Skip to content

Its not wifi stories in wireless RE

Handorf and Spill

Wireless reverse engineering of non-WiFi protocols—SDR-based reconnaissance and security analysis.

Summary

### Reverse Engineering Proprietary Wireless Protocols At 00:00, hardware researchers Russ Handorf and Dominic Spill present war stories and systematic reverse engineering methodologies for analyzing unknown, non-Wi-Fi radio frequency transmissions.

### Signal Identification and Spectrum Analysis At 11:00, the speakers walk through initial signal reconnaissance using SDR hardware (such as HackRF and USRP). They demonstrate capturing raw I/Q samples and analyzing visual waterfalls in tools like Baudline and Inspectrum to identify transmission characteristics without vendor documentation.

### Determining Modulation Schemes and Symbol Rates At 22:00, Handorf and Spill explain how to extract digital data from analog waveforms. They detail identifying carrier frequencies, bandwidth limits, and modulation schemes—including Frequency Shift Keying (FSK), Amplitude Shift Keying (ASK), and Phase Shift Keying (PSK).

### Packet Framing, Demodulation, and Clock Recovery At 33:01, the discussion turns to digital signal reconstruction. Using clock recovery and slicing algorithms, the presenters convert raw waveforms into binary streams, locating preamble synchronization words and reverse-engineering proprietary packet framing structures.

### Field Investigations and Automated Analysis Pipelines Concluding between 44:01 and 55:02, the authors share field case studies, including decoding unknown neighborhood telemetry devices and reverse-engineering smart meter transmissions. They conclude by demonstrating automated signal analysis pipelines integrating GNU Radio flowgraphs with Wireshark protocol dissectors.

(AI summary — Gemini Flash)

Related talks