Reversing BLE Remote Control Protocols of Dual Channel LED Lamps with CCT and Illumination Control

In this paper various BLE protocols for communication between remote or Android applications and intelligent dual channel (cool and warm white) LED lamps were reverse engineered. Three protocols were fully decoded and several partially. Replay attack is tested and confirmed working. Demo C++ library was developed and a proof-of-concept firmware for esp32 based development board was used to verify the decoding and the attacks applicability.