Upload File

scanning the airwaves - wordpress.com€¦ · scanning the airwaves or: how to build a trunked...

  • Home
  • Documents
  • Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna
41
Free PowerPoint Templates Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint Templates BRYAN PASSIFIUME & RICHARD HENDERSON DefCon 25, Las Vegas – July 2017

Upload: others

Post on 24-Jun-2020

14 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

ScanningtheAirwavesor: how to build a trunked radio scanner with a $20 USB stick

Free

PowerPoint

Templates

BRYANPASSIFIUME&RICHARDHENDERSONDefCon 25,LasVegas– July2017

Page 2: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

Welcome!

Page 3: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

WhoWeAre

Bryan:

Ham,CrimeReporter/PhotogforCalgarySun.Co-founderofHamRadiosatiresiteHamsexy.com

@BryanPassifiume

Richard:

Ham,writer,infosec professional.

@RichSentMe

Page 4: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

Is:

awaytolearnmoreaboutSDR,listeningin,modernfrequencyscanning

teachingthebasictoolstogetstarted

IsNOT:

anall-encompassingwalkthroughofhowtolistentoeverythingoutthere.

awaytocrackencryptedcomms… well,notall encryptedcomms (voiceinversionisNOTcryptolulz)

ahand-holdingexercisetosetyouupwithascannerandletyouloose– you’llneedtotakewhatyoulearn

andapplyittoyourownlocalenvironment

VSWhatthisis

Whatthisisnot

Free

PowerPoint

Templates

Page 5: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

Wearenotlawyers.Don’tbestupid.Yourmileage

mayvary.Usethisforbad,it’syourass.“-- Bryan&Richard,NotLawyers

Free

PowerPoint

Templates

Page 6: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

It’sWorthIt!

WhyGetaLicense?

It’sEasy Community KeytoRFExperimentation

Resources Trouble?Havingalicenseopensupallsortsofnew

gadgets,powerlevels,andideas.

Gettingstartedinmostplacesissupereasy.Noadvancedelectronicsknowledgeis

needed.

Itmaybeadyinghobby,buttherearestillaLOTofhamsout

there.

1000Wattsofpowercancarry.

Highpowerlevels,datalinks,moonbounce,satellites,etc.

Likemostthings,youcanfindtonsofhelponline.

Insomeplaces,havingahamlicenseistheonlylegally

alloweduseofcertainscanning

equipment

Free

PowerPoint

Templates

Page 7: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

SYSTEMREQUIREMENTS----- Windows.NoVMs.Srs. -----

Free

PowerPoint

Templates

Page 8: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

2

3

4

1AQuickHistoryHowdidwegettohere?

PracticalIntroduction

SoftwareInstallation&Setup

AdvancedMonitoring

Currentstateofhardware,antennatypes,whyheatmatters,etc.

Gettingstartedwiththeintroductorysoftware(HDSDR)

Movingintotrunkedradiosystems– howtheywork,installingothersoftwaretomonitor

Free

PowerPoint

Templates

Agenda

5WheretoGofromHere?Multi-stickmonitoring,pagerdecoding,wheretofindmoreinfo

Page 9: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

PARTONE:

----- IntheBeginning… -----

Free

PowerPoint

Templates

Page 10: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

EarlyRadioScanners…

Page 11: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

TheBirthofSDR

Free

PowerPoint

Templates

Page 12: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

UniversalSoftwareRadioPeripheral(USRP)

Free

PowerPoint

Templates

Page 13: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

EntertheRealtek RTL2832U…

Free

PowerPoint

Templates

Page 14: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

PARTTWO:

----- IntroductiontoSDRScanningToday -----

Free

PowerPoint

Templates

Page 15: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

TheBasics:

Free

PowerPoint

Templates

Page 16: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

OtherSticks:

Free

PowerPoint

Templates

Page 17: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

AQuickNoteonAntennaConnectors:

Free

PowerPoint

Templates

Page 18: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

AWordorTwoonHeat:

Free

PowerPoint

Templates

Page 19: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

AWordorTwoonHeat:

Free

PowerPoint

Templates

Page 20: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

PARTTHREE:

----- GettingStartedwithBasicScanning-----

Free

PowerPoint

Templates

Page 21: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

GettingtheSoftware

Free

PowerPoint

Templates

Drivers:•WinUSB drivers via Zadig installer (http://zadig.akeo.ie/)

•ExtIO.DLL (https://github.com/josemariaaraujo/ExtIO_RTL)

Software:•HDSDR (http://www.hdsdr.de/)

