SDR101-presentation-distro

34
Software Defined Radio 101 Mike Saunders @hardwaterhacker

Transcript of SDR101-presentation-distro

Page 1: SDR101-presentation-distro

Software Defined Radio 101Mike Saunders @hardwaterhacker

Page 2: SDR101-presentation-distro

About Mike

• Started IT in 1998

• Security since 2007

• Avid ice fisherman

Page 3: SDR101-presentation-distro
Page 4: SDR101-presentation-distro

Signals Around Us• Cell phones (900/1,800/1,900 MHz)

• Wifi (2.4 & 5 GHz)

• Bluetooth & Zigbee (2.4 GHz)

• Broadcast TV (54 - 900 MHz)

• Pagers (35/43/152/157/163/454/462/929 MHz)

• ADSB (978/1090 MHz)

• AIS (162 MHz)

• Police & military comms (varied)

• HAM radio (varied)

• Satellite comms (varied)

• Cordless phones (1.7/27/43-50/900 MHz, 1.9/2.4/5.8 GHz)

• Radar (varied)

• Car remotes (315 / 433 MHz)

• Garage door openers (310/315/390 MHz)

• TV & presenter remotes (varied)

• Etc. etc. etc.

Page 5: SDR101-presentation-distro
Page 6: SDR101-presentation-distro
Page 7: SDR101-presentation-distro

What is SDR?

• Radios used to be implemented in hardware

• Software Defined Radio - software tunes receiver hardware to desired frequency

• Additional software can decode transmission to reveal data

• Signals can be transmitted with certain hardware

Page 8: SDR101-presentation-distro

What You Need

• Hardware

• rtl, HackRF One, Ubertooth One, Yardstick, Funcube, etc.

• Antenna

• Software

• GNU Radio, SDR#, GQRX, etc.

Page 9: SDR101-presentation-distro

Getting Started - Hardware

• Generic RTL2832U / R820T

• ≈ $15

• 25 - 1700 MHz

• RX only

Page 10: SDR101-presentation-distro

Getting Started - Hardware

• Generic RTL2832U / R820T

• Aluminum case limits noise

• ≈ $25

• 25 - 1700 MHz

• RX only

Page 11: SDR101-presentation-distro

Getting Started - Hardware

• HackRF One

• ≈ $330

• 10 MHz - 6GHz

• TX & RX

• 20M samples/second

Page 12: SDR101-presentation-distro

Getting Started - Software

• Windows

• SDR#, HDSDR, SDR-RADIO.COM

• Mac & Linux

• GNU Radio, GQRX, Linrad

• Android

• SDR Touch, Wavesink Plus, RFAnalyzer

Page 13: SDR101-presentation-distro

Getting Started - SDR#

• SDR# - www.airspy.com

• Quick start guide - http://www.rtl-sdr.com/rtl-sdr-quick-start-guide/

Page 14: SDR101-presentation-distro

Getting Started - Tuning

• http://www.nws.noaa.gov/nwr/coverage/station_listing.html

• https://www.youtube.com/watch?v=gFXMbr1dgng

Page 15: SDR101-presentation-distro

Getting Started - FM Radio

Page 16: SDR101-presentation-distro

Common Problems

• Don’t forget to install Zadig driver with generic RTL

• Some USB 3.0 ports don’t work well

• Issues with USB passthrough in VMs

• Frequency drift due to temperature differences (non-TCXO chipset)

Page 17: SDR101-presentation-distro

SDR# Common Problems

• Slower processors = dropped samples, choppy audio

• Even an issue in VMs on more powerful hardware

• HDSDR is harder to use, but less overhead

Page 18: SDR101-presentation-distro

SDR# Common Problems

Page 19: SDR101-presentation-distro

ID an unknown signal

• Spend time sweeping through frequencies

• Search for known frequencies at radioreference.com

• Look up signal waterfall on sigidwiki.com

Page 20: SDR101-presentation-distro

• Signal @ 152.480 Mhz

Page 21: SDR101-presentation-distro

radioreference.com

Page 22: SDR101-presentation-distro

FCC License Search

Page 23: SDR101-presentation-distro

Search Results

Page 24: SDR101-presentation-distro

Review Frequencies

Page 25: SDR101-presentation-distro

Review Registration

Page 26: SDR101-presentation-distro

Check SigIDWiki

Captured sample waterfall SigIDWiki Reference

Page 27: SDR101-presentation-distro

Legal Disclaimer

• I am not a lawyer, this may or may not be illegal

• Research and decide for yourself

• 18 U.S.C § 2511

• 18 U.S.C § 2510

Page 28: SDR101-presentation-distro

Decoding Pages• Walk through:

• http://www.rtl-sdr.com/rtl-sdr-tutorial-pocsag-pager-decoding/

• You need:

• SDR#

• VBCable

• http://vb-audio.pagesperso-orange.fr/Cable/index.htm

• PDW

• http://www.discriminator.nl/pdw/index-en.html

Page 29: SDR101-presentation-distro

More Common Problems

Page 30: SDR101-presentation-distro

More Common Problems

Page 31: SDR101-presentation-distro

Next Steps

• Garage door hacking - http://samy.pl/opensesame/

• Ding Dong Ditch - http://samy.pl/dingdong/

• Decode a signal using GNU Radio

Page 32: SDR101-presentation-distro

Wrap Up

• Get started cheap

• All kinds of signals to listen to and analyze

• Be responsible with what you find

• Report issues

Page 33: SDR101-presentation-distro

Resources

• http://www.rtl-sdr.com/rtl-sdr-quick-start-guide/

• http://www.radioreference.com/apps/db/

• http://www.sigidwiki.com/wiki/Database

• http://wireless2.fcc.gov/UlsApp/UlsSearch/searchAdvanced.jsp

• Noise Floor - @0xabad1dea - https://www.youtube.com/watch?v=5N1C3WB8c0o

Page 34: SDR101-presentation-distro

Questions?

[email protected]

• https://hardwatersec.blogspot.com

• @hardwaterhacker