Hack wireless network and wireless technology including WiFI, RFID, RADAR and other technologies. Talk at blackhat conference.

1. Preview:
Hacking the Wireless World with
Software Defined Radio – 2.0
Balint Seeber
Applications Specialist & SDR Evangelist
balint@ettus.com
balint@spench.net @spenchdotnet

2. USRP B210
USB 3.0
56 MHz bandwidth
70 MHz – 6 GHz
2x2 MIMO
SDR Hardware

3. Aviation RADAR
RADAR

4. Secondary Surveillance: ADS‐B/Mode S
RADAR

5. Primary Surveillance RADAR
RADAR

6. Raw RADAR Return Plot
Each scanline is synchronised to an emitted pulse
Scanline is amplitude of samples over time (also range of the return)
RADAR

7. Virtual RADAR Scope
RADAR
RADAR

8. Restaurant Pagers
Pagers

9. Pager Waterfall Spectrum
Time
Frequency
Pagers

10. Making sense of raw bits
Pagers

11. Modulator Output
Pagers

12. Pager Spoofing
Pagers

13. RDS Traffic Message Channel
RDS TMC

14. Compare Against Trusted Source
RDS TMC

15. Brute Force Search
RDS TMC

16. Reading a FasTrak Toll Tag
RFID

17. Received Signal
Response
RFID

18. Reading a Tag Outside
RFID

19. RFID

20. Toyota Prius Keyless Entry Auth
RFID

21. Building Security Badge Auth
RFID
Reader Badge

22. ISEE‐3 Reboot Project
• International Sun/Earth
Explorer 3
• Launched: August 12,
1978
• Heliocentric Orbit
• Study interaction
between solar wind
and
Earth’s magnetic field
ISEE‐3

23. ISEE‐3

24. Moment of First Contact
Happy Dance
ISEE‐3

25. Telemetry During Thruster Firing
ISEE‐3

26. balint@ettus.com @spenchdotnet
http://wiki.spench.net/wiki/RF
http://spench.net/
GitHub: balint256
balint@spench.net