Category: Digital Signals

Cloning A Garage Key with RTL-SDR, Universal Radio Hacker and an Arduino

Over on YouTube Adam Łoboda has uploaded a video showing the full steps that he's taken to reverse engineer and clone a wireless garage door key using an RTL-SDR and Arduino.

He starts by using the Universal Radio Hacker software to record a copy of the wireless signal generated by the garage key. Using the software he can then analyze the signal, and determine the preamble data, payload data and pulse width which he can then input into some Arduino code. The Arduino can then generate an identical signal, and transmit it via a cheap FS1000A 433 MHz RF module. Finally, at the end of the video Adam shows the cloned Arduino based garage key working as expected. 

hacking & clonning my garage key with URH ( Universal radio Hacker ) and ARDUINO DIGISPARK + FS1000A

Decoding NRSC5 HD Radio with GNU Radio and a HackRF

Thank you to "LikWidChz" for submitting his tutorial on receiving and decoding multiple NRSC5 (HD Radio) channels with the help of GNU Radio, a HackRF and the NRSC5 decoder. He writes:

I wanted a way to utilize GnuRadio for working with HD radio. There are no decoder blocks from within GnuRadio to perform this decoding without an external application. This write up is how I was able to split up some signal and supply NRSC5 what it requires to perform the decode.

My goal was to capture some slice of spectrum and "channelize it" so I can perform multiple HD radio decodes at once.

In this linked zip file we have uploaded his GRC file, and his tutorial PDF, which fully explains each GNU Radio block used, and how to use the NRCS5 decoder along with the flowgraph. He also notes that if anyone wants to get in touch with him he is idling on IRC in #gnuradio and ##rtlsdr on freenode under the nickname "LikWidChz".

Channelizing NRSC5 in GNU Radio

Frugal Radio: Decoding ACARS on VHF with your SDR Radio

Rob from Frugal Radio has recently uploaded episode five in his YouTube series on Aviation monitoring. This episode covers VHF ACARS decoding with an RTL-SDR. ACARS is an acronym for Aircraft Communications Addressing and Reporting System and is a short text based wireless communications system used by aircraft when communicating with ground stations.

In the video Rob overviews the frequencies that ACARS is transmitted on in various regions of the world and what equipment you need to decode ACARS. He goes on to explain in depth what some typical data messages that you might receive are including D-ATIS/WX Reports, Pre Departure Clearance, Loadsheets, OOOI, Aircraft performance telemetry, ATC/Oceanic Clearances and arrival airport and parking gate information. Finally he shows various ACARS software decoders that can be used including ACARSDEC, Black Cat ACARS and ACARSDECO2.

Decoding ACARS on VHF with your SDR Radio - Monitoring Aviation Communications Ep 5

RTL433 Plugin for SDR# Now Available

UPDATE 19 Feb 2024: Marc has released an updated version of the plugin at https://github.com/marco402/plugin-Rtl433-for-SdrSharp

Recently Marc has released his RTL433 plugin for SDR# over on GitHub and his Wixsite. RTL433 is a commonly used RTL-SDR command line program that provides decoders for a wide range of 433.92 MHz, 868 MHz, 315 MHz, 345 MHz, and 915 MHz ISM band devices. Examples of such devices include weather stations, alarm sensors, utility monitors, tire pressure monitors and more.

To install the plugin, go to the GitHub page and click on the green Code button, and select Download Zip. In the zip file open the "install" folder and extract the three .dll files into the SDR# folder. Now open the Plugins.xml file in Notepad and add the following line between the <sharpPlugins></sharpPlugins> tags.

<add key="RTL_433" value="SDRSharp.Rtl_433.Rtl_433_Plugin, SDRSharp.Rtl_433" />

Now you can add the plugin to the SDR# screen using the hamburger menu within SDR# on the top left. When a device is discovered it will open up a window for that device, logging data from it over time.

RTL433 SDRSharp Plugin
RTL433 SDR# Plugin Device Windows

NRSC5-DUI: An Updated NRSC-5 HD Radio Decoder for RTL-SDR

Recently we've seen on GitHub the release of NRSC5-DUI, a fork of NRSC5-GUI which was the first fully functional RTL-SDR compatible HD Radio decoder that we posted about back in 2017. HD Radio is a digital broadcast protocol replacement for analogue broadcast FM. It is only used in North America and is easily recognized as the two rectangular blocks on either side of a broadcast FM station signal on a spectrum analyzer/waterfall display.

According to a Reddit post by u/andrewfer000, NRSC5-DUI includes several upgrades from prior forks, including "better audio processing, better channel switcher, more station information, the option to pull album art from Discogs (currently broken due to Discogs anti-bot), better map displays, cleaner code, and optimizations for Python 3.9".

If listening to audio is not your thing, we also wanted to note that HD radio stations operated by iHeatMedia broadcast live traffic and weather radar data within their HD radio signal as well. With NRSC5-DUI this can be easily decoded and plotted on a map.

When listening to radio stations operated by iHeartMedia, you may view live traffic maps and weather radar. The images are typically sent every few minutes and will fill the tab area once received, processed, and loaded. Clicking the Map Viewer button on the toolbar will open a larger window to view the maps at full size. The weather radar information from the last 12 hours will be stored and can be played back by selecting the Animate Radar option. The delay between frames (in seconds) can be adjusted by changing the Animation Speed value. Other stations provide Navteq/HERE navigation information... it's on the TODO 'like to have' list.

NRSC5-DUI Screenshots

Frugal Radio: Review of our RTL-SDR Blog L-Band Patch Antenna

Over on YouTube Rob from Frugal Radio has uploaded a video reviewing our new L-Band Patch antenna which we released for sale late last month. The patch is currently on a release sale for US$44.95 including free standard airmail shipping to most countries. We will be ending the sale this Wednesday at which point the price will go to US$49.95, still with free standard airmail shipping to most countries. The patch can be purchased from our web store at www.rtl-sdr.com/store.

In the video Rob demonstrates the patch receiving Inmarsat signals strongly, and decodes a few AERO signals using JAERO. He shows that the patch works on any RTL-SDR with bias tee capability as well as an Airspy Mini. Lastly he compares the unit against the SDR-Kits patch.

We note that we are also supplying a kit for a giveaway to Frugal Radio subscribers that we will announce in an upcoming video coming out a few days time.

RTL-SDR updated L-band patch antenna review - perfect for your SDR radio!

UPDATE: Giveaway information now available in the latest video below.

RTL-SDR L-Band Patch Antenna Giveaway

Project Horus 55: Live Video from a High Altitude Balloon

Project Horus 55 was a project that involved creating a high altitude balloon with payload that could broadcast live video down to ground station observers, as well as creating the ground station receive hardware. On March 7th 2021 the balloon was launched and ground station observers successfully received the live video.

The transmission hardware onboard the balloon was a Raspberry Pi Zero which captured and compressed the video, and a LimeSDR Mini which broadcast a DVB-S signal at 445 MHz. Power amplification was provided by an 800mW LDMOS amplifier. On the ground station side, RTL-SDRs were used as the receiving hardware and SDRAngel as the software. Although high gain auto tracking Yagi's were used by the main ground station team, it's interesting to note that the balloon chase team were also able to receive the video with a simple vechicle mounted turnstile.

In the video below Mark VK5QI who was one of the people behind the project discusses the setup before the launch.

Live Amateur TV from 100,000 feet!

The video below shows the launch and some of the live video received.

Receiving Video Directly from a SpaceX Falcon 9 Rocket + Scott Manley Video

Last week we posted about how several users on Reddit & Twitter worked together to receive and decode text telemetry from the SpaceX Falcon 9 rocket launch using a HackRF, 1.2m dish with custom 2232.2 MHz feed and GNU Radio. In that thread it was hinted that the text telemetry was only a small portion of data contained in the entire signal. It turns out that the remaining data is the SpaceX engineering video feed which is often shown in the official live coverage streams.

Over on Reddit user /u/TRGFelix writes how he was able to receive and decode the video with his own low cost setup involving an Airspy Mini SDR, TV MMDS downconverter and the ubiquitous low cost WiFi grid dish that we've often used for GOES satellite reception and for Hydrogen Line radio astronomy. The software used was the SatDump decoder created by /u/Aang253 which builds on the research done by @r2x0t:

So today at 10:21UTC i got my own recording of Falcon9 video feed downlink on S band 2272.5MHz and with u/Aang253's software SatDump i could easily decode it from the recording straight down to mxf, avi or mp4 video file! Even with very simple recieving setup!

Setup used for receiving was simple wifi grid mesh dish antenna (100x60cm) on a tripod with old MMDS TV downconvertor and Airspy MINI. here is a photo of the setup few minutes before launch But of course its doable without convertor with SDR such as HackRF , two SPF5189Z LNAs and same antenna or even TV dish with DIY S band feed!

Software used for recording was great performing opensource SDR++ by u/xX_WhatsTheGeek_Xx link here https://github.com/AlexandreRouma/SDRPlusPlusS oftware used for decoding was u/Aang253's Satdump software which i will link later as it still needs readme written and confirm it runs without bugs! UPDATE - LINK: https://github.com/altillimity/SatDump

Original MXF video together with CADU file and I/Q file recording 6MSPS int16 here. https://files.altillimity.com/Falcon%209%20OK9UWU/

TRGFelix is also on Twitter as @OK9UWU and he has posted images of his setup, and part of the video he decoded. TRGFelix notes that he is working on a tutorial which we are very eager to see!

It's extremely interesting that we can see views of the liquid oxygen floating around inside the stage two tank which is not shown during the official live streams.

As a bonus, this story was also covered by the very popular space YouTuber Scott Manley who has put out a great video popularizing the discovery and touching on a few interesting points such as how SpaceX may be legally required to encrypt these videos in the future (but hopefully not!).

How Amateur Radio Fans Decoded SpaceX's Telemetry & Engineering Video