Mi Band reverse engineering

Details

Fundamental project goals:

Figure out the protocol for the Xiaomi Mi Band for the purposes of:
- Reading the step count
- Reading activity data (even if it's dumped to disk somewhere
- Writing the firmware
- Buzzing the device
Write a suitable app which
- Interfaces with the Mi Band
- Stores information logged from the Mi Band.
- Displays information from the synchronized data.
- Shows historical data for steps/sleep/etc.
Continue to reverse-engineer Xiaomi protocols
- Extracted information from APK shows evidence of other Xiaomi devices targeting this app
  - 'shoes.fw'
  - 'mili_hr.fw'
  - 'weight.fw'

Project Logs

Collapse

Abandonment? Reincarnation!
Morgan Gangwere • 01/30/2016 at 19:03 • 0 comments

Righto.
Sometimes, we learn that another project has come along and kindof usurped our own. In my case, the app GadgetBridge has done just this for me. I still want to document the occasional chunk of stuff here, but they've got much more of the protocol down than I do.
If you want to help them, go head over to their GitHub.
I'd like to work on making GadgetBridge a little more "pluggable" -- Devices providing a means to more generically be added.
Android app hacking 101: Finding the hidden gems
Morgan Gangwere • 07/02/2015 at 22:00 • 0 comments

There comes a point in the world of Android app manipulation you need to find just where the bodies are buried. Today's little whack at the project involves subverting every avoided call to the android.util.Log.* functions.
Read more »
Starters: what we know right now.
Morgan Gangwere • 07/02/2015 at 17:29 • 1 comment
What I know about the Xiaomi Mi Band:
- It's BTLE - uses the BT4.0 LE GATT stack.
- The BT Characteristics are... poorly documented.
Read more »

View all 3 project logs

Discussions

Yury-MonZon wrote 11/17/2017 at 21:57

You can get and many other datasheets it from Dialog's website https://www.dialog-semiconductor.com/products/connectivity/bluetooth-low-energy/smartbond-da14580

Are you sure? yes | no

Sabas wrote 08/05/2016 at 23:51

What chip is the band?

Are you sure? yes | no

pizza wrote 04/18/2016 at 18:38

this link may be helpful. It's about reverse an app of another wearable fitness bracelet.

https://www.evilsocket.net/2015/01/29/nike-fuelband-se-ble-protocol-reversed/

i think a lot of funny stuff can be done hacking this bracelet but the hardest part will be understand and change the firmware.

Let us know.

Are you sure? yes | no

Alexey wrote 03/24/2016 at 07:49

Is it real to edit original app to make it download band's firmware and save it in phone's storage?

I'm not in android development but quite qualified in embedded system. I think that band has some bootloader that allow to update it's firmware via bluetooth. I'm not sure but i think that firmware is sent to band in quite easy format, not encrypted or something. May be it's XORed.

If we'll know how to decrypt firmware that app downloaded, we can load our firmware to band and get full access to it by dumping whole SoC memory by our modified FW.

Can someone consult me with android app reverse?

Are you sure? yes | no

Yury-MonZon wrote 09/03/2017 at 21:23

Hi! Any updates on firmware uploading? You can use Gadgetbridge in order to upload your own firmware. I've downloaded the compiler and build a simple hello world example, but I'm not entirely sure whether I'm going to brick it or not =)

Are you sure? yes | no

Alexey wrote 11/17/2017 at 12:49

I have one teared down band, but last months i had no time to work with it. May it's completely discharged.

What compiler had you got?

Are you sure? yes | no

Mi Band reverse engineering

Become a Hackaday.io member

Just one more thing

Description

Details

Project Logs Collapse

Abandonment? Reincarnation!

Android app hacking 101: Finding the hidden gems

Starters: what we know right now.

Enjoy this project?

Discussions

Become a Hackaday.io Member

Does this project spark your interest?

Report project as inappropriate

Send message

Remove Member

Project Logs

Collapse