%Z"`
|
|
||||||
- powershell 7+: `(Get-Date).ToString("yyyy-MM-dd-HHmm") + "-" + ((Get-TimeZone).Id -creplace '[a-z\s]', '')` (better be fuckin happy you windows dorks)
|
|
||||||
- image or video assets include HEIGHTxWIDH in pixels (`<HEIGHT IN PIXELS>`x`<WITH IN PIXELS>`)
|
|
||||||
|
|
||||||
**Format:** (each item only if applicable)
|
|
||||||
`<ORIGINAL FILE NAME>_<VIBRATOR NAME>_<SOURCE STRNG>_<DESCRIPTION STRING>_<TIMESTAMP STRING>_<HEIGHT IN PIXELS>x<WIDTH IN PIXELS>.<FILE EXTENSION>`
|
|
||||||
**Example:**
|
|
||||||
`kstert_Buttplug-Bullet_service.acvioo.com-pages-download-app)APK-from-manufacturers-website_2025-12-19-1919.apk`
|
|
||||||
|
|
||||||
## Files Directory
|
|
||||||
- [.gitignore](.gitignore): Git ignore file
|
|
||||||
- [README.md](README.md): Project Home
|
|
||||||
- [Files.md](Files.md): This file, containing a list of all files in the repository with descriptions
|
|
||||||
- [Notes.md](Notes.md): Notes documenting the project, including todos, methodology, osint, and details on the vibrators
|
|
||||||
- [COPYING.txt](COPYING.txt): License file (WTFPL)
|
|
||||||
- Android/
|
|
||||||
- APKs/
|
|
||||||
- Buttplug-Bullet/
|
|
||||||
- [2025-12-19-1919_kstert.apk](Android/APKs/Buttplug-Bullet/2025-12-19-1919_kstert.apk): APK file for the Buttplug-Bullet vibrator app (kstert)
|
|
||||||
- Vibrator-Kh/
|
|
||||||
- [2025-12-19-1916_Zero Tochu零触-Enjoy Yourself乐享自我.apk](Android/APKs/Vibrator-Kh/2025-12-19-1916_Zero%20Tochu%E9%9B%B6%E8%A7%A6-Enjoy%20Yourself%E4%B9%90%E4%BA%AB%E8%87%AA%E6%88%91.apk): APK file for the Vibrator-Kh app (Zero Tochu)
|
|
||||||
- Sniffs/
|
|
||||||
- Vibrator-Kh/
|
|
||||||
- [2025-12-19-1835-Vibrator-Kh-BTLE-Advertisement-and-Connect-Wireshark-nRF52840-Sniff.pcapng](Sniffs/Vibrator-Kh/2025-12-19-1835-Vibrator-Kh-BTLE-Advertisement-and-Connect-Wireshark-nRF52840-Sniff.pcapng): Wireshark capture of BTLE sniffing for Vibrator-Kh
|
|
||||||
- Assets/
|
|
||||||
- Markdown/
|
|
||||||
- [wtfpl-badge-1_88x31.png](Assets/Markdown/wtfpl-badge-1_88x31.png): WTFPL license badge
|
|
||||||
- [pope.webp](Assets/Markdown/pope.webp): cropped image of the new pope from his first appearance in public after being elected pope :pope:
|
|
||||||
- Media/
|
|
||||||
- Images/
|
|
||||||
- [Buttplug-Bullet_Top_Off_2025-12-19-2040_2268x3582.jpg](Assets/Media/Images/Buttplug-Bullet_Top_Off_2025-12-19-2040_2268x3582.jpg): Image of Buttplug-Bullet top turned off
|
|
||||||
- [Vibrator-Kh_Top_Off_2025-12-19-2039_4032x2268.jpg](Assets/Media/Images/Vibrator-Kh_Top_Off_2025-12-19-2039_4032x2268.jpg): Image of Vibrator-Kh top turned off
|
|
||||||
- Video/
|
|
||||||
- [2025-12-17-1842_Both-Charging.mp4](Assets/Media/Video/2025-12-17-1842_Both-Charging.mp4): Video of both vibrators charging
|
|
||||||
- Original-Files.ignore/
|
|
||||||
- [kstert.apk](Original-Files.ignore/kstert.apk): Original APK for kstert app
|
|
||||||
- [PXL_20251217_1842352262.mp4](Original-Files.ignore/PXL_20251217_1842352262.mp4): Original video file (possibly charging or pairing)
|
|
||||||
- [Zero Tochu零触-Enjoy Yourself乐享自我.apk](Original-Files.ignore/Zero%20Tochu%E9%9B%B6%E8%A7%A6-Enjoy%20Yourself%E4%B9%90%E4%BA%AB%E8%87%AA%E6%88%91.apk): Original APK for Zero Tochu app
