← back to tools

OpenSesame_4flipper

2 files · ready for inspection

readme

# OpenSesame_4flipper OPENSESAME SUBGHZ BRUTEFORCE BUNDLE this ones for desertapple3 inspired by samyk's opensesame attack ⸻ ## How the Attack Works OpenSesame written by SAMYK uses a **Flipper-compatible SubGhz RAW file** to replay a captured garage door signal that was encoded using a fixed binary pattern. These older fixed-code systems operate without encryption or rolling code, making them susceptible to brute-force or replay-based attacks. The included `.sub` file transmits a sequence that mimics a legitimate remote. If a matching code is received by a vulnerable garage door receiver, the door will open. --- ## De Bruijn Sequence Brute Forcing Some modern garage door remotes transmit a fixed number of bits (e.g., 12-bit, 18-bit, or 24-bit codes). Instead of manually trying every code one-by-one, OpenSesame can be adapted to use a **De Bruijn sequence**, a mathematical structure that contains every possible combination of bits in a sliding window. While this base repository contains a single replayable fixed-code signal, future updates may include: - A full De Bruijn sequence transmitter for known bit-length openers - A Flipper loop-mode or on-button-press transmitter - User-selectable De Bruijn segments for popular protocols --- ## Compatibility Notes This signal targets **older fixed-code garage doors** operating at 390 MHz with OOK modulation. This includes: - Genie Intellicode (pre-rolling code) - LiftMaster/Chamberlain units manufactured before ~2006 - Some standalone DIY garage or gate controllers - Alarm system panels using fixed SubGhz sequences It will **not work** on systems with: - Rolling code encryption - Challenge-response authentication - Smart garage integrations (e.g., MyQ, Wi-Fi linked) --- ## Ethical Use This tool is provided for research and educational purposes. Only use on devices you own or are authorized to test. Misuse may be illegal depending on your jurisdiction. ## Firmware Requirements & things you need: - [Unleashed Firmware](https://github.com/DarkFlippers/unleashed) - an external CC1101 module --------- WINDOWS + MAC INSTALLATION GUIDE All instructions are 100% identical for both Windows and macOS unless otherwise noted ⸻ STEP 1: Download & Install QFlipper 1. Go to: https://flipperzero.one/update 2. Download QFlipper for your system: • Windows (.exe) • macOS (.dmg) 3. Install it like a normal app 4. Open QFlipper and plug in your Flipper with USB-C ⸻ STEP 2: Create Your .sub Files 1. Open Notepad (Windows) or TextEdit (macOS): • On macOS, press Cmd + , in TextEdit → select Plain Text Mode • On Windows, use Notepad or Notepad++ 2. Copy the following files from this repository 3. Save each file: • File > Save As… • Name them: • opensesame_315.sub • opensesame_390.sub • opensesame_433.sub • File encoding: UTF-8 • File extension: .sub ⸻ STEP 3: Upload Files to Flipper 1. Open QFlipper 2. Click the file manager 3. Navigate to: /subghz/ 4. Drag & drop your 3 files into that folder 5. Wait for upload confirmation ⸻ STEP 4: Launch on Flipper 1. On your Flipper: • Go to: Sub-GHz → Saved • You’ll see: • opensesame_315.sub • opensesame_390.sub • opensesame_433.sub 2. Choose the one that matches your target’s likely frequency (try all 3 if unsure) 3. Stand ~10–30ft from the garage 4. Press Send ⸻ ### Disclaimer: only use on equipment you have explicit permission to test on. user assumes all risk. x0x thank you homies for all the continued support x0x ------ ## Troubleshooting ## Guide: Using Kali VM + Windows to Flash Your Flipper If you're creating your `.sub` files inside a **Kali Linux VM**, but you're using **Windows** to run **QFlipper**, follow this guide to easily build and transfer files to your Flipper! --- ### Step 1: Create Your `.sub` File in Kali Linux 1. **Open your Kali VM** 2. Open a Terminal and run: ```bash nano opensesame_390.sub ``` 3. Paste the contents of the `.sub` file from the GitHub repo: ``` Filetype: Flipper SubGhz RAW File Version: 1 Frequency: 390000000 Preset: FuriHalSubGhzPresetOok650Async Protocol: RAW RAW_Data: 1000 1000 1000 3000 ... ``` 4. Press: * `Ctrl + x` (to save) * `Ctrl + y` * `enter` to exit DO THIS FOR ALL THREE FILES 390, 315 and 433. 5. Confirm it saved: ```bash ls ``` You should see `opensesame_390.sub` --- ### Step 2: Start a Local HTTP Server from Kali This lets you download the `.sub` file from your **Windows browser**. 1. In the same Terminal, run: ```bash python3 -m http.server 8080 ``` This starts a local web server on port 8080. --- ### Step 3: Find Your Kali VM's IP Address In a new Terminal window, type: ```bash ip a ``` Look for an IP that looks like `192.168.x.x` or `10.x.x.x` You’ll see something like: ``` inet 192.168.56.101/24 ``` That’s your **Kali VM’s IP address** — in this case: **`192.168.56.101`** --- ### Step 4: Download the File on Your Windows Host 1. Open **Chrome** or **Edge** on your Windows host 2. Go to: ``` http://192.168.56.101:8080 ``` (Replace with the actual IP from Step 3) 3. You’ll see a file list — right-click your `.sub` file → **Save As...** 4. When saving: * **File name:** `opensesame_390.sub` * **Save as type:** `All Files (*.*)` * **Not `.txt`!** --- ### Step 5: Upload to Flipper Using QFlipper 1. Open **QFlipper** 2. Go to the **File Manager** 3. Navigate to: ``` /subghz/ ``` 4. Drag your `.sub` file into the folder 5. Done You’re ready to run it from: ``` > Sub-GHz → Saved → opensesame_390.sub ```

source code

viewer

select a file
// click a file to view source

license

MIT License Copyright (c) 2026 ek0mssavi0r Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. USE AT YOUR OWN RISK. NO WARRANTY PROVIDED.
download zip // inspect all source before execution