rf-security

A Curated list of Security Resources for all connected things

Rolling-code health check for Flipper Zero — decode your own key fob/garage remote and confirm it actually rolls (not a replayable fixed code). Read-only, non-destructive.

A centralized repository for technical and cybersecurity white papers published by MottaSec. Each folder contains a distinct white paper along with any relevant supporting materials, tools, or references. This repository serves as a knowledge base reflecting our expertise, research, and thought leadership across key areas of cybersecurity.

A collection of drone security resources

🔐 433 MHz automotive key fob RF security research — OOK demodulation, replay attack analysis, chip family detection (PT2262/EV1527/KeeLoq), and real time defense monitoring

Radio Frequency Security Assessment Methodology — a field guide to RF security: pick a technology, get the kit and the cited verification procedures.

Sub-GHz IoT attack emulation + explainable ML detection — Flipper Zero + RTL-SDR + SIEM purple-team platform

Portable 2.4 GHz wireless security analyser — ESP32 + nRF24L01. Jammer detection, BLE tracker ID, WiFi scanning, live spectrum IDS. v3.1

🐺 Cerberus — a passive Sub-GHz RF watchdog for the Flipper Zero. Guards the 433/868/915 MHz bands and alerts on jamming, signal floods and replay attacks. Built in C (CC1101 / ufbt).

GPS spoofing detector for Flipper Zero. Eleven integrity checks across four independent measurement paths, an honest score that never claims certainty, and a simulator so it works with no hardware.

Passive RF rogue-emitter detector — finds hidden cellular modems, rogue APs and wireless bridges in air-gapped OT sites from a spectrum sweep, transmit-free.

Handheld LoRaWAN security assessment for the M5Stack Cardputer-Adv. Every other LoRaWAN pentest tool needs a laptop, an SDR or a gateway; this one fits in your pocket.

Detect GPS spoofing attacks with your Flipper Zero using any NMEA module.

Passive IMSI-catcher / cell-site simulator (Stingray) detection toolkit for SDR — topology + physical-layer heuristics. Receive-only, defensive.

Satellite RF Security & Navigation Integrity Platform, Link budget, GNSS RAIM, RF threat detection, attack surface assessment.

RF security research project exploring Layer2 MITM attacks involving ARP spoofing and DNS interception, EV1527 replay vulnerabilities, CC1101-based RF analysis and physical relay actuation in an isolated home-lab environment

Controlled, RF-isolated GPS/GNSS spoofing demonstration using HackRF One, GPS-SDR-SIM & NASA ephemeris — analyzing aviation security risks (ADS-B, FMS) and anti-spoofing countermeasures. For education & defensive research only.

RF security research on a consumer drone’s 2.4 GHz control link using HackRF One + PortaPack H2+ (Mayhem) — spectrum recon, passive interception, replay attack, and jamming, with findings and mitigations. Educational/defensive use only.

Mobile-controlled RF pentesting toolkit with HackRF One, ESP8266 web UI, and Evil Crow integration for scanning, capture, and replay workflows.

Passive GSM (2G) signal analysis, IMSI catching, and cell-tower geolocation with a HackRF One SDR — using gr-gsm, Wireshark, and the LocationIQ/Unwired Labs API. A hands-on, documentation-only wireless-security research write-up for educational and defensive purposes.