|
|
||||||
@@ -1,191 +0,0 @@
|
|||||||
# Notes
|
|
||||||
# Table of Contents
|
|
||||||
|
|
||||||
- [Notes](#notes)
|
|
||||||
- [Table of Contents](#table-of-contents)
|
|
||||||
- [Start](#start)
|
|
||||||
- [Methodology](#methodology)
|
|
||||||
- [Bluetooth](#bluetooth)
|
|
||||||
- [BTLE Sniffing](#btle-sniffing)
|
|
||||||
- [On Computer](#on-computer)
|
|
||||||
- [Resources](#resources)
|
|
||||||
- [On Android Phone](#on-android-phone)
|
|
||||||
- [Vibrator-Kh](#vibrator-kh)
|
|
||||||
- [Product Pages](#product-pages)
|
|
||||||
- [Manufacturer](#manufacturer)
|
|
||||||
- [Hardware](#hardware)
|
|
||||||
- [App](#app)
|
|
||||||
- [Bluetooth](#bluetooth-1)
|
|
||||||
- [Sniffing](#sniffing)
|
|
||||||
- [BTLE](#btle)
|
|
||||||
- [OSINT](#osint)
|
|
||||||
- [Buttplug-Bullet](#buttplug-bullet)
|
|
||||||
- [Product Pages](#product-pages-1)
|
|
||||||
- [Images](#images)
|
|
||||||
- [Media](#media)
|
|
||||||
- [Both](#both)
|
|
||||||
- [Video](#video)
|
|
||||||
- [Vibrator-Kh](#vibrator-kh-1)
|
|
||||||
- [Images](#images-1)
|
|
||||||
- [Buttplug-Bullet](#buttplug-bullet-1)
|
|
||||||
- [Images](#images-2)
|
|
||||||
- [Wireshark](#wireshark)
|
|
||||||
- [Todos](#todos)
|
|
||||||
|
|
||||||
## Start
|
|
||||||
Two Vibrators:
|
|
||||||
1. [Vibrator-Kh](#vibrator-kh) (Purple Bullet One)
|
|
||||||
2. [Buttplug-Bullet](#buttplug-bullet) (Black Buttplug One)
|
|
||||||
## Methodology
|
|
||||||
### Bluetooth
|
|
||||||
#### BTLE Sniffing
|
|
||||||
##### On Computer
|
|
||||||
**[nRF52840 USB-C Dongle](https://www.amazon.com/dp/B0DP6MVDZQ) with [nRF Sniffer for Bluetooth LE firmware](https://www.nordicsemi.com/Products/Development-tools/nrf-sniffer-for-bluetooth-le) installed dumped to [Wireshark](https://www.wireshark.org) on Windows 11 With a Pixel 9 Base Model Running Android (Bluetooth MAC: `CO:1C:6A:6E:58:96`)**
|
|
||||||
[Sniffing Captures](Sniffs/Vibrator-Kh)
|
|
||||||
##### Resources
|
|
||||||
**Official**
|
|
||||||
1. [Official nRF52840 Dongle Page](https://www.nordicsemi.com/Products/Development-hardware/nRF52840-Dongle)
|
|
||||||
2. [Official nRF52840 SoC Page](https://www.nordicsemi.com/Products/nRF52840)
|
|
||||||
1. [Product Specification/Datasheet (Parent)](https://docs.nordicsemi.com/bundle/ps_nrf52840/page/keyfeatures_html5.html)
|
|
||||||
2. [SoC Docs](https://docs.nordicsemi.com/category/nrf52840-category)
|
|
||||||
3. [Official nRF Sniffer for Bluetooth LE firmware page (Parent)](https://www.nordicsemi.com/Products/Development-tools/nrf-sniffer-for-bluetooth-le)
|
|
||||||
**Community**
|
|
||||||
1. [Guide Largely Used](https://dojofive.com/blog/using-the-nordic-nrf-sniffer-for-ble/)
|
|
||||||
2. [Detailed Guide/Info (Parent)](https://wiki.makerdiary.com/nrf52840-mdk-usb-dongle/guides/ble-sniffer/)
|
|
||||||
3. [Guide With Hints on Snifing](https://novelbits.io/nordic-ble-sniffer-guide-using-nrf52840-wireshark/)
|
|
||||||
4. [Adafruit Guide](https://learn.adafruit.com/ble-sniffer-with-nrf52840/working-with-wireshark)
|
|
||||||
##### On Android Phone
|
|
||||||
Pixel 9 Base model used
|
|
||||||
**Apps** (experimenting)
|
|
||||||
- [BlueTooth Termina eDebugger](https://play.google.com/store/apps/details?id=com.e.debugger&hl=en_US)
