Link to this headingAirtag

Link to this headingAlternate Hardware

A stealth AirTag clone that bypasses all of Apple’s tracking protection features

  • nRF51288
  • SP32-WROOM
  • ESP32-WROVER

Query Apple’s Find My network, based on all the hard work of https://github.com/seemoo-lab/openhaystack/ and @vtky and @hatomist and others.

firmware for nRF51 chips that is coincidentally compatible with the FindMy (AirTag) ecosystem.

Nordic nRF51

Link to this headingOpenHaystack Zephyr firmware

OpenHaystack Zephyr firmware
Hoe to install the Alternative firmware

Link to this headingnRF51822

Support for nRF51822
Aliexpress nRF51822
Aliexpress nRF51822 item

Link to this headingLow Power Firmware

Fork to use less power Up to 3 years of battery life

Link to this headingFind my Network

Python find my scripts

  • Uses NIST [P-224](\Crypto\Asymmetric Encryption\Curves\Short Weierstrass Curves.md#P-224) Curve
  • Randomized the Source MAC Address
--- title: "Find My Packet" --- packet-beta 0-5: "BLE address ((p1[0] | 0b11 << 6) || (p1[1..5]))" 6: "Payload Length" 7: "Advertisement Type (0xFF, manufacturer specific)" 8-9: "Company ID (0x004C)" 10: "OF type (0x10)" 11: "OF data length (25)" 12: "Status (battery level)" 13-34: "Public Key Bytes p1[6..27]" 35: "Public Key bits p1[0] >> 6" 36: "Hint"