stpihkal
stpihkal copied to clipboard
buttplugio
Sex Toys Protocols I Have Known And Loved - Documentation of Reverse Engineered Protocols for Commercial Sex Hardware
Remove "sent as decimal". This isn't BCD, it can be sent as hex. https://stpihkal.docs.buttplug.io/hardware/fleshlight-launch.html#firmware-v1-2-1-3-commands
Despite being a Kiiroo, it's based on the Nordic chipset (assumed because it's advertising the Nordic DFU service). BLE Name: OhMiBod 4.0 Service UUID: a0d70001-4c16-4ba7-977a-d394920e13a3 Tx characteristic UUID: a0d70002-4c16-4ba7-977a-d394920e13a3 Rx...
Looks like the Onyx 2.1,Titan 1.1, Pearl 2.1 and Cliona use a new set of UUIDs. The UUIDs are the same for all 4: Service UUID: 00001900-0000-1000-8000-00805f9b34fb Whitelist characteristic UUID:...
BLE NameL Love_Nuts Service UUID: 0000fff0-0000-1000-8000-00805f9b34fb Tx Characteristic: 0000fff1-0000-1000-8000-00805f9b34fb Format: 0x45 0x56 0x4 0xf4c 0xXX 0xXX 0xXX 0xXX 0xXX 0xXX 0xXX 0xXX 0xXX 0xXX 0xYY 0xYY Where: * X (20...
BLE Names: * PROSTATE VIBE * KNICKER VIBE Service UUID: 0000ff00-0000-1000-00805f9b34fb Tx char: 0000ff01-0000-1000-00805f9b34fb Commands: Vibrate: 0xf3 0xXX 0xYY XX vibe number (0 for all or 1 or 2 -...
BLE Name: Massage Demo Service UUID: 0000ff00-0000-1000-8000-00805f9b34fb Tx Characteristic UUID: 0000ff01-0000-1000-8000-00805f9b34fb Manual control: 0xFX, 0xYY Where X 1==Outer motor, 2==Inner motor YY is speed in range 00-7F There seems to...
Quoting from https://metafetish.club/t/magic-motion-toys-maybe-universal-specifications/286: ` Yep bros! I have been RE the Magic Motion BLE protocol, but I have only Magic Kegel Master device and want someone to test multi-argument functions...
BLE Names: Lottie (Rabbit): XiaoLu LuLu (Egg): LuXiaoHan Karen (Kegel Egg): SuoYinQiu LaLa (Suction Rabbit): BaiHu ELLE: (Shock Egg): PiPiJing (Older version named Whale exists with different UUIDs) Sistalk MonsterPub...
The InnoTek FieldPro uses 27,145MHz FM FSK and forward error correction, and is very picky about there being no jitter in the pulses. Hence the code uses a Si5351 clock...
Bluetooth Name: MB Controller Control Service: 0xfff0 Control Characteristic: 0xfff6 Packet Format: - Byte 0 - Seems to usually be 0xff for vibrate / 0xaf for rotate? - Bytes 1-15...
Metadata
Owner
Metadata
Sex Toys Protocols I Have Known And Loved - Documentation of Reverse Engineered Protocols for Commercial Sex Hardware