•UniTrunker 1.0.32.5 (http://www.unitrunker.com/)

•DSDPlus 1.101 (https://www.dsdplus.com/)

•VB Cable 4.5 (http://www.vb-audio.com/Cable/index.htm)

Page 22: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

InstallingtheSoftware

Free

PowerPoint

Templates

WinUSB: •Run ZADIG installer to load WinUSB drivers for each “bulk-in, interface” instance noted (if needed)

Page 23: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

InstallingtheSoftware

Free

PowerPoint

Templates

SDRDriver/Libraries:

UnzipExtIO_RTL-master.zip

CopyzipfilecontentstoC:\ProgramFiles(x86)\HDSDR

HDSDR:

•RunHDSDR_install.exe,followetc.

•Runprogram

•LoadEXT_IOforSDRdongle:

• Options(F7)

• SelectInput

• PointtoExtIO_RTL.DLL in/release/folder

Page 24: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

InstallingtheSoftware

Free

PowerPoint

Templates

Page 25: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

Calibration&Operation

Free

PowerPoint

Templates

Page 26: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

Calibration&Operation

Free

PowerPoint

Templates

Page 27: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

TimetoDoSomeScanning!

Free

PowerPoint

Templates

Let’s take 30 minutes (or more!) to experiment.

Tune around, see what interesting signals you can find!

Suggestions:

- Local broadcast FM (87-108MHz)

- Other signals in the 450-520MHz range (FRS radio, commercial

UHF)

- We’ll key up radios and show you what low power vs. high power

signals might look like on your computer

- Can you find local ATC?

- Troubleshooting, initial questions, help, etc.

Page 28: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

PARTFOUR:

----- AdvancedMonitoring-----

Free

PowerPoint

Templates

Page 29: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

Trunking

Free

PowerPoint

Templates

Mostlargemunicipalradiosystemsemploysomeformoftrunkedradio

system,arepeater-based,scalablepacket-switchingradionetworkthat

permitsalargeamountofuserstouseasmallamountoffrequencies:

Page 30: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

Trunking

Free

PowerPoint

Templates

MostcommonarevariantsofMotorolaTypeIInetworkssystem,using

singlecontrolchanneltoallocate&assignfrequenciestotalkgroups.

ExampleofTrunk88runningonmyhomecomputer:

Page 31: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

HowDoTrunking SystemsWork?

Free

PowerPoint

Templates

- Talkgroups analogousto‘virtualchannels’

- Frequencyassignmentistransparenttotheuser

- Systemsaretypicallydesigned,built,andoperatedaroundthe”5x5”

principle

- Therefore,mostsystemshavealargenumberofTGsandasmall

numberofavailablefrequenciesandvoicechannels

- ThenumberofmaximumactiveTGsatonceis,asyou’dexpect,

limitedbythenumberofvoicechannels

- DevelopmentofcommercialTrunkTracking scannersrequiredreverseengineeringofeachvendor’sproprietarycontrolchanneldata

Page 32: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

HowDoTrunking SystemsWork?

Free

PowerPoint

Templates

- Talkgroups analogousto‘virtualchannels’

- Frequencyassignmentistransparenttotheuser

- Systemsaretypicallydesigned,built,andoperatedaroundthe”5x5”

principle

- Therefore,mostsystemshavealargenumberofTGsandasmall

numberofavailablefrequenciesandvoicechannels

- ThenumberofmaximumactiveTGsatonceis,asyou’dexpect,

limitedbythenumberofvoicechannels

- DevelopmentofcommercialTrunkTracking scannersrequiredreverseengineeringofeachvendor’sproprietarycontrolchanneldata

Page 33: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

HowDoTrunking SystemsWork?

Free

PowerPoint

Templates

Howatrunkedtransmissionworksinthepicturehere:

1. UserpressesPTTkeyonradio,whiletunedtoTGA3

2. Trunkcontrollersearchesforafreefrequency(inthis

case864.000MHz),andthenissueschannelgrantto

allradiostunedtoTGA3touse864.000MHz.

3. WhenuserreleasesPTT,trunkcontrollerordersall

radiosonTGA3tostandby,andthenreleases864.000

backintotheavailablefrequencypool.

Page 34: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

SomeBackgroundontheHistoryofSystemHacking

Free

PowerPoint

Templates

• Workbuiltonshouldersofdecadesofradiohackingcommunitiescenteredaroundthe

Batlabs website,severalRussian-basedhackingcollectivesandlaterthenow-defunct

P25.ca/communications,support forums.