|
|
||||||
- [Bluefruit LE Connect](https://learn.adafruit.com/bluefruit-le-connect/) ([Google Play Store](https://play.google.com/store/apps/details?id=com.adafruit.bluefruit.le.connect&hl=en_US))
|
|
||||||
|
|
||||||
## Vibrator-Kh
|
|
||||||
### Product Pages
|
|
||||||
* [Amazon](https://www.amazon.com/dp/B0FHB5LCX4) ([Archive](https://archive.is/T7dsm))
|
|
||||||
### Manufacturer
|
|
||||||
#### Hardware
|
|
||||||
* [zero-tochu.com (Home Page)](https://www.zero-tochu.com) ([Archive]())
|
|
||||||
* [Store](https://zerochu.com/?shpxid=d3b9436e-fb3d-4966-9092-be55f18e9d79) ([Archive](https://archive.is/TbgMc))
|
|
||||||
* todo
|
|
||||||
#### App
|
|
||||||
* [zero-tochu.com](https://www.zero-tochu.com) ([Archive]())
|
|
||||||
* [APK (zero-touchu.com)](https://www.zero-tochu.com/Zero%20Tochu%E9%9B%B6%E8%A7%A6-Enjoy%20Yourself%E4%B9%90%E4%BA%AB%E8%87%AA%E6%88%91.apk) ([Archive]())
|
|
||||||
* [Google Play Store](https://play.google.com/store/apps/details?id=apk.zero.tochu) ([Archive]())
|
|
||||||
* [Apple Store (iPhone)](https://apps.apple.com/us/app/zero-tochu%E9%9B%B6%E8%A7%A6/id6467008871) ([Archive]())
|
|
||||||
### Bluetooth
|
|
||||||
Phone MAC Address: `CO:1C:6A:6E:58:96`
|
|
||||||
Toy MAC Address: `13:25:AC:02:36:9C`
|
|
||||||
#### Sniffing
|
|
||||||
* External
|
|
||||||
* [ADV/IRQ/Connect/Scan Sniffs (PCAPNG) (2025-12-19-1835)](Sniffs/Vibrator-Kh/2025-12-19-1835-Vibrator-Kh-BTLE-Advertisement-and-Connect-Wireshark-nRF52840-Sniff.pcapng)
|
|
||||||
#### BTLE
|
|
||||||
**External**
|
|
||||||
* [Sniffing]()
|
|
||||||
### OSINT
|
|
||||||
- No MAC address assignment or OUI found for `13:25:AC:02:36:9C` is prolly random
|
|
||||||
|
|
||||||
## Buttplug-Bullet
|
|
||||||
### Product Pages
|
|
||||||
* [Amazon](https://www.amazon.com/dp/B0D5YDP6Y5) ([Archive](https://archive.is/7Jlxz))
|
|
||||||
* [APK Download](https://service.acvioo.com/pages/download/app)
|
|
||||||
* [App Manufacturer](https://kstert.vip/col.jsp?id=105)
|
|
||||||
* [Apple Store (iPad/iPhone)](https://apps.apple.com/us/app/kstert/id6476297297)
|
|
||||||
### Images
|
|
||||||
|
|
||||||
## Media
|
|
||||||
### Both
|
|
||||||
#### Video
|
|
||||||
[Both Charging via USB](Assets/Media/Video/2025-12-17-1842_Both-Charging.mp4)
|
|
||||||
### Vibrator-Kh
|
|
||||||
#### Images
|
|
||||||

|
|
||||||
### Buttplug-Bullet
|
|
||||||
#### Images
|
|
||||||

|
|
||||||
|
|
||||||
## Wireshark
|
|
||||||
- android developer options enabled
|
|
||||||
- enable hci snoop log
|
|
||||||
- run bug report
|
|
||||||
- do the shit
|
|
||||||
- save the bug report zip to downloads
|
|
||||||
- move bug report zip to box
|
|
||||||
- extract
|
|
||||||
- search for `btsnoop`
|
|
||||||
- `\FS\data\misc\bluetooth\logs\btsnoop_hci.log`
|
|
||||||
- `\FS\data\misc\bluetooth\logs\btsnoop_hci.log.filtered`
|
|
||||||
- `\FS\data\misc\bluetooth\logs\btsnoop_hci.log.filtered.last`
|
|
||||||
- possible names
|
|
||||||
- btsnoop_hci.log
|
|
||||||
- btsnoop_hci.log.filtered
|
|
||||||
- btsnoop_hci.log.last
|
|
||||||
- open in wireshark
|
|
||||||
- filter for the Vibrator-Kh `(_ws.col.def_src == "13:25:ac:02:36:9c (ZT BAR 1)") || (_ws.col.def_dst == "13:25:ac:02:36:9c (ZT BAR 1)")`
