ProtoPirate

June 4, 2026 · View on GitHub

for Flipper Zero

⚠️ Warning: Important Security & Project Update

Read message by following link below:

https://protopirate.net/ProtoPirate

Main repo is located at: https://protopirate.net/ProtoPirate/ProtoPirate

All others are read only mirrors!

ProtoPirate is an experimental rolling-code analysis toolkit developed by members of The Pirates' Plunder.

The app currently supports decoding for multiple automotive key-fob families (Kia, Ford, Subaru, Suzuki, VW, and more), with the goal of being a drop-in Flipper app (.fap) that is free, open source, and can be used on any Flipper Zero firmware.

App is intended for educational and security purposes only, and has no signal transmission enabled by default. This prevents users from accidentally desyncing their keyfobs, making it safe for non-specialists.

Supported Protocols

Protocols are split into AM and FM registries. The active registry is chosen from the receiver selected preset.

AM protocols

ProtocolDecoderEncoderSignal EncodingModulationEncryptionCRCFrequency
Chrysler V0✅✅PWMAM650Rolling CodeChecksum315.00 / 433.92
Fiat V0✅✅ManchesterAM650Rolling Code (static emu only)❌315.00 / 433.92
Fiat V1✅❌ManchesterAM650Rolling CodeCRC8315.00 / 433.92
Ford V0✅✅ManchesterAM650Rolling Code✅ + Checksum315.00 / 433.92
Honda V1✅✅ManchesterAM650Rolling CodeCRC4315.00 / 433.92
Kia V1✅✅ManchesterAM650Rolling CodeCRC4315.00 / 433.92
Porsche Touareg✅❌PWMAM650Rolling Code❌315.00 / 433.92
PSA (Peugeot/Citroen)✅✅ManchesterAM650XTEA/XORCRC8315.00 / 433.92
StarLine✅✅PWMAM650KeeLoq❌315.00 / 433.92
Subaru✅✅PPMAM650Rolling Code❌315.00 / 433.92
VAG (VW/Audi/Seat/Skoda)✅✅ManchesterAM650AUT64/XTEA❌434.42

FM protocols

ProtocolDecoderEncoderSignal EncodingModulationEncryptionCRCFrequency
Ford V1✅✅ManchesterF4Rolling CodeCRC16315.00 / 433.92
Ford V2✅✅ManchesterF4Rolling Code (simple replay)❌434.25
Ford V3✅❌ManchesterF4Rolling Code❌434.25
Honda Static✅✅PWMHonda1Static CodeChecksum315.00 / 433.92
Kia V0 / Suzuki V0 / Honda V0✅✅PWMFM476Rolling CodeCRC8315.00 / 433.92
Kia V2✅✅ManchesterFM476Rolling CodeCRC4315.00 / 433.92
Kia V3 / V4✅✅PWMFM476KeeLoqCRC4 (BF)315.00 / 433.92
Kia V5✅✅PWMFM476Rolling Code✅315.00 / 433.92
Kia V6✅✅ManchesterFM476AES128CRC8315.00 / 433.92
Kia V7✅✅ManchesterFM476Rolling CodeCRC8315.00 / 433.92
Land Rover V0✅✅PWMF4Rolling CodeCheck+Tail315.00 / 433.92
Mazda V0✅✅ManchesterFM (F2?)Rolling CodeChecksum315.00 / 433.92
Mitsubishi V0✅❌PWMFM476Rolling Code❌315.00 / 433.92
PSA (Peugeot/Citroen)✅✅ManchesterFM (F3?)XTEA/XORCRC8315.00 / 433.92
Scher-Khan✅❌PWMFMMagic Code❌315.00 / 433.92

More Coming Soon

Features

📡 Protocol Receiver

Real-time signal capture and decoding with animated radar display. Supports frequency hopping.

📂 Sub Decode

Load and analyze existing .sub files from your SD card. Browse /ext/subghz/ to decode previously captured signals.

⏱️ Timing Tuner

Tool for protocol developers to compare real fob signal timing against protocol definitions.

  • Protocol Definition: Expected short/long pulse durations and tolerance
  • Received Signal: Measured timing from real fob (avg, min, max, sample count)
  • Analysis: Difference from expected, jitter measurements
  • Conclusion: Whether timing matches or needs adjustment with specific recommendations

Credits

The following contributors are recognized for helping us keep open sourced projects and the freeware community alive.

App Development

  • RocketGod
  • MMX
  • Leeroy
  • gullradriel
  • Skorp - Thanks, I sneaked a lot from Weather App!
  • Vadim's Radio Driver

Protocol Magic

  • L0rdDiakon
  • YougZ
  • RocketGod
  • MMX
  • DoobTheGoober
  • Skorp
  • Slackware
  • Trikk
  • Wootini
  • Li0ard
  • Leeroy
  • Ash

Reverse Engineering Support

  • DoobTheGoober
  • MMX
  • NeedNotApply
  • RocketGod
  • Slackware
  • Trikk
  • Li0ard

Community & Support

Join The Pirates' Plunder on Discord for development updates, testing, protocol research, community support, and a bunch of badasses doing fun shit:

➡️ https://discord.gg/thepirates

rocketgod_logo_transparent