danielweidman / pixmob-ir-reverse-engineering

Hacking the PixMob infrared (and now also RF!) protocol to enable control of PixMob wristbands at home.
MIT License
594 stars 42 forks source link

Pixmob Bracelet Wave Radio Frequency Hack. #24

Open ericmargay opened 1 year ago

ericmargay commented 1 year ago

In the recent concerts they are using this kind of bracelet. I am searching to the web if there is any hack. Apparently doesn't exist info about it. Do you think IR bracelet has the same chip as the RF bracelet ?.

Adding some pictures. IMG_5734 IMG_5735 IMG_5736

sean1983 commented 1 year ago

Hi, Thanks for your post, We are in the process of trying to decode them, we had only had them a few days, I have done my research on the main MCU IC and it looks to be the same, Also the new addition Radio / OOK Decoder IC is interesting and the datasheet states it to be a direct replacement for Infrared, So I am betting that IC sends the same old codes to the MCU after being demodulated/decoded from the OOK Modulation that is used via RF.

But if you have a Flipper or HackRF, or DIY 915mhz ardunio TX, Then we already have a few codes that will work.

danielweidman commented 1 year ago

@ericmargay What concert did you get this from, by the way? I can share recordings of the signals soon

ericmargay commented 1 year ago

@ericmargay What concert did you get this from, by the way? I can share recordings of the signals soon

In Mexico City a mexican musical named Grupo Firme, in Foro Sol, February this year.

ericmargay commented 1 year ago

@ericmargay What concert did you get this from, by the way? I can share recordings of the signals soon

I can share also in the next concerts.

ericmargay commented 1 year ago

Hi, Thanks for your post, We are in the process of trying to decode them, we had only had them a few days, I have done my research on the main MCU IC and it looks to be the same, Also the new addition Radio / OOK Decoder IC is interesting and the datasheet states it to be a direct replacement for Infrared, So I am betting that IC sends the same old codes to the MCU after being demodulated/decoded from the OOK Modulation that is used via RF.

But if you have a Flipper or HackRF, or DIY 915mhz ardunio TX, Then we already have a few codes that will work.

I will get a HackRF to use the codes. Contact me to follow-up.

TieHaxJan commented 1 year ago

Hey guys, from 25th of April to 28th of April was the ProLight&Sound Fair in Frankfurt, Germany, Pixmob was there and I've got 9 of the Radio Frequency Controlled Bracelets, if I can help in any way, just contact me, I also can get ahold of a HackRF from my University. Sadly I was not able to bring any device to record their signals and also on the fair there was way to much radio noise, I would assume. Edit: I forgot one thing, they told me, that they're able to group the wristbands in up to 30 groups Cheers.

dontic commented 1 year ago

Hi, Thanks for your post, We are in the process of trying to decode them, we had only had them a few days, I have done my research on the main MCU IC and it looks to be the same, Also the new addition Radio / OOK Decoder IC is interesting and the datasheet states it to be a direct replacement for Infrared, So I am betting that IC sends the same old codes to the MCU after being demodulated/decoded from the OOK Modulation that is used via RF.

But if you have a Flipper or HackRF, or DIY 915mhz ardunio TX, Then we already have a few codes that will work.

@sean1983 I have one of these Bracelets from a Swedish House Mafia concert and a Flipper, sadly I did not have it then so I do not have any recordings. Let me know if I can help in any way.

sean1983 commented 1 year ago

@dontic Where there RF ones used at a at the Sweeds Concert ? If so this is a suprise to see big artists going that direction ?

When and where was the concert ? Also What kind of Venue was it ?

Hope you have a good time, Looking forward to seeing them later this year myself.

Any and all help is always useful, We sent up a Discord server, Link is on the Project Index,

Come chat, Who knows what skills you have that might be useful..

That goes to each and all in this thread

danielweidman commented 1 year ago

Hello! I know some more discussion of this has been happening in the Discord, which is great :)

For anyone else who finds this thread though, I have added recordings for the 915 MHz bracelets here: https://github.com/danielweidman/pixmob-ir-reverse-engineering/tree/main/rf

dontic commented 1 year ago

@sean1983 yes, pity I did not tinker with it sooner. This concert was in Madrid, October 14 2022. The venue was a new big dedicated hall in IFEMA, Madrid's fair grounds. Photo attached.

In PIXMOB's site if you head to the Waveband section it actually states "As seen on Swedish House Mafia and more.".

Will gladly join the discord, see you all there. IMG_8068

below commented 11 months ago

IMG_5785 IMG_5784

Is this the device we are talking about (The Weeknd: After Hours Till Dawn)? I have two of them, both not deactivated. My questions: