Category: Applications

Listening in on Burger Pagers with the RTL-SDR

Oona has written on her blog www.windytan.com about how she used an RTL-SDR to listen in on those wireless devices that are given out at some restaurants and cafes to notify you when your food is ready.

While at a local burger chain she found a label on the back of the device given to her which specified the radio frequency used by the device. By tuning to that frequency with her RTL-SDR, she discovered that the device uses the POCSAG protocol, which is the same protocol that is used by pagers. She then decoded the data packet and found that it contains the device address, which is used to notify the correct device.

burgerPagerpocsagBurger

2-Channel AIS Receiver with RTL-SDR and GNUAIS

Blogger OZ9AEC has written a post on his blog showing how he made a 2-channel AIS receiver using the RTL-SDR, GNU Radio and GNUAis. AIS is a radio protocol used by boats to broadcast their position and speed which is then used to create a type of radar system to help avoid collisions. AIS signals are transmitted periodically on one of two channels. Two channels are used to improve capacity and help avoid interference if two signals from different boats are broadcast at the same time.

Before this, most AIS receiver implementations we’d seen that used the RTL-SDR received only on a single channel. OZ9AEC’s GNU Radio program receives on both channels simultaneously like a commercial AIS receiver does and is thus a better receiver. He eventually plans to get this receiver to run on a Beaglebone.

See his post for instructions and to download the GRC files.

Update: Another AIS decoder known as gr-ais is also capable of 2 channel AIS, and bristromat from Reddit has written a tutorial on setting it up and running it with OpenCPN.

Two channel AIS Block Diagram

Exploring the Wireless World with the USRP B200

Ettus Research, creators of the high end USRP software defined radios have posted a well produced video on YouTube showing off various applications that an SDR can perform. In the video they go through and explain FM Radio, APRS, AIS, Multi-Channel Decoding, Pagers, ADS-B/Mode S, ACARS, RADAR Analysis and 802.11a decoding.

For these apps they use a USRP B200, which costs $675 USD. Most of the applications shown should also be compatible with other SDRs, such as the cheaper HackRF and BladeRFs. Even the cheap RTL-SDR will at least work for FM Radio, APRS, AIS, Pagers, ADS-B and ACARS. Of course, the USRP is still probably the most top of the line SDR available.

USRP B200: Exploring the Wireless World

Update: The video creator, Balint has also uploaded a video on his personal YouTube channel which is a longer presentation of the topics that were briefly discussed in the USRP video.

Hacking the Wireless World (short version) @ iSec Open Forum

In Car ADS-B with a Raspberry Pi and RTL-SDR

Over on YouTube user adsbrus shows us his project which is an in car ADS-B aircraft tracker using a Raspberry Pi mini computer and an RTL-SDR. The system uses an LCD screen mounted where the car radio usually is to show aircraft identifier, altitude, and speed information in text.

ADS-B in CAR (Raspberry PI & USB TV RTL2832U+R820T)

Improved SDR Support for Kali Linux

The blog at needsec.com brings us news that Kali Linux is soon to be updated to version 1.0.5 which will come with several software defined radio tools preinstalled. Kali is a Debian Linux based operating system that is popular with the security and penetration testing community as it comes with several relevant tools preinstalled. This new version adds several useful SDR software programs including

  • Kalibrate for RTLSDR
  • gr-air-modes
  • RTLSDR Scanner
  • pyrtlsdr
  • GNU Radio Signal Scanner
  • libosmocore 0.6.3
  • grextras
  • gr-baz
  • gr-osmosdr
  • gr-iqbal
  • rtl-sdr 0.5.0
  • HackRF for SDR
  • gr-fcdproplus for SDR
  • UHD Images

via needsec.com

Update: Official Release now out

kali-site-logo2

Potential Major Security Flaw on HP Laptop Discovered with RTL-SDR

Over on Reddit, user cronek discovered by using his RTL-SDR that the microphone on his HP EliteBook 8460p laptop computer was continuously and unintentionally transmitting the audio from the built in microphone at 24 MHz in FM modulation. He found that the only requirement needed for the microphone to transmit was that the laptop needed to be turned on – even muting the microphone did nothing to stop the transmission.

Click here to read the original post.

I accidentally stumbled upon a signal in the 24MHz range, appearing to be 4 carriers. I tuned to it and heard silence, then someone came into my office and started talking and I could hear them speak. The signal appeared to be coming from my other laptop (not the one running the SDR) and was pretty weak (my antenna, the crappy one that comes with the dongle, stuck to a metal stapler was right next to the HP laptop).

This is of potential concern as as the US Military is apparently transitioning to this particular laptop. However, this may be an isolated incident, as in the thread cronek explains that other laptops he tested did not display this behavior.

HP Laptop Microphone Leak at 24 MHz

RTL-SDR and RDS Spy with HDSDR

On YouTube user pe1etr shows us a video where he uses his RTL-SDR combined with HDSDR, Virtual Audio Cable and RDS Spy to decode a distant RDS signal. RDS Spy is a free advanced software program capable of decoding weak RDS signals contained in many broadcast FM radio stations.

RDS stands for Radio Data System and is a digital signal embedded into broadcast FM signals. It is used by radio stations to display the name of the radio station and current song playing on an LCD screen.

HDSDR & RDS Spy side by side

New DSD Block Available for GNU Radio

The popular digital speech decoder (DSD) software has now been wrapped into a GNU Radio Companion block. Previously, DSD required use of virtual audio cables to get decoding to work with GNU Radio, but now the signal audio can be passed directly into this block.

Luke Berndt from the HackRF-dev forums has posted his work to make the functionality of DSD available to GNU Radio users in the form of a GRC block. “I have been playing around a bit and found an easy way to receive and playback digital LMR. More and more of the radio systems are going from narrow band FM to Digital. This makes it tough to listen to them on GQRX. DSD is a great program which can decoded the audio you get when you tune in a system in GQRX, but you either have to run it on another machine with a audio cable in between or figure out how to do a virtual audio cable on your machine.

Luckily, someone wrapped the DSD libraries so they can be accessed as GRC blocks. I have put together a GRC file and a Python program that make it a little easier to use the block.

If you have a chance, give them a try and let me know if they work. There is a good chance I have messed up the values in the filters or else where, but I have gotten clean audio out of it.”

Download the files from GitHub.

DSD is a Linux and Windows software program capable of decoding popular digital speech codecs such as APCO P25 and MOTOTRBO/DMR.

Via DangerousPrototypes