rf-security

A Curated list of Security Resources for all connected things

Rolling-code health check for Flipper Zero — decode your own key fob/garage remote and confirm it actually rolls (not a replayable fixed code). Read-only, non-destructive.

A centralized repository for technical and cybersecurity white papers published by MottaSec. Each folder contains a distinct white paper along with any relevant supporting materials, tools, or references. This repository serves as a knowledge base reflecting our expertise, research, and thought leadership across key areas of cybersecurity.

🔐 433 MHz automotive key fob RF security research — OOK demodulation, replay attack analysis, chip family detection (PT2262/EV1527/KeeLoq), and real time defense monitoring

Radio Frequency Security Assessment Methodology — a field guide to RF security: pick a technology, get the kit and the cited verification procedures.

Sub-GHz IoT attack emulation + explainable ML detection — Flipper Zero + RTL-SDR + SIEM purple-team platform

🐺 Cerberus — a passive Sub-GHz RF watchdog for the Flipper Zero. Guards the 433/868/915 MHz bands and alerts on jamming, signal floods and replay attacks. Built in C (CC1101 / ufbt).

Portable 2.4 GHz wireless security analyser — ESP32 + nRF24L01. Jammer detection, BLE tracker ID, WiFi scanning, live spectrum IDS. v3.1

GPS spoofing detector for Flipper Zero. Eleven integrity checks across four independent measurement paths, an honest score that never claims certainty, and a simulator so it works with no hardware.

Passive RF rogue-emitter detector — finds hidden cellular modems, rogue APs and wireless bridges in air-gapped OT sites from a spectrum sweep, transmit-free.

Handheld LoRaWAN security assessment for the M5Stack Cardputer-Adv. Every other LoRaWAN pentest tool needs a laptop, an SDR or a gateway; this one fits in your pocket.

Detect GPS spoofing attacks with your Flipper Zero using any NMEA module.

Passive IMSI-catcher / cell-site simulator (Stingray) detection toolkit for SDR — topology + physical-layer heuristics. Receive-only, defensive.

Satellite RF Security & Navigation Integrity Platform, Link budget, GNSS RAIM, RF threat detection, attack surface assessment.

RF security research project exploring Layer2 MITM attacks involving ARP spoofing and DNS interception, EV1527 replay vulnerabilities, CC1101-based RF analysis and physical relay actuation in an isolated home-lab environment

Conducted a security assessment of car key fob systems and identified a replay attack vulnerability using HackRF with PortaPack H2+. The project demonstrated how unencrypted signals transmitted by key fobs can be intercepted and replayed, allowing unauthorized access to vehicles.

Mobile-controlled RF pentesting toolkit with HackRF One, ESP8266 web UI, and Evil Crow integration for scanning, capture, and replay workflows.

RF security research on a consumer drone’s 2.4 GHz control link using HackRF One + PortaPack H2+ (Mayhem) — spectrum recon, passive interception, replay attack, and jamming, with findings and mitigations. Educational/defensive use only.

Hardware security research portfolio covering NFC cloning, CPA side-channel attacks, and RF replay attacks with offensive methodology and defensive recommendations

Detect, track, and locate IMSI catchers (Stingrays) with a HackRF One — receive-only RF spectrum analysis, baseline anomaly detection, directional scanning, FSPL-based triangulation, and movement tracking. 100% legal: no transmission.