Skip to content

Greatly Improved BLE Spam Module(s)#2444

Open
Doominator1 wants to merge 9 commits into
BruceDevices:devfrom
Doominator1:dev
Open

Greatly Improved BLE Spam Module(s)#2444
Doominator1 wants to merge 9 commits into
BruceDevices:devfrom
Doominator1:dev

Conversation

@Doominator1

@Doominator1 Doominator1 commented May 14, 2026

Copy link
Copy Markdown

Proposed Changes

Overhaul the BLE spam module UI with per-attack device selection, configurable packet interval, TX power control, and MAC randomisation frequency. Replaced the old fixed-behaviour submenus with a single unified interface that still has the Bruce look and feel.

Types of Changes

New Feature / UI Improvement

Verification

Navigate to the BLE spam menu. You should see individual device selection per attack type, and a config screen before starting with interval, TX power, and MAC rand controls. Stats (sent count, pkt/s) should display live while running.

Testing

Manually tested on LilyGo T-Embed CC1101 Plus:

  • All attack types with individual device selection
  • Interval adjustment from 10ms to 10000ms
  • All TX power levels
  • All MAC randomisation frequencies
  • Config persistence across reboots
  • Running stable even on most demanding intervals

Linked Issues

Issue: Feature Improvement: Increase Bluetooth Spam Speed to be A LOT FASTER (#2420)

User-Facing Change

release-note
BLE spam now has per-device selection for each attack type, adjustable packet interval (10ms-10s), TX power control, MAC randomisation frequency setting (dealbreaker for effective spam, I found out), and a live packet counter. Settings persist across reboots.

edit - added new features including:
BLE Beacon spam with customizable device name. Sends beacons which appear on any device's bluetooth pairing list, no matter the brand, can choose the name manually to be anything.
added Swift Pair customizable name selection.
added back "SourApple" but renamed to "iOS 17 Crash" instead

Further Comments

Have made sure that 'BLE Suite' and other BLE modules remain completely unaffected by this change.

Greatly Improved UI
Add Delay selector (10ms-10000ms)
Add Individual advertisement selecting
Add Mac Address Randomisation frequency selector
@Doominator1 Doominator1 changed the title Greatly Improve BLE Spam Module(s) Greatly Improved BLE Spam Module(s) May 14, 2026
Fix rectangle being drawn over the lower Bruce border.
@Doominator1

Doominator1 commented May 14, 2026

Copy link
Copy Markdown
Author

Here are some images of the new ui and features:
image
image
image

edit - updated images containing newest features

@Huzzla101

Huzzla101 commented May 14, 2026 via email

Copy link
Copy Markdown

@m0lomalteser

Copy link
Copy Markdown

I am Open for working together!

@m0lomalteser

Copy link
Copy Markdown

I am currently adding better SwiftPair and FastPair functionality

@m0lomalteser

Copy link
Copy Markdown

Oh and I just changed existing code to work better and didn't remove anything...

@m0lomalteser

Copy link
Copy Markdown

Proposed Changes

Overhaul the BLE spam module UI with per-attack device selection, configurable packet interval, TX power control, and MAC randomisation frequency — replacing the old fixed-behaviour submenus with a single unified interface.

Types of Changes

New Feature / UI Improvement

Verification

Navigate to the BLE spam menu. You should see individual device selection per attack type, and a config screen before starting with interval, TX power, and MAC rand controls. Stats (sent count, pkt/s) should display live while running.

Testing

Manually tested on LilyGo T-Embed CC1101 Plus:

  • All attack types with individual device selection
  • Interval adjustment from 10ms to 10000ms
  • All TX power levels
  • All MAC randomisation frequencies
  • Config persistence across reboots
  • Running stable even on most demanding intervals

Linked Issues

Issue: Feature Improvement: Increase Bluetooth Spam Speed to be A LOT FASTER (#2420)

User-Facing Change

release-note BLE spam now has per-device selection for each attack type, adjustable packet interval (10ms-10s), TX power control, MAC randomisation frequency setting, and a live packet counter. Settings persist across reboots.

Further Comments

Have made sure that 'BLE Suite' and other BLE modules remain completely unaffected by this change.

