Hacking Alarm Systems with an RTL-SDR and RFcat.

Digital Ding Dong Ditch – Hacking wireless doorbells with Arduino and RTL-SDR.

Hacking a PlayStation 3 using an RTL-SDR.

Hak5: Hacking Wireless Doorbells and Software Defined Radio tips.

Chaos Communications Congress Talks – Iridium Pager Hacking.If you’re interested in Bastiens YouTube channel as he plans to upload another video soon where he shows himself hacking his own GSM sms/call signals. Bastien has also uploaded a video showing his software in action. This is why several files are made to help GSM reverse-engineering. But Topguw is made to help people who want to learn the hack. Maybe better than something done by hand. My software is currently in beta version but I did run several time and I got good results. Topguw, I hope, will sensitize people about risk they take by calling or sending sms with GSM. So when I started to done this with my hands I though -> why don’t try to make something to do this automatically. Moreover the success rate is really great if you guess the Keystream correctly. It’s very low cost compare to other hack vector. This hack is very interesting! With only a little receiver (rtl-sdr) and some hard-disk capacity (2Tb), everyone can try to hack the GSM. Then you just have to use Kraken to crack the key and you’re able to decipher sms or call.

I’ll not explain here all the steps because they are long and tedious, but there is a lot of work done behind the Gui.Īctually my software can extract Keystream (or try to find some of them) from a capture file of GSM, or by sniffing GSM with a rtl-sdr device. I put quotation marks in crack because my software is not enough to deciphered GSM itself. My software can make some steps of the known-plaintext attack, introduce by Karsten Nohl, and by the way, increase the time to decipher an SMS or call. So like I said my software can “crack” SMS and call over GSM network.

OctoHacking GSM Signals with an RTL-SDR and Topguw

ExtIO with Decimation & Tuner Bandwidth Controls.

Manual gain controls and decimation driver.

Measuring Traffic Volumes with Passive Radar.

SignalsEverywhere Direction Finding Tutorial.

Measuring Filter Characteristics & VSWR.

Performing Replay Attacks with RTL-SDR and RpiTX.

QRP (FT8, JT9, WSPR etc) Monitoring Station.

Decoding 433 MHz ISM Band Weather Stations.

GOES 16/17 and GK-2A Weather Satellite Tutorial.

Gsm modem hacking