Rapid Radio Reversing
summary
Shows a practical hybrid method: use HackRF One and Inspectrum to find a 315 MHz carrier, identify on‑off keying with a three‑symbol pulse (long=110, short=100) at about 2,450 symbols/sec, then switch to a transceiver dongle (Yardstick One + RFcat) to capture, decode the pulse‑width bits, recover PIN bytes, observe a simple 8‑bit subtraction checksum, and perform replay or brute‑force encoding; demonstrates a working exploit on a StealthLock cabinet lock.
AI-written summary · about
chapters (27)
- 0:00Intro
- 3:03What is SDR
- 4:37SDR Strengths
- 5:44SDR Weaknesses
- 6:44NonSDR Weaknesses
- 11:38NonSDR Strengths
- 12:25SDR Weakness
- 13:08Samy Kamkar
- 14:52Mike Ryan
- 16:15Stealth Lock
- 21:22FCC ID
- 23:10FFT
- 27:16Spectrogram
- 30:32Cursor
- 35:10RFCAT
- 36:13Mode M
- 36:39RF Listen
- 40:15Binary
- 43:21Repetition
- 44:29RF Cat
- 48:17Valid
- 49:56Symbol Period
- 50:42Decode
- 51:18Cheat
- 52:15Lock
- 57:26Questions
- 58:33Replay Attack
related talks
41mGrand Theft House: RF Lock Pick Tool to Unlock Smart Door Lock
51mRadio Hacking: Cars, Hardware, and more!
44mBreaking the Security of Physical Devices
30mDemystifying IoT/OT Hacks With SDR
35mWireless Hacking With HackCUBE-Special
01h 00mHacking the Wireless World with Software Defined Radio - 2.0
30mBuilding hacking tools in JavaScript
01h 02mHacking the Wireless World with Software Defined Radio - 2.0