Questions tagged [protocol]

A system of rules designed to allow the communication between two or more participants. The two main types of protocols are either stateless protocols (UDP) or stateful protocols (TCP).

Filter by
Sorted by
Tagged with
6
votes
1answer
300 views

HackRF One - Replay Attack on Garage Door does not work (12 DIP switches)

TL;DR solution Setting 4MHz sample rate and 2Mhz bandwidth in the capture tab (according to the Nyquist theorem the sample rate has to be double the bandwidth) Using the length of a DIP switch ...
2
votes
1answer
74 views

How to determine a type of binary serialization?

I'm trying to analyze the messages that the game sends to the server through WebSockets. I have a simple WebSockets proxy that stands in the middle and prints all messages to the console. I noticed ...
3
votes
1answer
74 views

On reverse engineering an udp protocol to control a drone

My goal is to control my drone with my raspberry pi using python and not the app that is being delivered together with it. First I connected the app to the drone, flew and used aircrack-ng to get the ...
-1
votes
1answer
40 views

Finding the logic in remote control data

I have a set of remote controlled power sockets which operate on the 433MHz range and am trying to understand the protocol used between the remote and the sockets. They are sold under the Silvercrest ...
0
votes
0answers
55 views

Decoding simple OOK protocol on 433MHz radio chips

due to boredom I've tried to RE simple cheap wireless ring bell which uses 433.92MHz transmitter and receiver. It sends several times the same information. On the transmitter side there is AD1614AT ...
3
votes
1answer
134 views

Is it possible to sniff an ATA Drive password?

Context: I have a proprietary Tandberg Data RDX QuickStor Internal USB3 drive bay for PC (item number 8666-RDX) and some storage cartridges for it. Esentially, these are just regular TOSHIBA MK3276GSX ...
0
votes
0answers
29 views

Synchronisation Symbols in USB Transfers

I'm reversing a USB protocol of a device. It's based on USB HID reads, and writes. The protocol always has an 0xAA after the header, and every occurrence of 0xAA in the payload is doubled. After some ...
4
votes
3answers
312 views

Modern tools for reversing binary network protocols

What are some modern tools or techniques for attempting to reverse a binary protocol sent over UDP? I've been trying to do research on this, and it seems like almost everything is obselete. Previous ...
0
votes
2answers
153 views

What checksum algorithm is this?

I'm trying to control an air conditioning unit. The app and the unit communicate using the Broadlink protocol. I can decode the settings it's sending and replay them. The payload is 32 bytes but only ...
1
vote
1answer
172 views

Reverse UART communication protocol

I'm objective is to build a custom wifi module to be used on a Samsung AC AR24HSFSAWKN. I have such an official module SWL-B70F for which I'm trying to reverse engineer the communication with the main ...
0
votes
0answers
68 views

Reverse Engineering an 8 bit CRC

I am doing reverse engineering on some IR packets, I'm trying to figure out a CRC for some data but with no success, i tried the checksums (sum, xor...), CRC calculator crccalc.com, Reveng but with no ...
0
votes
2answers
101 views

Touch screen driver module - Determine comunication protocol

I have taken apart an old non-functional Lenovo IdeaCentre (B320) computer. I would like to get the glass touch panel to 'work' (I would consider anything from simply being able to sniff the x,y ...
0
votes
1answer
107 views

Manufacturer interface on OCZ Agility 4 SSD

Inside the housing of an OCZ Agility 4 SSD I found several additional connectors on the opposite site of the SATA connectors. What are they good for and how to connect them properly? Zoomed:
1
vote
1answer
85 views

What's wrong with my mitm to support rr commands with gdbserver on IDA?

First of here is the gdb remote protocol doc. The idea of the below script is the following - you enter an actual command (one that will be send as a direct packet see packets) in the gdb window then ...
0
votes
1answer
170 views

Determine checksum / CRC algorithm

I am doing reverse engineering on some network protocol. It is client to server communication and I am pretty stuck with identifying checksum (or CRC) algorithm used in packet structure. I tried ...
1
vote
1answer
107 views

Checksum field within IR protocol

I am trying to reverse engineer the IR protocol for my air conditioner (GREE - remote control YAP1FF) and with the data I found online and a lot of testing with a IR receiver there is only one field I ...
1
vote
0answers
154 views

Reconstructing struct/union-based IPC protocol wire format

I'm embarking on my first reverse-engineering adventure. I think I've picked a rather dense piece of steak to start out with. I have three C programs which communicate together using an unknown IPC ...
3
votes
0answers
128 views

Reverse engineering non-standard LIN protocol

I'm trying to reverse engineer an ECU / GSU protocol from a model airplane jet turbine, in order to make a telemetry adapter. I have decoded several other protocols in the past with good success but ...
1
vote
0answers
43 views

Likely protocol determination by chip IDs and connections?