• MotorolaRSS/CPSsoftwareveryexpensiveandfiercelyprotected,onlinefilesharing

helpedspreadthehobby

• RudimentaryprotectionschemesbyMotorolaeasilycircumvented,suchassoftware

(andlaterhardware)systemkeysfortrunkedradioprogramming,theleakoflab/depot

versionsofprogrammingsoftware,andwhatwasonceathrivingcommunityofhackers

andusers,developingworkaroundsandcountermeasurestoMotorola’slatestefforts

toshutoutunauthorizedusers

• Innovationandworkaroundsmeanalmosteverytrunkedpoliceradiosystemoperating

inNorthAmericahasatleastacoupleofunauthorizedradiossilentlyaffiliatedand

listeningin

• Biggestdetrimentnowisencryption— AES256-based

Page 35: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

IntroductiontoUniTrunker

Free

PowerPoint

Templates

• Aready-to-rollcopyofUniTrunker willbeprovidedtoattendees,instead

offorcingeveryonetorolltheirown(whichwouldtakeforevertogetset

up).

Page 36: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

IntroductiontoMOTOTRBOandDSD+

Free

PowerPoint

Templates

• DemonstrationofDSD+anditsabilitytodecodethelocalMotoTrbo

system.;)

• DiscussiononhowDSD+candecodeP25audioviapipedaudiofromother

software(likeHDSDR,UniTrunker,etc.)

Page 37: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

IntroductiontoMOTOTRBOandDSD+

Free

PowerPoint

Templates

• QuickprimeronMotoTrbo/DMRmethodology(moreslidestocomehere)

• TDMA

• Timeslots

• sidealong data/telemetry,etc.

Page 38: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

PARTFIVE:

-----WheretoGoFromHere-----

Free

PowerPoint

Templates

Page 39: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

OnlineResourcesforFrequencyData

Free

PowerPoint

Templates

• RadioReference

• Othersites

• We’lldemofindinginfoforyourarea!

Page 40: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

OnlineResourcesforGettingaHamRadioLicense

Free

PowerPoint

Templates

• ARRL

• RAC

• QuestionPools

• Howtofindanexaminer,whattheexamislike,etc.

Page 41: Scanning the Airwaves - WordPress.com€¦ · Scanning the Airwaves or: how to build a trunked radio scanner with a $20 USB stick Free PowerPoint ... Current state of hardware, antenna

Free

PowerPoint

Templates

SpecificQuestions?

Free

PowerPoint

Templates

• We’llusetherestofthetimetoplay,experiment,TX/RX!


Pg. 1 October 2015 Southwest Airwaves Southwest Airwaves

Amplified Iceland Airwaves '13

TETRA Terrestrial trunked radio

AIRWAVES Weekly - | Namibian Broadcasting Corporation July Airwaves Weekly.pdf · AIRWAVES Weekly TV CENTER Tel: ... year old Suné January who hails from Rehoboth, was crowned Miss

Airwaves March 2012 - WA6YBN

Monitoring the Wake County Trunked Radio · PDF fileMonitoring the Wake County Trunked Radio System ... Frequency (RF) sites in the ... The Wake County Trunked Radio System (WCTRS)

P25 TRUNKED SYSTEM OVERVIEW

TERRESTRIAL TRUNKED RADIO DIGIMES

Airwaves August 2011

Reykjavik Grapevine Airwaves 2010 Mini

We Want the Airwaves - Queer Rebels

Angels and Airwaves Love 20Like 20Rockets

We Want the Airwaves - Aamer Rahman

Iceland Airwaves Magazine 2010

WCDB Airwaves 1986

RRC 05 Retele Radio Trunked

Hacking Airwaves with Pineapples

Trunked Radio Going Digital 2

Airwaves July 2011

CM 07 Retele Radio Trunked

2012 Trunked Brochure

AIRWAVES - grapevine.is

SybilCast : Broadcast on the Open Airwaves

We Want the Airwaves - Achy Obejas

Airwaves Fall 2014

Radio Panel: Planting on the Airwaves

Astronomy on the Airwaves

Airwaves - SAAMBR

Grapevine Airwaves Special

Scanning the Airwaves - DEF CON Media Server CON 25/DEF CON 25...Universal Software Radio Peripheral (USRP) Free PowerPoint Templates. Free ... - Frequency assignment is transparent

Broadcasting In Nigeria: Unlocking The Airwaves

RTSO Airwaves Spring 2014

WINNING THE AIRWAVES

airwaves magazine no 2 december 2012

SEaton on thE airwavES - shmu