Hey, if you are ok with it I would merge our codes together into sth even better :)
Best,
Marlin

@Huzzla101

Huzzla101 commented May 14, 2026 via email

Copy link
Copy Markdown

@Doominator1

Copy link
Copy Markdown
Author

This is what we are here for.... Mr Doominator1 "Hey, if you are ok with it I would merge our codes together into sth even better :) Best, Marlin" That would be just pure awesomeness and @ninjajunior keep a overview of this... This will be fun.... I love fun

On Thu, May 14, 2026 at 11:58 PM MarlinSchuck @.> wrote: MarlinSchuck left a comment (BruceDevices/firmware#2444) <#2444 (comment)> Proposed Changes Overhaul the BLE spam module UI with per-attack device selection, configurable packet interval, TX power control, and MAC randomisation frequency — replacing the old fixed-behaviour submenus with a single unified interface. Types of Changes New Feature / UI Improvement Verification Navigate to the BLE spam menu. You should see individual device selection per attack type, and a config screen before starting with interval, TX power, and MAC rand controls. Stats (sent count, pkt/s) should display live while running. Testing Manually tested on LilyGo T-Embed CC1101 Plus: - All attack types with individual device selection - Interval adjustment from 10ms to 10000ms - All TX power levels - All MAC randomisation frequencies - Config persistence across reboots - Running stable even on most demanding intervals Linked Issues Issue: Feature Improvement: Increase Bluetooth Spam Speed to be A LOT FASTER (#2420 <#2420>) User-Facing Change release-note BLE spam now has per-device selection for each attack type, adjustable packet interval (10ms-10s), TX power control, MAC randomisation frequency setting, and a live packet counter. Settings persist across reboots. Further Comments Have made sure that 'BLE Suite' and other BLE modules remain completely unaffected by this change. Hey, if you are ok with it I would merge our codes together into sth even better :) Best, Marlin — Reply to this email directly, view it on GitHub <#2444 (comment)>, or unsubscribe https://github.com/notifications/unsubscribe-auth/BLDL6BQ4GFX37IABQPL2PHT42Y6PFAVCNFSM6AAAAACY5VZFD2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHM2DINJVGA3DKMZXGI . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub. You are receiving this because you commented.Message ID: @.>
-- Kind Regards C.R May Prosperity allways be with us!!

Yeah that would be great! What part of the ble spam does your code improve? Im guessing its the continuity, but im not sure on the specifics.
also Im going to update ble_spam soon with some last minute feature additions

Also added random/all selection for more sub-menus
@Doominator1

Copy link
Copy Markdown
Author

@MarlinSchuck
If we were to work together on this, what would that actually mean and would the outcome actually be significant in terms of features/ui/ux?

Also @Huzzla101 I have carefully kept the BLE suite and iBeacon alone as you have requested :)

@Doominator1

Doominator1 commented May 15, 2026

Copy link
Copy Markdown
Author

@MarlinSchuck
Alright, i've taken a look at your additions, it looks really nice! Way more device packets is a really good addition, as well as the much needed continuity packet crafting, thats really nice!
Im midway through implimenting the missing buds packets and adding the extra fastPair devices and next i'll do the continuity packet crafting.
I'll give as much credit for your helpful additions as you would like.
Let me know if this works for you, should be almost there in an hour or two.

– Doominator1

@m0lomalteser

Copy link
Copy Markdown

Allright! I am currently working to get SwiftPair to work properly it just doesnt work same thing for FastPair

  • Marlin

@Doominator1

Copy link
Copy Markdown
Author

thye both seem to be working for me

@m0lomalteser

Copy link
Copy Markdown

@MarlinSchuck If we were to work together on this, what would that actually mean and would the outcome actually be significant in terms of features/ui/ux?

Also @Huzzla101 I have carefully kept the BLE suite and iBeacon alone as you have requested :)

that would mean we contribute together to one fork of bruce and with UI I tbh like the current one... but idk

@m0lomalteser

m0lomalteser commented May 15, 2026

Copy link
Copy Markdown

thye both seem to be working for me

What device are you using and what version of Windows/ what Phone? I am using an old HP Laptop W10 and a Oneplus NordCE 5g maybe thats the problem...

@Doominator1

Copy link
Copy Markdown
Author

Im using a new samsung device and an asus laptop as well as an iPad Air 2
When you say you like the current UI, which version do you mean? I think the ui and ux added to my PR is far more customisable and user friendly than the current bruce ble spam ui, which isn't really much of a ui but more of just a selection screen.
I have finished adding your flipper port hex code improvements into my repo, im gonna upload them just after some more testing

thye both seem to be working for me

What device are you using and what version of Windows/ what Phone? I am using an old HP Laptop W10 and a Oneplus NordCE 5g maybe thats the problem...

