Explore the world of wireless hacking through software-defined radio in this comprehensive conference talk from Defcon Wireless Village 2014. Delve into various topics including GSM traffic analysis, USRP B200 & B210 usage, frequency channel selection, FSK deviation, quadrature demodulation, and clock recovery techniques. Learn about line encoding, Manchester encoding, and POCSAG decoding for pager systems. Discover Zigbee transceivers, stereo FM with RDS receivers, and traffic message channel analysis. Investigate air traffic control systems, including ATCRBS, PSR, and SSR, as well as RADAR return plot analysis. Examine toll system hacking, building security badge authentication, and even the ISEE-3 Reboot Project involving the Arecibo Radio Observatory. Gain insights into wireless security, signal processing, and cutting-edge applications of software-defined radio technology.
Overview
Syllabus
Intro
Overview
GSM BCCH & Traffic
USRP B200 & B210
Step 1: Frequency
Channel Selection
FSK Deviation
Quadrature Demod
Baud Rate
Clock Recovery
Line Encoding
Manchester Encoding
Manchester Violation
Compare Changing Bits
Finding the ID
Modulator Output
Remote Control
POCSAG Decode
POCSAG Frame
Pager Frame Construction
ZigBee Transceiver
Hostage Pager
Stereo FM with RDS: Receiver
Traffic Message Channel
Encrypted Location Codes
Patterns
Security Analysis
Input Data
Algorithm
Results
ATCRBS, PSR & SSR
Mode 5 Response Encoding
Primary Surveillance RADAR
Magnitude Histogram
Above Noise Floor
Pulse Length Histogram
Pulse Envelope
Strong Pulse Separation
PRF Histogram
Raw RADAR Return Plot
LAS ASR-9
Distortion Map
Highway to Hell: Hacking Toll Systems
Interrogation Signal
Interrogation Payload
ANT
Preamble Detection
Slicer Time!
Time-domain Amplitude (UHF)
Building Security Badge Auth
ISEE-3 Reboot Project
Arecibo Radio Observatory
Verifying Transmitted Signal
Propulsion System
Telemetry During Thruster Firing
