Wednesday, 22 May 2019

Gorilla radio (Where jamming .... signal jamming )

Gorilla radio  (Where jamming .... signal jamming )

What you will need is as follow ...

Tech

Hardware

Hackrf one

Software

Linux distro I use Ubuntu . And follow the Github readme 's and install.

1. https://github.com/Synacktiv/Modmobjam

A smart jamming proof of concept for mobile equipments 

Use this at own risk ....

2. https://github.com/pavsa/hackrf-spectrum-analyzer

 Spectrum Analyzer GUI for hackrf_sweep

 3. https://github.com/scateu/kalibrate-hackrf.git

 Kalibrate, or kal, can scan for GSM base stations in a given frequency band and can use those GSM base stations to calculate the local oscillator frequency offset.


Wifi jamming

I will attack my own wifi netwerk as a example.

Let start .

Check you wifi  on your notebook on Linux

1. iwconfig



As you can see the freq is at Frequency:2.462 GHz device wlp3s0

2, confirm with iwlist wlp3s0 channel


Yip correct

3. hackrf-spectrum-analyzer


There it is ....

Now the fun starts ...

First  run

It should list down all the available WiFi channels and at the end, the channel currently we are using. In my case, it was  channel 11 which operated in 2.462 GHz. Now it's time to try jamming. First we should record some data to a file. We can do it with the following command. The parameter -f specify the frequency we need to tune in to in Hz. Similarly the parameter -s specify the sampling rate which I have set to 20 MHz. Finally the parameter -l specify the LNA gain. Reading man files will provide more information about those stuff.

hackrf_transfer -r test.bin -f 2462000000 -s 20000000 -l 40


This command will run for a while and save data to the file test.bin and stop at some point. Still, the reason to stop in that way is mysterious to me. Anyway, now we have some captured data. We can transmit it back. Before doing so, open a new terminal and ping to some public IP address such as 8.8.8.8 so that we can continuously see the ICMP packets going and coming with round trip information. While having the ping command running in that terminal, run the following command from our original terminal. That -x parameter sets the Tx VGA gain.

hackrf_transfer -t test.bin -f 2462000000 -s 20000000 -x 47

During the time period of above transmission going on, we can see that the ping packets are getting disturbed. Either they take a longer round trip delay or completely become unable to be delivered.


This can be applied to all signal "tech" ... so be careful.