@remagorp

Copy link
Copy Markdown

@MarlinSchuck If we were to work together on this, what would that actually mean and would the outcome actually be significant in terms of features/ui/ux?
Also @Huzzla101 I have carefully kept the BLE suite and iBeacon alone as you have requested :)

that would mean we contribute together to one fork of bruce and with UI I tbh like the current one... but idk

imo the ui doominator implimented is way better than the one that we have rn, like its not even close, the old one was just slow because you didn't get to choose the speed of the spam. also the custom names spam is such a good addition btw
I think you should definitely include the continuity improvements that were ported to bruce by @MarlinSchuck but i would like to see @Doominator1 's ui and the features into the ble spam module for bruce

Add Galaxy Buds, more effective Continuity packet crafting (Made by @MarlinSchuck)
Also added a few Swift Pair and BLE beacon packet names
@m0lomalteser

Copy link
Copy Markdown

Im using a new samsung device and an asus laptop as well as an iPad Air 2 When you say you like the current UI, which version do you mean? I think the ui and ux added to my PR is far more customisable and user friendly than the current bruce ble spam ui, which isn't really much of a ui but more of just a selection screen. I have finished adding your flipper port hex code improvements into my repo, im gonna upload them just after some more testing

thye both seem to be working for me

What device are you using and what version of Windows/ what Phone? I am using an old HP Laptop W10 and a Oneplus NordCE 5g maybe thats the problem...

I havent turned on SwiftPair on my Windows Laptop... Now that works. With current UI I mean the current one from the official build I think your design is good too but its too small tbh. and yeah its more a selection screen but I think this depends on the device you are using: for a lilygo T-Embed with a digitizer wheel a selection screen is way better than small UI but on a CYD for example where you tap a real UI is way more intuitive

  • Marlin

@m0lomalteser

m0lomalteser commented May 15, 2026

Copy link
Copy Markdown

Oh and I added more Protocols in the Commit, that Im going to push soon. For Example: Lovespouse(an adult toy) and many more Devices organized in categorys

@Doominator1

Copy link
Copy Markdown
Author

I havent turned on SwiftPair on my Windows Laptop... Now that works. With current UI I mean the current one from the official build I think your design is good too but its too small tbh. and yeah its more a selection screen but I think this depends on the device you are using: for a lilygo T-Embed with a digitizer wheel a selection screen is way better than small UI but on a CYD for example where you tap a real UI is way more intuitive

The size of the ui is similar to most other Bruce modules, so if they are fine, then the Bluetooth one being that style is fine too.
Are we Ready to merge yet?

Also modifed BLE Beacon presets to be correct character count to fit
@remagorp

Copy link
Copy Markdown

Im using a new samsung device and an asus laptop as well as an iPad Air 2 When you say you like the current UI, which version do you mean? I think the ui and ux added to my PR is far more customisable and user friendly than the current bruce ble spam ui, which isn't really much of a ui but more of just a selection screen. I have finished adding your flipper port hex code improvements into my repo, im gonna upload them just after some more testing

thye both seem to be working for me

What device are you using and what version of Windows/ what Phone? I am using an old HP Laptop W10 and a Oneplus NordCE 5g maybe thats the problem...

I havent turned on SwiftPair on my Windows Laptop... Now that works. With current UI I mean the current one from the official build I think your design is good too but its too small tbh. and yeah its more a selection screen but I think this depends on the device you are using: for a lilygo T-Embed with a digitizer wheel a selection screen is way better than small UI but on a CYD for example where you tap a real UI is way more intuitive

  • Marlin

I compiled and tested doominator1's ble spam module on my cardputer and it wasn't small, i think the size of the ui is perfect and matches the other bruce modules well

@m0lomalteser

Copy link
Copy Markdown

Im using a new samsung device and an asus laptop as well as an iPad Air 2 When you say you like the current UI, which version do you mean? I think the ui and ux added to my PR is far more customisable and user friendly than the current bruce ble spam ui, which isn't really much of a ui but more of just a selection screen. I have finished adding your flipper port hex code improvements into my repo, im gonna upload them just after some more testing

thye both seem to be working for me

What device are you using and what version of Windows/ what Phone? I am using an old HP Laptop W10 and a Oneplus NordCE 5g maybe thats the problem...

I havent turned on SwiftPair on my Windows Laptop... Now that works. With current UI I mean the current one from the official build I think your design is good too but its too small tbh. and yeah its more a selection screen but I think this depends on the device you are using: for a lilygo T-Embed with a digitizer wheel a selection screen is way better than small UI but on a CYD for example where you tap a real UI is way more intuitive

  • Marlin

I compiled and tested doominator1's ble spam module on my cardputer and it wasn't small, i think the size of the ui is perfect and matches the other bruce modules well

On T-Embed it is and I think select is better for all Scrollwheel based Devices(T-Embed)

@m0lomalteser

Copy link
Copy Markdown

I havent turned on SwiftPair on my Windows Laptop... Now that works. With current UI I mean the current one from the official build I think your design is good too but its too small tbh. and yeah its more a selection screen but I think this depends on the device you are using: for a lilygo T-Embed with a digitizer wheel a selection screen is way better than small UI but on a CYD for example where you tap a real UI is way more intuitive

The size of the ui is similar to most other Bruce modules, so if they are fine, then the Bluetooth one being that style is fine too. Are we Ready to merge yet?

