Skip to content

DissPair v2.2.0

Latest
Latest

Choose a tag to compare

View all tags
@threadpoolx threadpoolx released this 13 Oct 14:15
v2.2.0
53aa25e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

DissPair v2.2.0

New

Advertisement Inspector (GAP)
Tap ADV on any BLE device to see what it broadcasts, without connecting. Updates live while scanning.

  • Decodes every advertising data field: flags, service UUIDs (with names), local name, TX power, appearance, service and manufacturer data, Mesh, URI and more. Malformed advertisements are flagged.
  • Vendor formats: Apple Continuity (iBeacon, AirDrop, Proximity Pairing, Handoff, Nearby Info/Action, Find My), Eddystone UID/URL/TLM/EID, Google Fast Pair, company-ID lookup.
  • Privacy checks: address type (public / random static / resolvable private / non-resolvable), private addresses that never rotate, serials or MAC fragments in device names, tracker beacons (Find My, SmartTag, Tile).
  • Over time: estimated advertising interval, RSSI graph, payload changes, PDU details (legacy/extended, connectable, PHY, TX power).
  • Risk flags for exposed firmware-update (DFU) and Nordic UART services.
  • COPY / SHARE a full report, or jump straight to GATT analysis.

GATT Access Audit
One tap tests what every characteristic allows without pairing.

  • Read, subscribe and write results labelled OPEN / AUTH / ENC / AUTHZ / KEY / DENY.
  • Write test: Off, Echo only (safe), or Echo + commit a payload you choose.
  • Exportable text report for vendor disclosure.

GATT improvements

  • SUB / UNSUB for notifications and indications, with a live notification log.
  • Write-without-response support: characteristics that only allow it are now writable.
  • Maximum MTU requested automatically on connect; payload limits follow the negotiated MTU.
  • Real names for standard and vendor services (ANCS, AMS, Device Information, Nordic UART/DFU, …).
  • Readable text shown alongside hex values.
  • Error codes shown by name (e.g. INSUFFICIENT_AUTHENTICATION).

Appearance

  • Follows the system light/dark theme, with a manual System / Light / Dark toggle.
  • New app icon, adapted for all launcher shapes.

Fixed

  • Back gesture returns to the main screen instead of exiting the app.
  • Rapid GATT actions are no longer silently dropped (all operations are queued).
  • Reads were handled twice on Android 13+.
  • Dual-mode devices now connect over BLE for GATT analysis.
Assets 3
Loading