Sex-Toy-Hackin-Pope/Notes.md

Notes

Todos

1. Archive Pages
   1. Vibrator-Kh
      1. x Amazon
      2. APK Site
         1. o Homepage
         2. Product Pages
         3. x Store
      3. Google Play Store
      4. Apple Store
   2. Buttplug-Bullet
      1. x Amazon
      2. APK Site
      3. Google Play Store
      4. Apple Store
2. Find aliexpress vendor
3. Find manufacturers
   1. Hardware
   2. x APKs
      1. x Vibrator-Kh
      2. x Buttplug-Bullet
4. Images
   1. Vibrator-Kh
      1. External
      2. FCC?
      3. Teardown?
      4. OSINT?
   2. Buttplug-Bullet
      1. External
      2. FCC?
      3. Teardown?
      4. OSINT?
5. Get MAC Addresses
   1. x Vibrator-Kh
   2. Buttplug-Bullet
6. Sniff
   1. Vibrator-Kh
      1. External (nRF)
         1. BTLE
            1. Advertisement
            2. INQ results
            3. Scan results
            4. Connect
            5. External sniff
      2. Internal
         1. Decoded shit?
   2. Buttplug-Bullet
      1. BTLE
         1. Advertisement
         2. INQ results
         3. Scan results
         4. Connect
      2. BT Classic?

Start

Two Vibrators:

1. Vibrator-Kh (Purple Bullet One)
2. Buttplug-Bullet (Black Buttplug One)

Methodology

Bluetooth

BTLE Sniffing

nRF52840 USB-C Dongle with nRF Sniffer for Bluetooth LE firmware installed dumped to Wireshark on Windows 11 With a Pixel 9 Base Model Running Android (Bluetooth MAC: CO:1C:6A:6E:58:96)
Sniffing Captures

Resources

Official

1. Official nRF52840 Dongle Page
2. Official nRF52840 SoC Page
   1. Product Specification/Datasheet (Parent)
   2. SoC Docs
3. Official nRF Sniffer for Bluetooth LE firmware page (Parent) Community
4. Guide Largely Used
5. Detailed Guide/Info (Parent)
6. Guide With Hints on Snifing
7. Adafruit Guide

Vibrator-Kh

Product Pages

• Amazon (Archive)

Images

Manufacturer

Hardware

• zero-tochu.com (Home Page) (Archive)
  • Store (Archive)
  • todo

App

• zero-tochu.com (Archive)
  • APK (zero-touchu.com) (Archive)
  • Google Play Store (Archive)
  • Apple Store (iPhone) (Archive)

Bluetooth

Phone MAC Address: CO:1C:6A:6E:58:96 Toy MAC Address: 13:25:AC:02:36:9C

Sniffing

• External
  • ADV/IRQ/Connect/Scan Sniffs (PCAPNG) (2025-12-19-1835)

BTLE

External

• Sniffing

Buttplug-Bullet

Product Pages

• Amazon (Archive)
• APK Download
• App Manufacturer
• Apple Store (iPad/iPhone)

Images