|
|
||||||
|
|
||||||
## Todos
|
|
||||||
1. Archive Pages
|
|
||||||
1. Vibrator-Kh
|
|
||||||
1. x Amazon
|
|
||||||
2. APK Site
|
|
||||||
1. o Homepage
|
|
||||||
2. Product Pages
|
|
||||||
3. x Store
|
|
||||||
3. Google Play Store
|
|
||||||
4. Apple Store
|
|
||||||
2. Buttplug-Bullet
|
|
||||||
1. x Amazon
|
|
||||||
2. APK Site
|
|
||||||
3. Google Play Store
|
|
||||||
4. Apple Store
|
|
||||||
2. Find aliexpress vendor
|
|
||||||
3. Find manufacturers
|
|
||||||
1. Hardware
|
|
||||||
2. x APKs
|
|
||||||
1. x Vibrator-Kh
|
|
||||||
2. x Buttplug-Bullet
|
|
||||||
4. Media
|
|
||||||
1. Images
|
|
||||||
1. Vibrator-Kh
|
|
||||||
1. External
|
|
||||||
2. FCC?
|
|
||||||
3. Teardown?
|
|
||||||
4. OSINT?
|
|
||||||
2. Buttplug-Bullet
|
|
||||||
1. External
|
|
||||||
2. FCC?
|
|
||||||
3. Teardown?
|
|
||||||
4. OSINT?
|
|
||||||
2. Video
|
|
||||||
1. x charging (both)
|
|
||||||
2. pairing mode
|
|
||||||
1. Vibrator-Kh
|
|
||||||
2. Buttplug-Bullet
|
|
||||||
5. Get MAC Addresses
|
|
||||||
1. x phone
|
|
||||||
2. x Vibrator-Kh
|
|
||||||
3. Buttplug-Bullet
|
|
||||||
6. Sniff
|
|
||||||
1. Vibrator-Kh
|
|
||||||
1. External (nRF)
|
|
||||||
1. BTLE
|
|
||||||
1. Advertisement
|
|
||||||
2. INQ results
|
|
||||||
3. Scan results
|
|
||||||
4. Connect
|
|
||||||
5. External sniff
|
|
||||||
2. Internal
|
|
||||||
1. Decoded shit?
|
|
||||||
2. Buttplug-Bullet
|
|
||||||
1. BTLE
|
|
||||||
1. Advertisement
|
|
||||||
2. INQ results
|
|
||||||
3. Scan results
|
|
||||||
4. Connect
|
|
||||||
2. BT Classic?
|
|
||||||
7. OSINT
|
|
||||||
1. FCC
|
|
||||||
2. existing work
|
|
||||||
3. hardware
|
|
||||||
1. bluetooth chip
|
|
||||||
2. soc/mcu/etc
|
|
||||||
@@ -1,32 +1,2 @@
|
|||||||
# Sex Toy Hackin :pope:
|
# Sex-Toy-Hackin-Pope
|
||||||
[](https://www.youtube.com/watch?v=ePbDgoNrKbM&list=RDePbDgoNrKbM&start_radio=1)
|
|
||||||
hueheuhue hackin cheap ass \<$10 app controlled bluetooth vibrators
|
|
||||||
## Project
|
|
||||||
### The Unwilling Patients
|
|
||||||
In absense of proper product names (at time of writing) i have named them
|
|
||||||
1. ["Vibrator-Kh" on Amazon](https://www.amazon.com/dp/B0D5YDP6Y5) ([Archive](https://archive.is/7Jlxz))
|
|
||||||
2. ["Buttplug-Bullet" on Amazon](https://www.amazon.com/dp/B0D5YDP6Y5) ([Archive](https://archive.is/7Jlxz))
|
|
||||||
### Where Shit Be
|
|
||||||
**[Notes.md](Notes.md): Most work is goin on in here**
|
|
||||||
[FILES.md](FILES.md): File list and description i'll try to ffuckin keep updated
|
|
||||||
|
|
||||||
### Project Theme
|
|
||||||
[Official Project Theme to Loop (YouTube)](https://music.youtube.com/watch?v=aOEKu8L5UqQ)
|
|
||||||
|
|
||||||
## LICENSE
|
|
||||||
**Do What the Fuck You Want to Public License (WTFPL)**
|
|
||||||
"Free as in freedom **AND** free as in free beer"
|
|
||||||
"The freest, simplest possible license"
|
|
||||||
|
|
||||||
[WTFPL Home](https://www.wtfpl.net) ([Archive](https://web.archive.org/web/20251218082119/https://www.wtfpl.net/))
|
|
||||||
[WTFPL Local Copy (./COPYING.txt)](COPYING.txt)
|
|
||||||
|
|
||||||
[](COPYING.txt)
|
|
||||||
|
|
||||||
### WTFPL Text
|
|
||||||
```
|
|
||||||
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
|
|
||||||
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
|
|
||||||
|
|
||||||
0. You just DO WHAT THE FUCK YOU WANT TO.
|
|
||||||
```
|
|
||||||
BIN
Binary file not shown.
Reference in New Issue
Block a user