Read message by following link below:
https://protopirate.net/ProtoPirate
Main repo is located at: https://protopirate.net/ProtoPirate/ProtoPirate
All others are read only mirrors!
ProtoPirate is an experimental rolling-code analysis toolkit developed by members of The Pirates' Plunder.
The app currently supports decoding for multiple automotive key-fob families (Kia, Ford, Subaru, Suzuki, VW, and more), with the goal of being a drop-in Flipper app (.fap) that is free, open source, and can be used on any Flipper Zero firmware.
App is intended for educational and security purposes only, and has no signal transmission enabled by default. This prevents users from accidentally desyncing their keyfobs, making it safe for non-specialists.
| Protocol | Decoder | Encoder | Signal Encoding | Modulation | Encryption | CRC | Frequency |
|---|---|---|---|---|---|---|---|
| Fiat V0 | ✅ | ✅ | Manchester | AM | Rolling Code (Static Emu only) | ❌ | 433.92 |
| Ford V0 | ✅ | ✅ | Manchester | AM | Rolling Code | ✅ + BS | 315.00 / 433.92 |
| Kia V0 | ✅ | ✅ | PWM | FM | Rolling Code | CRC8 | 433.92 |
| Kia V1 | ✅ | ✅ | Manchester | AM | Rolling Code | CRC4 | 315.00 / 433.92 |
| Kia V2 | ✅ | ✅ | Manchester | AM/FM | Rolling Code | CRC4 | 315.00 / 433.92 |
| Kia V3 / V4 | ✅ | ✅ | PWM | AM/FM | KeeLoq | CRC4 | 315.00 / 433.92 |
| Kia V5 | ✅ | ❌ | Manchester | FM | Rolling Code | ✅ | 433.92 |
| Kia V6 | ✅ | ✅ | Manchester | FM | AES128 | CRC8 | 433.92 |
| PSA (Peugeot/Citroen) | ✅ | ✅ | Manchester | AM/FM | XTEA/XOR | ✅ | 433.92 |
| Scher-Khan | ✅ | ❌ | PWM | FM | Magic Code | ❌ | 433.92 |
| StarLine | ✅ | ✅ | PWM | AM | KeeLoq | ❌ | 433.92 |
| Subaru | ✅ | ✅ | PWM | AM | Rolling Code | ❌ | 433.92 |
| Suzuki | ✅ | ✅ | PWM | FM | Rolling Code | CRC8 | 433.92 |
| VAG (VW/Audi/Seat/Skoda) | ✅ | ✅ | Manchester | AM | AUT64/XTEA | ❌ | 434.42 |
More Coming Soon
Real-time signal capture and decoding with animated radar display. Supports frequency hopping.
Load and analyze existing .sub files from your SD card. Browse /ext/subghz/ to decode previously captured signals.
Tool for protocol developers to compare real fob signal timing against protocol definitions.
- Protocol Definition: Expected short/long pulse durations and tolerance
- Received Signal: Measured timing from real fob (avg, min, max, sample count)
- Analysis: Difference from expected, jitter measurements
- Conclusion: Whether timing matches or needs adjustment with specific recommendations
The following contributors are recognized for helping us keep open sourced projects and the freeware community alive.
- RocketGod
- MMX
- Leeroy
- gullradriel
- Skorp - Thanks, I sneaked a lot from Weather App!
- Vadim's Radio Driver
- L0rdDiakon
- YougZ
- RocketGod
- MMX
- DoobTheGoober
- Skorp
- Slackware
- Trikk
- Wootini
- Li0ard
- Leeroy
- DoobTheGoober
- MMX
- NeedNotApply
- RocketGod
- Slackware
- Trikk
- Li0ard
Join The Pirates' Plunder on Discord for development updates, testing, protocol research, community support, and a bunch of badasses doing fun shit:
➡️ https://discord.gg/thepirates
