Tagged: BLE

Testing Hubble Network’s Bluetooth-to-Satellite Link from Budapest

Thank you to Zoltán Dóczi for writing in and sharing his blog post about trying out Hubble Network’s direct-to-satellite Bluetooth service. Hubble is a growing LEO satellite constellation service (currently about seven satellites are up, with a planned 60) that claims that off-the-shelf BLE chips can send small telemetry packets straight to its satellites without any extra hardware. To test this, Zoltán ran Hubble’s Zephyr-based satellite sample on a +20 dBm Silicon Labs EFR32MG24 board with a PCB antenna, and later added an ESP32-C6. The devices were powered by an 18650 cell and left on a flat roof in Budapest from August until late September.

Locally, the transmitter was clearly working. He picked up bursts every 10 seconds near 2.482 GHz with a Signal Hound BB60C, a HackRF One running an Android RF analyzer app, and his ESP32-based ESPARGOS receiver array. The signal turns out to be narrowband and frequency hopping across 19 channels at the top of the 2.4 GHz band, rather than standard BLE advertising.

Unfortunately, over about eight weeks, the Hubble dashboard recorded zero satellite packets. The cause appears to be that Hubble’s satellite service currently only covers the USA, which was not clear in the onboarding documentation at the time. Satellite access also requires a paid “Live” organization, not the free Sandbox account he used. SatNOGS observations of HUBBLE-6 telemetry on 401.1 MHz confirmed that the satellites themselves were healthy. While this was a negative result so far, mostly due to his EU location, Zoltán's post is a useful write-up for anyone thinking of experimenting with the service. He notes that his next step is to try decoding the uplink frames locally with a PlutoSDR.

Hubble Network outdoor test with EFR32xG24 transmitter and HackRF for test reception (Left), Measured spectrum with Signal Hound BB60C (right)
Hubble Network outdoor test with EFR32xG24 transmitter and HackRF for test reception (Left), Measured spectrum with Signal Hound BB60C (right)

ESP32-Div: An ESP32 Based Swiss Army Knife for Wireless Networks

On his blog, Cifer has posted about a new device that he's created called "ESp32-Div." ESP32-Div is a multi-featured wireless analysis device for WiFi, Bluetooth, 2.4 GHz, and sub-GHz signals. While ESP32-Div is not based on SDR technology, it is still an interesting device for wireless hackers to discuss.

ESP32-Div can monitor WiFi packets, spam fake WiFi access points, scan for deauth attacks, and scan nearby WiFi networks. For Bluetooth, it can jam, scan, spoof, and cause unintended behaviours on Apple devices via spoofing the AirDrop function. It can also be used as a general 2.4 GHz scanner and jammer. Finally, it can perform replay attacks and jam signals for sub-GHz signals.

The device consists of a custom PCB with an ESP32 and a built-in battery pack. A piggybacking shield adds 3x NRF24 modules for the 2.4 GHz features and a CC1101 module for the sub-GHz features.

Obviously, functions like jamming and spoofing are highly illegal in most countries, but it is interesting to see the capabilities available to anyone with these cheap chips and the right software.

ESP32-DIV: Your Swiss Army Knife for Wireless Networks