BLE Spam MAC randomization fix

[EchoPrograms]

Proposed Changes

• Fixing MAC address randomization for Bluetooth spam.
• Renamed Apple to Apple Spam.
• Put all spam options under BLE Spam in the Bluetooth menu.
• Added Apple Spam (Legacy) submenu to BLE Spam that includes SourApple and AppleJuice for attacking older devices.
• Lengthened advertisement length to make spamming more effective.

Types of Changes

Bugfixes, menu restructuring.

Verification

Running the BLE spam functions.

Testing

There are no unit tests

Linked Issues

#1976

User-Facing Change

Renamed the section "Apple" to "Apple Spam" to fit with the other menu options. Put "Apple Spam", "Apple Spam (Legacy)", "Windows Spam", "Samsung Spam", "Android Spam", "Spam All", and "Spam Custom" under the menu "BLE Spam". "Apple Spam (Legacy)" contains "AppleJuice" and "SourApple".

Further Comments

The root of the issue is that esp_base_mac_addr_set was used instead of the correct function: esp_iface_mac_addr_set.

I updated the usage in the BLE spam file, as well as increased the advertisement length to achieve more successful hits on the target device.

The Samsung and Android spam work to repeatedly initiate pop-ups without being detected as spam. While MAC randomization is fixed, Apple still has effective anti-spam measures.

[EchoPrograms]

I noticed that Spam All still attempts to use AppleJuice and SourApple, but I'm unsure if I should include that fix in this PR.

[EchoPrograms]

Example of this fix enabling the BLE Spam to work on a Samsung device:
https://github.com/user-attachments/assets/017840b8-0b6e-4133-aba5-1f71b6b55043

[Huzzla101]

This is cool ... If you and Ninja-JR hook up we have some really nice features going on.. And BLE SPAM is just the beginning.. We need to make sure all the big companies and other establishments are in front so we can always give them reliable solutions now and for the future...So we need to stay on top , its alot of fun.. In other words if people with knowledge see anything they can improve or add for the community then don't feel shy to give some efforts and contribute.. You are here for us, We are there for you...

…

On Fri, Jan 9, 2026 at 2:59 AM EchoPrograms ***@***.***> wrote: *EchoPrograms* left a comment (BruceDevices/firmware#2016) <#2016 (comment)> Example of this fix enabling the BLE Spam to work on a Samsung device: https://github.com/user-attachments/assets/017840b8-0b6e-4133-aba5-1f71b6b55043 — Reply to this email directly, view it on GitHub <#2016 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BLDL6BWLRFQBPFVV3CMFSQ34F4DRXAVCNFSM6AAAAACREHEB3OVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTOMRWG4ZDAMRVGM> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

-- Kind Regards C.R May Prosperity allways be with us!!

[bmorcelli]

I noticed that Spam All still attempts to use AppleJuice and SourApple, but I'm unsure if I should include that fix in this PR.

Of course, if you have a better idea on how it might work, include the fix in the PR

Thanks for your contribution!

[bmorcelli]

Dont forget to change the PR status when its ready to review and merge

[EchoPrograms]

Would it be better to have Legacy under BLE Spam, as it is currently buried at BLE > BLE Spam > Apple Spam > Legacy? It only contains Apple attacks, but I don't like the deep nesting.

[EchoPrograms]

Dont forget to change the PR status when its ready to review and merge

I will soon, I would like to get some feedback on the menu changes first (unless that would be done in the review stages?).

[Ninja-jr]

You did a heap improvement on the code and method...you found the breakthrough i was looking for all this time haha...that's great. And yes i have opted to leave the sour apple and applejuice payloads on the spam all option just in case despite having removed them from the payloads options. But yes i think your approach on re-including them for older devices is wiser than mine. You're doing a great job as I already told on Discord and i hope this can finally work as intended in the end despite some devices being tricky, specially Apple ones.

[EchoPrograms]

You did a heap improvement on the code and method...you found the breakthrough i was looking for all this time haha...that's great. And yes i have opted to leave the sour apple and applejuice payloads on the spam all option just in case despite having removed them from the payloads options. But yes i think your approach on re-including them for older devices is wiser than mine. You're doing a great job as I already told on Discord and i hope this can finally work as intended in the end despite some devices being tricky, specially Apple ones.

I did notice that the inclusion of the Apple payloads in spam all looked intentional, so I kept them. However, they weren't running due to a return statement in executeSpam, so I fixed that.

[Ninja-jr]

I did notice that the inclusion of the Apple payloads in spam all looked intentional, so I kept them. However, they weren't running due to a return statement in executeSpam, so I fixed that.

Yeah I probably made that mistake on one of those nights after a lot of Changes and testings and my braincells just locked up probably haha...good catch on that indeed