Yeah good Argument... If you want you can integrate my newly added Xiaomi Quick Connect, Yandex Spam and Lovespouse
- Marlin

@Doominator1

Copy link
Copy Markdown
Author

@MarlinSchuck
Ok, I will add those (and credit you of course) and then we should say its final and wait for merge to Bruce.

@Doominator1

Copy link
Copy Markdown
Author

On second thought, would those additions actually be used or just bloat that nobody uses it though? like, never in my life have I seen anybody use yandex bluetooth pairing packets or xiaomi.

And the massive list of hundreds of fastpair devices would likely be too overkill for this perpose, having most of every single bluetooth headphones and speakers model on the planet would kinda be a bit tedious to navigate and use on an esp32 based device

Although your Samsung Buds ble packets were added and are a very good addition.

If you really deem it nessisary to add the rest to Bruce, I think we should first get this PR merged, to establish the baseline for the ui and features, then after, you should create a PR containing your additions to this version of the BLE Spam Module.

@MarlinSchuck

— Doominator1

@m0lomalteser

Copy link
Copy Markdown

On second thought, would those additions actually be used or just bloat that nobody uses it though? like, never in my life have I seen anybody use yandex bluetooth pairing packets or xiaomi.

And the massive list of hundreds of fastpair devices would likely be too overkill for this perpose, having most of every single bluetooth headphones and speakers model on the planet would kinda be a bit tedious to navigate and use on an esp32 based device

Although your Samsung Buds ble packets were added and are a very good addition.

If you really deem it nessisary to add the rest to Bruce, I think we should first get this PR merged, to establish the baseline for the ui and features, then after, you should create a PR containing your additions to this version of the BLE Spam Module.

@MarlinSchuck

— Doominator1

Fair point. I agree that we should avoid cluttering the UI with too many niche devices, but those devices I added are meant for targeted spam. But let's go with your plan: We merge the current state now to establish the new UI and the core improvements (including the Samsung Buds and the continuity fixes). That’s a huge step forward already from what Bruce initially supported.
- Marlin

@Huzzla101

Huzzla101 commented May 15, 2026 via email

Copy link
Copy Markdown

@m0lomalteser

Copy link
Copy Markdown

@MarlinSchuck https://github.com/MarlinSchuck Yes my dude i saw it, Thanks.. This is just great work and attributes I see flowing here today.. LOVE it... Nothing sparkles the mind and tickles it more than using it.. Alot.. =) Also NinjaJR keep a track of all and be updated and maybe throw in a trick or two when needed... I think we can be the leading collaborators within BLE adv safety and pen testing environments worldwide as we already have a setup not comparable for others, and as we already know, a lot of the real companies who have real assets to take care of need to be protected only by the best.... Together we stand, divided we fall... =)

On Fri, May 15, 2026 at 12:48 PM MarlinSchuck @.> wrote: MarlinSchuck left a comment (BruceDevices/firmware#2444) <#2444 (comment)> On second thought, would those additions actually be used or just bloat that nobody uses it though? like, never in my life have I seen anybody use yandex bluetooth pairing packets or xiaomi. And the massive list of hundreds of fastpair devices would likely be too overkill for this perpose, having most of every single bluetooth headphones and speakers model on the planet would kinda be a bit tedious to navigate and use on an esp32 based device Although your Samsung Buds ble packets were added and are a very good addition. If you really deem it nessisary to add the rest to Bruce, I think we should first get this PR merged, to establish the baseline for the ui and features, then after, you should create a PR containing your additions to this version of the BLE Spam Module. @MarlinSchuck https://github.com/MarlinSchuck — Doominator1 Fair point. I agree that we should avoid cluttering the UI with too many niche devices, but those devices I added are meant for targeted spam. But let's go with your plan: We merge the current state now to establish the new UI and the core improvements (including the Samsung Buds and the continuity fixes). That’s a huge step forward already from what Bruce initially supported. - Marlin — Reply to this email directly, view it on GitHub <#2444 (comment)>, or unsubscribe https://github.com/notifications/unsubscribe-auth/BLDL6BSMGEQAZKQ3RGTBEUT423YYZAVCNFSM6AAAAACY5VZFD2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHM2DINJZGEYTONJWG4 . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub. You are receiving this because you were mentioned.Message ID: @.>
-- Kind Regards C.R May Prosperity allways be with us!!

