A Flipper Tool That Runs BLE Spam Directly on Stock Firmware
Flipper-zero-on-dwgx is a Flipper Zero app pack that runs directly on the official firmware (OFW), built around BLE Spam, and it also bundles the SD card resources I’ve curated. The handy BLE Spam apps in third-party firmware basically brute-force the Bluetooth stack through RAW HCI, and they won’t run without flashing a modded firmware. I didn’t want to swap out my whole system just for one feature, so I rewrote a version that doesn’t depend on modded firmware.
The core is x_ble_spam, a .fap just over 8KB. It doesn’t touch RAW HCI; instead it broadcasts through the officially published furi_hal_bt_extra_beacon_* API, so it doesn’t fight the system Bluetooth stack and there’s no need to swap firmware. It emulates broadcasts from 39 devices, covering Apple Proximity Pair / Nearby Action, Samsung EasySetup, Google Fast Pair, and Windows Swift Pair. For controls, the arrow keys switch devices, OK toggles broadcasting, BACK exits, and a long press pages through.
A few protocol gotchas worth noting. Apple Proximity Pair’s battery byte needs rand() % 16, not % 10, or Beats headphones won’t pop the dialog. For Nearby Action, set the Continuity type to 0x0F and flags to 0xC0; to emulate joining an AppleTV it’s 0xBF. The BLE address type must be GapAddressTypeRandom, and the top two bits of the MAC have to be forced to 0xC0 to comply with the protocol. System popups like Setup New iPhone and iOS17 Crash have already been officially patched in newer iOS versions — that’s the protocol aging out, not a bug in the code.
The repo also ships a snapshot of my SD card resources, sorted into Bluetooth / NFC / Sub-GHz / GPIO / Infrared / Games, plus a community navigation list whose links I’ve verified are still alive. Before packaging I deleted everything sensitive — transit card dumps, U2F private keys, FindMy beacon private keys, BT HID pairing keys, and scan logs containing my own SSID; keeping them around is just a privacy risk.
custom_apps/x_ble_spam is my own work, for personal use, not for redistribution. The third-party .fap files on the SD card are copyrighted by their original authors; this is just a study mirror. Testing is limited to my own devices — don’t do anything reckless.