Reconnaissance
Last updated
Was this helpful?
Last updated
Was this helpful?
Radio Frequency (RF) analysis involves examining the electromagnetic signals emitted by devices to gather information about their behavior and vulnerabilities. Internet of Things (IoT) devices often communicate wirelessly, making RF analysis a valuable technique for penetration testers. By capturing and analyzing the RF signals from these devices, pentesters can uncover weaknesses in the communication protocols, assess the security of the transmitted data, and identify potential attack vectors.
Check if the manual of your IoT device uses RF communication channels and if yes, at which frequency
If the frequency is between 500 Kilohertz (kHz) and 1766 MHz, we can use an RTL-SDR to analyze the sent signals
Else we have to use tools like the HackRF or Flipper Zero
We can use the + the RTL SDR to analyze the frequency
Let's assume we see two spikes in the frequency analyzer:
We can see that there are two spikes for the signal one at 868.039 MHz and one at 868.058 MHz, so the delta is 19 kHz and the deviation 9.5 kHz.
Next, we captured some signals with the RTL-SDR on that frequency of each sensor alone in order to analyze them
In the URH Interpretation we can play with the settings (Modulation,Error tolerance etc.) and we will get HEX-coded data back.
Note: An encoding will probably be used, so don't expect to see raw ASCII
We are looking for an output, which will look like packets: So probably a static header part, size, and data
URH has also an automatic analyze function, which will try to find patterns in the recorded data:
If you can interpret the data, you may can intercept sensitive data.
*