Just created Bruce Companion App for iOS what do you think? Android comming this week too!!!

@Huzzla101

Huzzla101 commented May 19, 2026 via email

Copy link
Copy Markdown

@m0lomalteser

Copy link
Copy Markdown

🎆🎇🎉 🦈 On Sun, May 17, 2026 at 5:16 PM Molo Malteser @.> wrote:

m0lomalteser left a comment (BruceDevices/firmware#2444) <#2444 (comment)> @MarlinSchuck https://github.com/MarlinSchuck Yes my dude i saw it, Thanks.. This is just great work and attributes I see flowing here today.. LOVE it... Nothing sparkles the mind and tickles it more than using it.. Alot.. =) Also NinjaJR keep a track of all and be updated and maybe throw in a trick or two when needed... I think we can be the leading collaborators within BLE adv safety and pen testing environments worldwide as we already have a setup not comparable for others, and as we already know, a lot of the real companies who have real assets to take care of need to be protected only by the best.... Together we stand, divided we fall... =) … <#m_8587819695764638072_> On Fri, May 15, 2026 at 12:48 PM MarlinSchuck @.
> wrote: MarlinSchuck left a comment (BruceDevices/firmware#2444 <#2444>) <#2444 (comment) <#2444 (comment)>> On second thought, would those additions actually be used or just bloat that nobody uses it though? like, never in my life have I seen anybody use yandex bluetooth pairing packets or xiaomi. And the massive list of hundreds of fastpair devices would likely be too overkill for this perpose, having most of every single bluetooth headphones and speakers model on the planet would kinda be a bit tedious to navigate and use on an esp32 based device Although your Samsung Buds ble packets were added and are a very good addition. If you really deem it nessisary to add the rest to Bruce, I think we should first get this PR merged, to establish the baseline for the ui and features, then after, you should create a PR containing your additions to this version of the BLE Spam Module. @MarlinSchuck https://github.com/MarlinSchuck https://github.com/MarlinSchuck — Doominator1 Fair point. I agree that we should avoid cluttering the UI with too many niche devices, but those devices I added are meant for targeted spam. But let's go with your plan: We merge the current state now to establish the new UI and the core improvements (including the Samsung Buds and the continuity fixes). That’s a huge step forward already from what Bruce initially supported. - Marlin — Reply to this email directly, view it on GitHub <#2444 (comment) <#2444 (comment)>>, or unsubscribe https://github.com/notifications/unsubscribe-auth/BLDL6BSMGEQAZKQ3RGTBEUT423YYZAVCNFSM6AAAAACY5VZFD2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHM2DINJZGEYTONJWG4 https://github.com/notifications/unsubscribe-auth/BLDL6BSMGEQAZKQ3RGTBEUT423YYZAVCNFSM6AAAAACY5VZFD2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHM2DINJZGEYTONJWG4 . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub. You are receiving this because you were mentioned.Message ID: @.
> -- Kind Regards C.R May Prosperity allways be with us!! Just created Bruce Companion App for iOS what do you think? Android comming this week too!!! — Reply to this email directly, view it on GitHub <#2444 (comment)>, or unsubscribe https://github.com/notifications/unsubscribe-auth/BLDL6BVQOFYTXSMOUTO6NRD43HJVZAVCNFSM6AAAAACY5VZFD2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHM2DINZRGE4DAMJQGY . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub. You are receiving this because you were mentioned.Message ID: @.
**>
-- Kind Regards C.R May Prosperity allways be with us!!

Android too but a bit buggy

@Ninja-jr

Copy link
Copy Markdown
Contributor

This is promising and might actually solve the problems of the payloads that had been giving us trouble mainly Android fastpair and newer ios versions which i think might be blocked due to either (or both) adv interval and mac randomization timing...it's a good vector to exploit. Sadly ive been out a while for personal reasons and also unable to test and work further on this lately as both my sitck and t-embed are dead so no devices to test or work on and financial situation been hard lately so not able to get any new device to work on sadly. Keep on the good work guys, that's the most important...important is we get progress, no matter who does it.

@dabassman28

Copy link
Copy Markdown

Come work on the new esp32 flipper zero port. It's moving along fast. Since nothing here is being accepted.

@Ninja-jr

Copy link
Copy Markdown
Contributor

Come work on the new esp32 flipper zero port. It's moving along fast. Since nothing here is being accepted.

They do accept things. Just we are limited by flash size and have to cautiously select what we merge.
As for that project, its very interesting tho sadly I dont have any test device to work on as both mine broken.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants