Search the Community

Hi, I am trying to do a replay attack on a remote control that I have. I can capture the signals fine but when I go to decode it the wave form looks very strange and very difficult to decode. The remote sends the same string 10 times. Maybe I'm missing something? I don't know. I would love some help from anyone and your answer would be greatly valued 🙂 Please see the following pictures Zoomed in The whole string zoomed out

Received my Nano yesterday, am busy discovering how to use it. Today, after connecting to it via wifi (with the antennas on it), for some reason i had the antennas off, and then plugged it into my laptop via the USB and was doing some learning... with no antennas for about 10 minutes. I realized after 10 minutes that my phone was picking up the broadcast ID for the management AP, duh! Which means the Nano had been transmitting (what, 10x per second?). So i wonder how much damage that did. I know from amateur radio, can't xmit without an antenna. ... I measured the Nano's signal strength by walking around with my phone and a wiFi signal strength app, and the Nano was putting out maybe 10dBm less than my ISP-router, and i went outside & i still got a signal thru 3 walls 60 ft away. So anyway, thanks for any comments. Harsh comments okay too. --orrin

Dirty hack in the interface (Configuration module) to select a country code, to re-assert the correct channels and frequencies for your currently occupied country. I noticed the team have patched the Network panel to dynamically display the channel array in a nice dropdown box. I assume you already know linux and how to patch code, or can take this patch and make your own modifications; standard disclaimer: use at you own risk, simples! diff -Npaur pineapple/modules/Configuration/api/module.php pineapple-new/modules/Configuration/api/module.php --- pineapple/modules/Configuration/api/module.php 2016-09-15 13:57:11.000000000 +0100 +++ pineapple-new/modules/Configuration/api/module.php 2016-09-15 13:55:39.000000000 +0100 @@ -49,6 +49,13 @@ class Configuration extends SystemModule $this->disableLandingPage(); break; + case 'changeRegion': + $this->changeRegion(); + break; + + case 'getCurrentRegion': + $this->getCurrentRegion(); + break; } } @@ -135,4 +142,16 @@ class Configuration extends SystemModule $this->response = array("success" => false); } + private function getCurrentRegion() + { + $currentRegion = exec('iw reg get|head -n 2|tail -n 1|cut -b 9-10'); + $this->response = array("currentRegion" => $currentRegion); + } + + private function changeRegion() + { + $region = escapeshellarg($this->request->Region); + exec("iw reg set {$region}"); + $this->response = array("success" => true); + } } diff -Npaur pineapple/modules/Configuration/js/module.js pineapple-new/modules/Configuration/js/module.js --- pineapple/modules/Configuration/js/module.js 2016-09-15 13:55:39.000000000 +0100 +++ pineapple-new/modules/Configuration/js/module.js 2016-09-15 13:55:39.000000000 +0100 @@ -7,6 +7,8 @@ registerController("ConfigurationGeneral $scope.newPasswordRepeat = ""; $scope.showPasswordSuccess = false; $scope.showPasswordError = false; + $scope.customRegion=""; + $scope.currentRegion=""; $scope.timeZones = [ { value: 'GMT+12', description: "(GMT-12:00) Eniwetok, Kwajalein" }, @@ -36,6 +38,15 @@ registerController("ConfigurationGeneral { value: 'GMT-12', description: "(GMT+12) Auckland, Wellington, Fiji, Kamchatka" } ]; + $scope.getCurrentRegion = (function() { + $api.request({ + module: "Configuration", + action: "getCurrentRegion" + }, function(response) { + $scope.currentRegion = response.currentRegion; + }); + }); + $scope.getCurrentTimeZone = (function() { $api.request({ @@ -137,6 +148,25 @@ registerController("ConfigurationGeneral }); }); + $scope.changeRegion = (function() { + var tmpRegion; + if ($scope.customRegion.trim() !== "") { + tmpRegion = $scope.customRegion; + } + $api.request({ + module: "Configuration", + action: "changeRegion", + Region: tmpRegion, + + }, function(response) { + if (response.success !== undefined) { + $scope.getCurrentRegion(); + $scope.customRegion="00"; + } + }); + }); + + $scope.getCurrentRegion(); $scope.getCurrentTimeZone(); }]); @@ -195,4 +225,4 @@ registerController('ConfigurationLanding }); $scope.getLandingPageStatus(); -}]); \ No newline at end of file +}]); diff -Npaur pineapple/modules/Configuration/module.html pineapple-new/modules/Configuration/module.html --- pineapple/modules/Configuration/module.html 2016-09-15 13:55:39.000000000 +0100 +++ pineapple-new/modules/Configuration/module.html 2016-09-15 13:55:39.000000000 +0100 @@ -43,7 +43,23 @@ </div> </div> </form> - + <br/> + <form class="form-horizontal"> + <div class="form-group"> + <label class="col-sm-2 control-label">Region:</label> + <div class="col-sm-3"> + <input type="text" class="form-control" ng-model="currentRegion" disabled> + </div></div> + <div class="form-group"> + <label for="Region" class="col-sm-2 control-label">Region Code</label> + <div class="col-sm-5"> + <input type="text" class="form-control" placeholder="00" ng-model="customRegion"> + </div></div> + <div class="form-group"> + <div class="col-sm-offset-2 col-sm-10"> + <button type="submit" class="btn btn-default" ng-click="changeRegion()">Change Region</button> + </div></div> + </form> <br/> <br/> @@ -101,4 +117,4 @@ </div> </div> </div> -</div> \ No newline at end of file +</div>

Just picked up my nano from you guys at defcon (great to see you all there!) and was curious which antenna is tied to which radio interface? Looking to do something similar to your point to point to multipoint and figured I'd ask before going the trial and error method. Also thanks for this awesome piece of hardware!