Hacking the Wireless World with Software Defined Radio - 2.0
summary
Uses GNU Radio and USRP hardware (B200/B210/X300) to capture and recreate real RF systems: a working OpenBTS GSM base station on a tiny board; decoding and spoofing pager protocols (Manchester, checksum = sum mod 255) to trigger restaurant pagers; RDS/TMC analysis that collects weeks of messages to reduce 16‑bit encrypted location codes (31 keys) and partially recover mappings; ADS‑B/ACARS mapping and primary radar passive imaging (50 MS/s, 50–200 MHz captures, PRFs ~945/1250 Hz) that spots pylons and trucks; Arecibo modem recreation to re‑activate 1978 probe telemetry but thruster firings fail due to lost tank pressurant.
AI-written summary · about
chapters (11)
- 0:00Introduction to SDR
- 2:30The ISEE-3 space probe
- 5:24Spectrum analysis basics
- 8:19Building a GSM network
- 13:26Reverse engineering pagers
- 27:07FM and traffic data
- 36:08Tracking aviation signals
- 43:22Primary surveillance radar
- 50:08Digital TV and multipath
- 53:02Wireless tags and security
- 56:30Rebooting the ISEE-3 probe
related talks
53mHacking the Wireless World with Software Defined Radio - 2.0
01h 00mHacking the Wireless World with Software Defined Radio - 2.0
45m Hacking satellites with Software Defined Radio (SDR)
59mWireless security testing with attack
13mIntroduction to Software Defined Radios
37mBringing Software Defined Radio to the Penetration Testing Community
43mThe Birdman: Hacking Cospas-Sarsat Satellites
51mRadio Hacking: Cars, Hardware, and more!