Sub-Ghz

Sub-GHz capabilities are possible, but you do need the Pwnhyve PCB shim - this adds a CC1101 to the RPi

Read Raw

Reads raw bits from the antenna - this is used for replay attacks, from something like a garage opener or a remote control for an air conditioner

Usage

1

Hit any key to begin recording signals

The Pi will configure the CC1101 to recieve, and then wait for your key - press any key to begin recording

2

Record your signal

Make sure that you're not too far from the signal emitter - most antennas don't have too much range 🥲

3

Stop recording the signal

Hit any key to stop recording the signal

4

Inspect received signal

Scroll down to "View" and inspect the bytes recorded - if they're all 0x00 or 0xFF then something's wrong, double check everything and adjust your OOK power - once inspected, go back (left on the joystick)

5

Save recording to file

Scroll to "Save to file" and input a filename to save the recording to - you will be able to go back to this recording whenever and rename it to whatever you want, so don't worry too much.

Payload files are saved in ./subghz.

Replay Data

Here, you can replay saved payloads and transmit them - it'll automagically change the CC1101's frequency to the one saved in the file

Usage

1

Transmit the data

Hit 'OK' to transmit the data - hold it to repeat transmitting the data, just in case the first time didn't work.

2

Edit bit delay

Usually not needed, but if you think that the CC1101 is transmitting the bits too quickly and the receiver is too slow to register it, you can adjust the bit delay - up is to increase the delay between bits, and down is to decrease.

3

Exit

Hit left on the joystick to exit, and go back to the menu.

Set Power

Adjust OOK power from predefined settings - these are from the PATABLE in the CC1101's documentation.

  • Higher dBm = more transmit power, but more power usage.

  • Lower dBm = less transmit power, but less power usage, as well as less chances of 'radio echoing'

Make sure to also view your antenna's specifications, some work best at a specific dBm range.

Set Frequency

Set frequency for the CC1101. I think we all know how to use this, right?

Last updated