Bought a Broadlink RM Pro (with Wifi, IR and RF)
To setup without an app:
– Press reset (until it quick-blinks)
– Press reset (until it slow-blinks)
– Now it is in AP mode – showing an SSID called BroadlinkProv (or, on some devices, it is called BroadLink_WiFi_Device)
– Connect to this SSID (no encryption)
– No TCP ports are being listened on
– Broadlink devices uses QUIC protocol over UDP port 80
– It has been reverse engineered here: ipsumdomus.com
– in an test with nmap (sudo nmap -sU -p80-85 –system-dns) ports 82-85 (but NOT 81) also seemed open
– if I scanned more UDP ports, the AP would disappear (probably because it reboots because of no connectivity to cloud)
– python library can can setup (I have not made it work yet, though) and control Broadlink devices: github