Preview: Hacking the Wireless World with Software Defined Radio ...
Transcript of Preview: Hacking the Wireless World with Software Defined Radio ...
![Page 1: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/1.jpg)
Preview:
Hacking the Wireless World with Software Defined Radio – 2.0
Balint SeeberApplications Specialist & SDR Evangelist [email protected]@spench.net @spenchdotnet
![Page 2: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/2.jpg)
USRP B210
USB 3.056 MHz bandwidth
70 MHz – 6 GHz2x2 MIMO
SDR Hardware
![Page 3: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/3.jpg)
Aviation RADAR
RADAR
![Page 4: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/4.jpg)
Secondary Surveillance: ADS‐B/Mode S
RADAR
![Page 5: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/5.jpg)
Primary Surveillance RADAR
RADAR
![Page 6: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/6.jpg)
Raw RADAR Return Plot
Each scanline is synchronised to an emitted pulse
Scanline is amplitude of samples over time (also range of the return)
RADAR
![Page 7: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/7.jpg)
Virtual RADAR Scope
RADAR
RADAR
![Page 8: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/8.jpg)
Restaurant Pagers
Pagers
![Page 9: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/9.jpg)
Pager Waterfall SpectrumTime
Frequency
Pagers
![Page 10: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/10.jpg)
Making sense of raw bits
Pagers
![Page 11: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/11.jpg)
Modulator Output
Pagers
![Page 12: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/12.jpg)
Pager Spoofing
Pagers
![Page 13: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/13.jpg)
RDS Traffic Message Channel
RDS TMC
![Page 14: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/14.jpg)
Compare Against Trusted Source
RDS TMC
![Page 15: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/15.jpg)
Brute Force Search
RDS TMC
![Page 16: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/16.jpg)
Reading a FasTrak Toll Tag
RFID
![Page 17: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/17.jpg)
Received Signal
Response
RFID
![Page 18: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/18.jpg)
Reading a Tag Outside
RFID
![Page 19: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/19.jpg)
RFID
![Page 20: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/20.jpg)
Toyota Prius Keyless Entry Auth
RFID
![Page 21: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/21.jpg)
Building Security Badge Auth
RFID
Reader Badge
![Page 22: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/22.jpg)
ISEE‐3 Reboot Project
• International Sun/Earth Explorer 3
• Launched: August 12, 1978
• Heliocentric Orbit
• Study interaction between solar wind and Earth’s magnetic field
ISEE‐3
![Page 23: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/23.jpg)
ISEE‐3
![Page 24: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/24.jpg)
Moment of First Contact
Happy Dance
ISEE‐3
![Page 25: Preview: Hacking the Wireless World with Software Defined Radio ...](https://reader031.fdocuments.us/reader031/viewer/2022013013/586ccf2a1a28ab3f0a8bed64/html5/thumbnails/25.jpg)
Telemetry During Thruster Firing
ISEE‐3