CONTEXT: My first post in this stack. Absolute beginner at RE. Also generally a beginner at anything electronics. Please be kind and correct me instead of ridiculing me. GOAL: Replace a damaged ...
2
votes
1answer
223 views

UE Megaboom serial protocol

I recently got a UE Megaboom Bluetooth speaker. Apart from various audio profiles, I noticed the speaker also exposes a Serial Port BT profile. I suspect this is the channel the app uses to control ...
0
votes
1answer
300 views

How to calculate the checksum algorithm with data captures

I have an obsolete control system that I am trying to write an interface into our new control system. I have spent weeks capturing data and figuring out the addressing, polling commands, point ...
2
votes
1answer
91 views

Can't identify checksum type in unknown RS485 protocol

I need to reverse a RS485 protocol in order to extract some values for further usage. Unfortunately only these few messages are available at the moment. They repeat continuosly. Only in special ...
3
votes
1answer
254 views

Decipher variable length serial protocol

I have an ebike consisting of a controller which regulates power to the motor and a smart LCD which can adjust max speed, power output, pedal assist sensitivity etc as well as displaying the current ...
3
votes
1answer
269 views

What Checksum/CRC algorithm in RF packet?

I am banging my head to figure out the checksum of a RF device, it seems to be a simple one but no luck so far... The first 3 bytes is the SyncWord then 9 bytes is the payload and the last byte ...
0
votes
1answer
293 views

Decoding serial data package

I have an assignment at work, to get information from Jenbacher generator and show values in new SCADA system. It has a B&R CP260 PLC with RS232 port and RS232 to RS485 converter. Currently it’s ...
2
votes
0answers
136 views

serial protocol patterns

I am reversing a serial 232 protocol and I found these pattern in the data. E5 A7 CD 01 00 79 .. .. 40 00 23 00 23 00 23 00 23 00 22 00 22 00 22 00 21 follows some recording and expected approx ...
4
votes
0answers
332 views

Trouble finding the right Checksum algorithm

After reading a lot of posts here and their solutions, Punching lines in CRC calculators for several days now. I can't seem to find on which Checksum this code is based. Background This is a data ...
3
votes
1answer
353 views

NFC Tag reverse engineering failed by a non-responding tag

I was curious about a system using NFC and I tried to find out what was the protocol. But after digging few days around, I have the card detected by my reader (acr122u) but that's all I get. I can't ...
3
votes
0answers
1k views

Reverse engineering unknown RS232/UART binary protocol

Background story For couple of days I'm trying to crack the protocol used the old medical device, in order to collect data for a research in an automated way. The device in question is Novametrix ...
2
votes
1answer
755 views

Deducing Protobuf Schema and Datatypes

I have a number of protobuf files but no .proto schema file! cat myfile.pbuf | protoc --decode_raw > outputfile.txt Using the above command, I was able to decode the file into a somewhat readable ...
1
vote
2answers
2k views

DPFMate Keychain tool

Got this Digital Keychain Photo viewer thingy. Comes with the DPFMate.exe software, which does not run under Windows 10. So far I've confirmed, that it runs perfectly on what they avertise - Windows ...
1
vote
0answers
26 views

FFC on the back of a Chromebook Pixel Display Assembly

Hello! I want to get the touch overlay of a Chromebook Pixel Display Assembly to work. I attached a picture of the Cable coming out of a mxT1664S touch controller. Can someone tell me what type of ...
1
vote
0answers
119 views

Protocol RE, mysterious checksum function

Im trying to reverse engineer a protocol in which some text is sent and has a specific number appended. I figured out that the number is some kind of a checksum (depends on the text somehow) and also ...
2
votes
3answers
2k views

How to monitor/reverse engineer RS485-connected display device traffic?

