The developer is making lots of improvements it seems, also working towards TX it sounds like!

You have to be using the right firmware and commands. Look closely at this one to the commands I used for c118 kzbin.info/www/bejne/nmWmoYGufM5-a8ksi=NyDlXobBWY-AutS8

@@cemaxecuter7783 I am using the latest version of DragonOS, does it have to download the firmware? Isn't this already present in my case? Isn't it automatic in AutoCalypsoBTS

@Mohamedgames it is but you have to open and edit the commands to match your firmware. Open and look at this for example, but on the file that’s in DragonOS github.com/jhonnybonny/AutoCalypsoBTS/blob/main/autocalypsobts/trx.sh

@@cemaxecuter7783 I think everything is fine! I have a C118 and C139 and I applied this video using the two devices separately, but the problem is the same. I think the file you are referring to does not need to be modified, everything is there. Two problems come to my mind. First, I have seen some articles saying that I must solder or remove a chip from the device for it to work. Is this true? The second is that it is possible that the wires were connected incorrectly, but in my case I have a 2.5mm aux that outputs 3.5 aux, so I used it like this and connected the 2.5 to the phone and then connected the 3.5 to the 2.5. So I have 3 wires (red, yellow, and black) that I connected in series to the dedicated USB (RXD, TXD, GND). Because the problem is that the laptop does not send data to the phone But at the same time, I can see the packets that appear when I press the power button

@@Mohamedgames high likelihood it’s maybe the cable then but also I will say I had one calypso phone laying around here that wouldn’t take the firmware loading and when I looked under the battery I found it had a different version number then the working. But I think it’s also unlikely you have two non compatible phones, so perhaps it is just the cable. I didn’t make mine and instead purchased the ones from Sysmocom I think it was.

I’m just the messenger in this case, the real magic is by the repo developer. Super super cool though and I want to go try it out in a more meshtastic populated area!

@@cemaxecuter7783 oh a big city would be ideal, one where plenty of us are actively using this new niché tech. Be neat to see just what all is lighting the airways with these devices. Still excited to see where this venture goes...cell companies are probably frowning and nail biting with the real concern that not too long from now they will be obsolete...haha but not all is lost perhaps they'll evolve and just stsrt selling Meshtastic 5.0 hardware in 2045 instead of over priced phone plans. 🤣

But then it wouldn’t have the benefits of what the SDR is providing, which depending on bandwidth, can decode all presets at one time across 20+Mhz bandwidth.

@@cemaxecuter7783 yeah I guess

There is so many and I’m not educated on all the different types, battery life, etc but I will say I like the form factor and feel of the Canary. I’ve had no issues flashing meshtastic to it and someone correct me if I’m wrong, but I believe it’s US made (site says so). Which now that you asked, I realize I didn’t share the link. Full disclosure, it was donated to me but I’ve been meaning to buy a 2nd. canaryradio.io

Are you asking if you can do this with sdrplay? You can change the flow graph to a gr-sdrplay source or soapy source and likely achieve the same results.

I really enjoy your experiences with SDR and really appreciate your videos 🤝 Sorry that I asked off-topic.... I meant Iridium.

No problem and glad you enjoy. Iridium is in DragonOS, both the gnuradio portion and toolkit.

I mean I would like it to be possible to use SDR Play in Dragon OS for Iridium.

@sansan4621 you can, you just need to make a profile for it like I shared here. github.com/muccc/gr-iridium/pull/168/commits/16a5cc6fa4fecc1643e1f17a8dbf504b5907af65

It would seem as though it’d should work if a decoder and graph was written.

Not that I know of and I don’t think fill source for this specific feature is available.

Thanks🌹

You’re syncing it to an existing gsm tower. So you’d have to first survey with the phone using the correct OsmocomBB firmware or use something like grgsm to survey and find an existing network nearby you - that’s the arfcn that you’d need. In my case I synced to a gsm network I created with an SDR.

