Growatt NEO 800M-X Bluetooth interface?

[gnbl]

Hi,
I just got this PV inverter and was happy to find you implemented an alternative (intermediate) server!

But setting it up in the inverter apparently requires the ShinePhone app, which in turn wants registration and an internet connection.
I am hesitant to send any data to the manufacturer.
There's another program, ShineTools, of which I don't know whether it can even connect to this specific inverter (at least I haven't managed).
Afaik running these APKs in e.g. Android Studio doesn't necessarily allow sniffing (unencrypted) what they are doing on the communication interfaces.

But I'm not knowledgeable with either Android nor Bluetooth, so
TLDR: do you know of any efforts or info on accessing these devices via Bluetooth (BLE?)?

Thanks!

[gnbl]

Google Play store (Android App):

• https://play.google.com/store/apps/details?id=com.growatt.shinephones
• https://play.google.com/store/apps/details?id=com.growatt.shinetools

APKs (not sure these are trustworthy sources):

• https://apkpure.com/shinephone/com.growatt.shinephones/download
• https://apkpure.com/shinetools/com.growatt.shinetools/download

I do see the device (QMN000xxxxxxxxxx.) and some Services with Nordic Semiconductor's nRF Connect app as well as bluetoothctl scan on on a computer running a linux.

[robertzaage]

Yes, a tool to read/write registers over BLE already exists. The communication is encrypted but uses static keys embedded into the app. Because this is a security issue the tool and keys aren't public for now. There are no other mechanism implemented from Growatt-side to prevent you modifying the inverter or battery of your neighbor.

[gnbl]

Ah! Might that be the reason why https://github.com/timniklas/hass-growatt_ble isn't available anymore?

[robertzaage]

I don’t know about this repo, but it could be possible the owner is serious about responsible disclosure too.