Can anyone point me in the right direction for tutorials etc on reverse engineering RS484 connected battery management system? I have a large 12V lithium battery module which has an internal BMS and ...
0
votes
1answer
88 views

What is the format of this time?

I'm trying to interpret a bunch of bytes I'm receiving from a GPS tracker. There are 3 sequential bytes that I believe mean hours, minutes and seconds. I recorded timestamps along with the messages I ...
0
votes
1answer
437 views

reversing ios notes file format [closed]

I am trying to understand how to read iOS notes files as they are saved in the NoteStore.sqlite database in the iOS backup. Here are some sample files. Each file is a different note. I want to get ...
1
vote
1answer
195 views

Methods for Reverse engineering proprietary protocol

I have a class of devices that I want to connect to. They use a protocol co-developed by a couple companies back in the day and was never published. Electrically there is only one wire which wraps ...
0
votes
1answer
744 views

Daikin A/C 4bit CRC/Checksum

I am reverse engineering IR protocol of Daikin A/C. AC sends the whole current state of remote on each key press. Data sent is 8 byte long, last 4 bits seem to be the some kind of error checking. ...
1
vote
0answers
49 views

Reversing a serial communication with two inputs

I'm making a device that needs me to transfer some sort of initiation code like handshaking to start further communications. There is 2 inputs and 2 outputs the first output is pretty similar to a two'...
3
votes
1answer
892 views

Reverse engineer checksum algorithm

I am trying to reverse-engineer the protocol used between my Air-conditioner and the wired control unit on my wall. (In order to have my home automation be able to monitor and control the A/C.) The ...
7
votes
2answers
1k views

Router's serial port only outputs garbage

I'm trying to reverse engineer a 2Wire ADSL modem/router, mainly for practice. I opened it and found a serial port (with a header conveniently already in place) but I'm not getting any useful data out ...
1
vote
4answers
1k views

XMPP clubs in league of legends

Hopefully I'm asking this at the right place. League of legends recently added the option to join a club. Clubs still use the XMPP protocol just like before for their public chat rooms: XMPP for ...
1
vote
0answers
837 views

Reversing network traffic and rebuild packets

I want to learn something about reverse engineering. I want to rebuild the TeamSpeak connection (client connects to server). I hooked the recv and send + encrypt/decrypt functions and logged the ...
1
vote
0answers
162 views

Trying to replicate a serial protocol

Spent the last few weeks reading, typing, testing, rinse & repeat to no avail in solving a problem. Problem: Trying to reverse engineer a serial protocol at work. Instrument is currently being ...
1
vote
1answer
341 views

What checksum algorithm is this network protocol using?

I've been working my way through an undocumented TCP-based protocol by monitoring traffic with tcpdump, Wireshark, and some Python packages (scapy, numpy) with good luck so far, but I've hit a wall ...
4
votes
2answers
1k views

Reverse engineer 4-bit checksum (?) in Sanyo air conditioning IR packet

I am reverse engineering IR protocol of Sanyo air conditioner. AC sends the whole current state of remote on each key press. Data sent is 67 bits long, last 4 bits seem to be the some kind of error ...
1
vote
0answers
332 views

How can I figure out what serial port communication protocol is a software using?

I'm working to adapt an stress excercise test software so that it can work with a treadmill that uses a different communication protocol. The communicate via a RS232 cable, with a USB-RS232 adapting ...
7
votes
1answer
954 views

Reverse engineer TPMS sensor data

I'm trying to reverse engineer data received from TPMS (car tire pressure) sensors. I was able to receive and demodulate the data (433 MHz, FSK, Manchester encoding). Probable packet fields: bytes 1-...
2
votes
0answers
636 views

Reverse engineering TPMS sensor data [closed]

I'm trying to reverse engineer data received from TPMS (car tyre pressure) sensors. I used rtl_433 tool to capture the data from sensor at 433 MHz. Tool was able to detect data is using FSK modulation ...
2
votes
1answer
2k views

Calculating check sum of m-bus data frame

I'm trying to calculate the check sum of a m-bus data frame. In page 1 of this PDF I'm able to read that the frame's check sum "is calculated from the arithmetical sum of the data mentioned above, ...