<0001> oml.c:354 OC=CHANNEL INST=(00,00,07) OPER STATE NULL -> Disabled <0001> oml.c:144 OC=CHANNEL(03) INST=(00,00,07): Tx State Changed Event Report Shutdown timer expired "BTS"

Maybe but I’ve been able to “see” the leakage on multiple different frequencies far apart from one another. Not sure what would happen in the case of what you’re suggesting. I should try

Size of the fpga to the best of my knowledge, but all I’ve used the bigger fpga for so far is the bladerf wiphy project.

Try this github.com/f4exb/sdrangel/wiki/Note-on-SDRPlay-RSP1-on-Linux

I’m glad it ultimately worked out! I’ll have to think up something else crazy to do with it. I was kinda wondering, I suppose if we got good enough with running asterisk we could connect via that maybe?

@@cemaxecuter7783 Amazing to see a colab with an Aussie ham.! Keep up the high quality amazing vidoes and love your continued curiosity :) 73 from vk3

I mean I didn’t enter a real number due to my testing 🤷‍♂️

DragonOS Pi64 for the Pi, possibly. It’s included.

You would have the pay the call rates for the sip/IAX provider.

I’m not aware of the PlutoSDR + working with any GSM solutions.

Aaron might be sleeping right now, but I could answer your question. He is using a BladeRF 2.0 Mini xA9 SDR, a Samsung Galaxy S4 mobile phone with a Sysmocom SIM card inserted in it, and a third-party SIP/IAX provider to handle international call routing. A very cool setup indeed!

Hi, I do not know that part. I only use my own hardware and mobile.

@@cemaxecuter7783 ok sir

@@cemaxecuter7783 🤣🤣🤣🤣 bro wanna know so hard

@@alfatech8604 🤣🤣🤣🤣 yes sir !

A stingray acts as a tower with malicious properties forcing the device to connect even if the stingray is not the strongest signal. Once the stingray connects, it interacts with the base band using malicious tactics on various layers as low as layer 1 and as high as layer 6 maybe even later 7. One thing a stingray does that an SDR femotocell would have a hard time doing (but is not impossible) is to spoof the required encryption certificates especially the ones that deal with setting up the connection via the SIM or eSIM. As you can tell I am giving a high level therotertical answer because I do not actually know the real facts.

If you’re running DragonOS FocalX it’s actually configured to the nightly builds so an apt upgrade will get you what’s needed. On the WarDragon I was waiting for the stable build to update to include the feature.

DragonOS FocalX is configured to nightlies so an apt upgrade will get this capability pulled in, but the WarDragon is tracking stable release so it’ll be a little before it updates.

I’ll have to give that a try! I figured there’s got to be an easier way then clicking randomly all over 🤣

Unfortunately I don’t have one handy but my assumption is that the LimeSDR driver may see it, but there is also the possibility I need to update it.

Thank you for your reply sir. The other problem is that i have a laptop, and the module is mini PCIe form factor! Can you suggest a way that I can connect it to my laptop?

Thank you sir.

I am sorry sir. Maybe my English is not that good. I mean the module i have is a mini PCEi form factor, and i have a a laptop. the Dimensions of the module is very small, and it needs a PCi to mini PCi Adapter, which is only feasible for a Desktop. how can i connected to my lap top that does have these ports?

Unfortunately not. The hackrf is not full duplex.

Roaming if I recall.

@@cemaxecuter7783 I see. So, your mast is providing service to an IMSI which it identifies as a third-party subscriber?

@@cemaxecuter7783 I see. So your mast is recognising the IMSI as a third-party subscriber?

@@cemaxecuter7783 I see. So your mast is recognising the IMSI as being the subscriber of a third-party?

@@cemaxecuter7783 I see. So your mast is recognising the IMSI as having a third-party subscription?

Was good talking to you again! 7 minutes this time, a record. Haha

That looks like a very interesting application. It mentions one lib maybe being too old in 22.04 though, wish it was a bit more specific there as to if it really doesn’t work or not and also what version it recommends to use.

Try it, maybe it will work. Because installing NeumoDVB “manually” is difficult and many errors appear.

