Jump to content


Active Members
  • Content Count

  • Joined

  • Last visited

About 253flo

  • Rank
    Hak5 Fan
  1. I haven't thought too much about what exactly I'd want to do but would think it would be cool to have the ability to deauth or run fluxion from the air. Agreed it may not be easy, unless the aircraft flew a circle around the target which should be doable and ensuring the target is inside the horizontal and vertical beam width. I have seen an antenna on a gimbal doing this...clearly I'm far from that at this point.
  2. Thanks, as of now I'm going with kismet. However, today I did buy a Tetra, so I'll be interested in seeing what PineAP has to offer.
  3. I keep going back and forth on LNAs currently looking at this LNA: https://www.tindie.com/products/gpio/low-noise-amplifier-10mhz-to-8000mhz-w-40-db-gain/, I really like the USB power option (makes life easier) and obviously +30db gain at 2.4ghz is good and I could use it for 5ghz. If its too much gain I can get an attenuation pad. Then I started thinking that I may not only want to receive but transmit, which would be awesome. I'd need a bidirectional amplifier for this, after looking around I found 4 Alfa products but not seeing any options outside of Alfa. The three products (attached) only work on b/g but, I think most networks are on -n by now. The APAG05-2 ($125) is advertising a range of 20-40km with no obstructions......that's ridiculous. The APAG05-2-PoE (not attached) advertises it works on -n. What to do..... 57a69d42-66db-425d-9825-246e95ca3bf5_APA05MD.pdf 2863c393-1abc-49df-b609-8f815e74a3ad_APAG05-2 Outdoor Booster.pdf f09b9bc6-62e6-4cf7-8f49-d577f2f65fa1_APA05 - PEN Booster.pdf
  4. I'd like to get down to the house. I think that should be somewhat reasonable. Foreflight is money!
  5. Agreed, straight and level passes will should provide the most accurate positions. Funny you mention the beam width at the surface, I worked on this, this morning. The calc is: TAN(1/2 the horizontal beam width in deg)*alt*2= horizontal beam width distance, so if I have a beam width of 30deg and at 1000ft agl, I will have a 535.9ft horizontal beam width coverage on the ground. 30deg at 2500 agl = 1340ft ground coverage. Agreed 100%, the slower the better. This is also why I am using 4 alfa cards each card can monitor several channels hopefully not missing too much. The four alfa cards antenna cables will run to the rf combiner, the input will run to the antenna. True, I have some other ideas how I really want this to work, an airborne solution probably isn't the best. Thanks, I really appreciate all the feedback. Its good to hear others viewpoint and recommendations.
  6. Bingo, this is why I keep going back to a panel antenna. Absolutely....this will probably be a little bit more extensive than what you'd find on a drone. A personal aircraft can carry a larger payload, so I'm going to take advantage: Panel antenna: I will likely go with a panel between 30-60deg with at least 9dbi. If I go with the face the panel down to locate emitters I will probably want less of a deg coverage but if I go with the panel in the window to target already know emitters I will want a wider deg coverage. I will probably settle for something in the middle due to the cost. https://www.simplewifi.com/collections/antennas/products/panel?variant=43139723151 LNA: These can get very expensive, I will start off cheap. I realize I will get what I pay for but if the cheaper LNAs work I'll use them. I'm gonna grab a cheap one from ebay and then try my luck with an LNA4ALL. https://www.ebay.com/itm/Bias-Tee-Wideband-10-6000-MHz-6GHz-for-HAM-radio-RTL-SDR-LNA-Low-Noise-Amplifier/322365135389?epid=17021762201&hash=item4b0e759a1d:g:YC4AAOSwZoBdJHZU https://lna4all.blogspot.com/2013/04/lna-for-all-low-noise-amplifier-for.html Battery: A battery will be required to power the LNA. RF Combiner: Not sure the level of quality I need here but something like this in the link below should do just fine for 2.4ghz. https://www.ebay.com/itm/RF-4-Way-Power-Splitter-Combiner-2-4Ghz-N-Female/141504372027?hash=item20f2515d3b:g:qhAAAOSwaNBUigvc Wifi cards: I will go with 4x Alfa AWUS036NH cards for 2.4ghz, I've been using this card for a year plus and its been great. Not yet sure what I'll use for 5ghz or what the gain/loss benefits are on a dual band card, same goes for the antenna, not sure the gain/loss benefits are on a dual band antenna. I would like to use a Tetra for monitoring specific APs, the Tetra might be used when the panel is in the window. Cables and connectors: I'm going to use thick high quality cables and get the shortest possible ones available. If I can just use connectors I will, not sure yet if its doable. I have not sources these yet. USB hub: I'm looking at a 4-7 port 3.0 usb hub, something on amazon should do the job. Laptop or Pi: I have a Lenovo that has an i7 processor, 16gb of ram, running Kali on VM which should be just fine. Another idea I had was to connect the cards to a pi and kick back the data via a 3g/4g dongle to a server then retrieve the data at home from my laptop, I'm still a ways off on figuring out how to do that so I will start off with the laptop. Feedback on the HW setup is absolutely welcome. Fire away!!
