rf-security

A Curated list of Security Resources for all connected things

Rolling-code health check for Flipper Zero — decode your own key fob/garage remote and confirm it actually rolls (not a replayable fixed code). Read-only, non-destructive.

A centralized repository for technical and cybersecurity white papers published by MottaSec. Each folder contains a distinct white paper along with any relevant supporting materials, tools, or references. This repository serves as a knowledge base reflecting our expertise, research, and thought leadership across key areas of cybersecurity.

A collection of drone security resources

🔐 433 MHz automotive key fob RF security research — OOK demodulation, replay attack analysis, chip family detection (PT2262/EV1527/KeeLoq), and real time defense monitoring

Radio Frequency Security Assessment Methodology — a field guide to RF security: pick a technology, get the kit and the cited verification procedures.

Sub-GHz IoT attack emulation + explainable ML detection — Flipper Zero + RTL-SDR + SIEM purple-team platform

Portable 2.4 GHz wireless security analyser — ESP32 + nRF24L01. Jammer detection, BLE tracker ID, WiFi scanning, live spectrum IDS. v3.1

🐺 Cerberus — a passive Sub-GHz RF watchdog for the Flipper Zero. Guards the 433/868/915 MHz bands and alerts on jamming, signal floods and replay attacks. Built in C (CC1101 / ufbt).

GPS spoofing detector for Flipper Zero. Eleven integrity checks across four independent measurement paths, an honest score that never claims certainty, and a simulator so it works with no hardware.

Passive RF rogue-emitter detector — finds hidden cellular modems, rogue APs and wireless bridges in air-gapped OT sites from a spectrum sweep, transmit-free.

Handheld LoRaWAN security assessment for the M5Stack Cardputer-Adv. Every other LoRaWAN pentest tool needs a laptop, an SDR or a gateway; this one fits in your pocket.

Detect GPS spoofing attacks with your Flipper Zero using any NMEA module.

Passive IMSI-catcher / cell-site simulator (Stingray) detection toolkit for SDR — topology + physical-layer heuristics. Receive-only, defensive.

Satellite RF Security & Navigation Integrity Platform, Link budget, GNSS RAIM, RF threat detection, attack surface assessment.

Controlled, RF-isolated GPS/GNSS spoofing demonstration using HackRF One, GPS-SDR-SIM & NASA ephemeris — analyzing aviation security risks (ADS-B, FMS) and anti-spoofing countermeasures. For education & defensive research only.

RF security research project exploring Layer2 MITM attacks involving ARP spoofing and DNS interception, EV1527 replay vulnerabilities, CC1101-based RF analysis and physical relay actuation in an isolated home-lab environment

Mobile-controlled RF pentesting toolkit with HackRF One, ESP8266 web UI, and Evil Crow integration for scanning, capture, and replay workflows.

RF security research on a consumer drone’s 2.4 GHz control link using HackRF One + PortaPack H2+ (Mayhem) — spectrum recon, passive interception, replay attack, and jamming, with findings and mitigations. Educational/defensive use only.

Conducted a security assessment of car key fob systems and identified a replay attack vulnerability using HackRF with PortaPack H2+. The project demonstrated how unencrypted signals transmitted by key fobs can be intercepted and replayed, allowing unauthorized access to vehicles.