I’ll give it a try. I don’t fully understand all the hardware pieces or what it looks like once it’s running but I’ll explore some more asap.

Thanks 👍

Are you using the internal bias T or external? I would highly recommend grabbing an external to test to make sure something is not wrong with the v3 switching on its bias t. You could also open up SDR++ and tune to the center frequency of the iridium you want to look at and flip on/off the bias T option. I’ve seen it to where it just gets stuck and unable to turn on within gnuradio backend applications but turns on fine with something like SDR++.

@@cemaxecuter7783 i used cubitsdr it works fine . bias t turning on off . yes internal bias t. seeing iridium signals

@@cemaxecuter7783 yes using internal bias t. If i use sdr++ or cubitsdr I can see the signals and turn on and off the bias t and it works fine. Im getting the same results on the pi version. as i have just put in on both a PC and rasp pi. Also when running iridium-extractor I have checked their is an actual voltage with a meter. Im just wondering if its todo with some sort of driver issue wiht the v3 as the 4 works fine. As maybe when you did your video the 4 was not out. and since then some driver change for 3 and 4

@rogerm1cdq407 I’ll double check but even back then there was a periodic issue that was driving me nuts where the bias t wasn’t actually turning on with the v3 when used with osmo SDR and soapy under iridium, but it did turn on and off with SDR++. If possible though I highly recommend an external one. I’ve been meaning to update iriduim anyways so I’ll check with v3 and v4 asap

@cemaxecuter7783 just tried with external bias t. Still same. At a wild guess when the 4 came out. Software would see it but you get no signal untill you updated driver. I'm wondering if it trying to work it as a 4 and the 3 is not showing signal

This is on a setup you’ve built on your own or DragonOS?

@@cemaxecuter7783 I am using kali linux and using the github repo u showed, I have matlab installed on my system Captured the signal with BladeRFA4 And the whole process.m run Until it reaches the line where it calls turbodecoder I installed turboFEC from the github repo as mentioned in the remove_turbo.cc Also downloaded the the crc.h and is in the same location as remove_turbo.cc I compiled the remove_turbo but when I run it direct in command shell I get error of missing libturbofec.so.0 something Even thou the library is there and it says No such file or directory I tried giving location via bashrc No results Can you make a video on how you did it cuz I have been trying from 2 weeks

Make sure you have 2023 or higher firmware loaded. It should recognize it.

🙏🏻-Thank you

Not sure what you mean by republishing them, it’d be great if you just link them to mine. I don’t want the videos pulled down and just rebranded. That takes away from all the work put on. Plus linking them to the original helps me to continue to do them.

If I recall I had to request a temporary license to utilize this function. I can’t specifically recall what was all in the database but I’m getting no back into using the spectran and waiting for a new deb package to come out for RTSA pro so perhaps they’d let me try it again.

Please do and I agree, that was pretty fun. I’ve since found other things I’ve been trying to attack, like cameras on phones and such.

@@cemaxecuter7783 i will have to try and do a camera. It would be nice to adapt these java tools to mobile devices to these attacks can be portable, maybe will add that to my project list jaja. Have you considered doing a video on keylogger attacks using emanations from keyboards?

@BLT-sr6zz you got me thinking I should, but my luck every time I do something more towards “hacking” KZbin has a fit. I’m probably not conveying it enough that it’s research or something like that.

@@cemaxecuter7783 yeah if you use very double meaning language the automated system will have a harder time flagging it

I haven’t had a chance to experiment a lot yet. If you jump in the blah2 discord the others can give some good advice. I’m going to try a wide tv channel, maybe digital here soon. I did fm which wasn’t really a good one since the settings of blah2 by default are expecting a wider channel.

I’ll probably try to do a new video, but I will say I put some steps up under a ticket here too github.com/cariboulabs/cariboulite/issues/200

It’s rough with any piece being missed ending up causing issues but there’s also the possibility something changed recently on the GitHub project page.

Can’t say for sure, but I suppose with enough time and effort you could.

@@cemaxecuter7783 cool!