  7. Something that was pointed out to me was that Kismet is going to geotag received packets with its current location; so the packet location in the db is not really the emitter location but the sensor location. So pointing the antenna directly down under the aircraft to geo emitters may be best. Any idea what the most common or avg TX power of an AP and device is?
  8. Thanks, I'll dig into this, I haven't seen this article yet. Can you expand on this? I'm not really sure what you mean. Agreed, there is absolutely some type of SW plug-in or add-on I would need built for Kismet and/or PineAP to ingest the current GPS heading to identify the relative angle of the antenna adjacent to aircraft heading. Would love to hear any ideas on this. Not a bad idea, but my concern with this is that the range of a 15dbi omni antenna with a clear line of sight will only give me a range of about 1100ft (please correct me if I am wrong). Flying around at 500ft isn't really ideal. I'm sure adding a LNA or something like this: https://shop.hak5.org/collections/wifi-gear/products/long-range-wifi-kit will help. This is why I continue to go back to a panel antenna where my range will increase significantly.
  9. One of my goals is to geolocate APs and devices utilizing a directional panel antenna and being able to visualize this data geospatially. Referencing the angle of the antenna will be one of the key peices into this calculation. Since I plan to only have one antenna perpendicular to the aircrafts heading, I will likely be "forced" into triangulating. I imagine flying in a circle around my house would likely give me the most accurate location of my AP....essentially triangulating.
  10. Thanks, I would love to hear other ideas on how to make this happen. I will checkout discord and was also just looking at Kestrel, it maybe another mapping option.
  11. Tracking the RSSI values based on each GPS position drive where GISKismet plots a lat/long which from what I understand is all based off an omni directional antenna. However, since I will likely only be using a panel antenna, I think I would have to somehow indicate to GISKismet that based on my GPS heading my antenna is always pointing +90deg (if antenna is in right window) and my antenna coverage is 30deg off the 90deg bearing. A lot to unpack there.... No clue where to start.
  12. Haha yes planning to do this on a buddies Cessna however that would be awesome to see someone doing this on a comm bird.
  13. Thanks for the response, the reason my first thought was to use PineAP (which I have never used) is that the GUI seems to be a little more user friendly when I'm looking at going beyond a survey. I have been playing around with the Kismet lately and do like the layout, sounds like this is the right solution if mutilpe cards cannot be supported by the PineAP. One idea is to use a Tetra and PineAP when targeting a specific AP or device. Another part I'm struggling with is how to geolocate APs and devices. I have looked into GISkismet but, to my knowledge there is no way to indicate the antenna reference while incorporating GPS. For example, if I put the antenna on the right side window and the parameters are for a 30deg coverage. GISkismet will not know the antenna location. Thus not providing accurate geolocation of APs and devices. I'm not saying this is the gospel but this is how I understand it so far. I would be interested if anyone has any feed back on this.
  14. I moved the convo over to your suggested location:
  15. I am looking to build an airborne wifi survey system. My idea is to run a panel antenna off the side window of the aircraft. The antenna will connect to an LNA, then an RF combiner, then to several alfa cards including a Tetra, each radio will cover only 3-4 channels. The reason for multiple cards is due to the aircraft speed, I do not want to miss APs, clients, or devices. My thought with using multiple alfas is that I can dwell on channels at a higher rate vice having only one radio and hopping on a bunch of channels which will likely lead to missing APs, clients, and devices. The alfas would then run to a usb hub and then to a laptop. I would really like to use PineAP as the SW interface. Questions: -Can I use external wifi cards like an Alfa with a Tetra and PineAP? -Is PineAP a viable UI and capable interface for this setup?
  • Create New...