ProtoPirate
for Flipper Zero
⚠️ Warning: Important Security & Project Update
Read message by following link below:
https://protopirate.net/ProtoPirate
Main repo is located at: https://protopirate.net/ProtoPirate/ProtoPirate
All others are read only mirrors!
ProtoPirate is an experimental rolling-code analysis toolkit developed by members of The Pirates' Plunder.
The app currently supports decoding for multiple automotive key-fob families (Kia, Ford, Subaru, Suzuki, VW, and more), with the goal of being a drop-in Flipper app (.fap) that is free, open source, and can be used on any Flipper Zero firmware.
App is intended for educational and security purposes only, and has no signal transmission enabled by default. This prevents users from accidentally desyncing their keyfobs, making it safe for non-specialists.
Supported Protocols
| Protocol | Decoder | Encoder | Signal Encoding | Modulation | Encryption | CRC | Frequency |
|---|---|---|---|---|---|---|---|
| Fiat V0 | ✅ | ✅ | Manchester | AM | Rolling Code (Static Emu only) | ❌ | 433.92 |
| Ford V0 | ✅ | ✅ | Manchester | AM | Rolling Code | ✅ + Checksum | 315.00 / 433.92 |
| Kia V0 | ✅ | ✅ | PWM | FM | Rolling Code | CRC8 | 433.92 |
| Kia V1 | ✅ | ✅ | Manchester | AM | Rolling Code | CRC4 | 315.00 / 433.92 |
| Kia V2 | ✅ | ✅ | Manchester | AM/FM | Rolling Code | CRC4 | 315.00 / 433.92 |
| Kia V3 / V4 | ✅ | ✅ | PWM | AM/FM | KeeLoq | CRC4 | 315.00 / 433.92 |
| Kia V5 | ✅ | ❌ | Manchester | FM | Rolling Code | ✅ | 433.92 |
| Kia V6 | ✅ | ✅ | Manchester | FM | AES128 | CRC8 | 433.92 |
| PSA (Peugeot/Citroen) | ✅ | ✅ | Manchester | AM/FM | XTEA/XOR | ✅ | 433.92 |
| Scher-Khan | ✅ | ❌ | PWM | FM | Magic Code | ❌ | 433.92 |
| StarLine | ✅ | ✅ | PWM | AM | KeeLoq | ❌ | 433.92 |
| Subaru | ✅ | ✅ | PWM | AM | Rolling Code | ❌ | 433.92 |
| Suzuki | ✅ | ✅ | PWM | FM | Rolling Code | CRC8 | 433.92 |
| VAG (VW/Audi/Seat/Skoda) | ✅ | ✅ | Manchester | AM | AUT64/XTEA | ❌ | 434.42 |
More Coming Soon
Features
📡 Protocol Receiver
Real-time signal capture and decoding with animated radar display. Supports frequency hopping.
📂 Sub Decode
Load and analyze existing .sub files from your SD card. Browse /ext/subghz/ to decode previously captured signals.
⏱️ Timing Tuner
Tool for protocol developers to compare real fob signal timing against protocol definitions.
- Protocol Definition: Expected short/long pulse durations and tolerance
- Received Signal: Measured timing from real fob (avg, min, max, sample count)
- Analysis: Difference from expected, jitter measurements
- Conclusion: Whether timing matches or needs adjustment with specific recommendations
Credits
The following contributors are recognized for helping us keep open sourced projects and the freeware community alive.
App Development
- RocketGod
- MMX
- Leeroy
- gullradriel
- Skorp - Thanks, I sneaked a lot from Weather App!
- Vadim's Radio Driver
Protocol Magic
- L0rdDiakon
- YougZ
- RocketGod
- MMX
- DoobTheGoober
- Skorp
- Slackware
- Trikk
- Wootini
- Li0ard
- Leeroy
Reverse Engineering Support
- DoobTheGoober
- MMX
- NeedNotApply
- RocketGod
- Slackware
- Trikk
- Li0ard
Community & Support
Join The Pirates' Plunder on Discord for development updates, testing, protocol research, community support, and a bunch of badasses doing fun shit:
➡️ https://discord.gg/thepirates