You don’t have to use the module on the flipper to use Sub-GHz. It extends the range quite a bit, though.

Anytime.

Thank you for the suggestion.

@@PenTestTuner oh i didint mean you as much, i just meant in general. EVERYONE talks about mousejaking but even in forums you never hear about anything else.

@@PenTestTuner sorry if i came off to you personally

Nope. I didn’t take it that way at all. It’s the interwebs, I take no offense.

Happy to help.

Thank you.

Nice.

It is the path to the file in the SD card.

I have not used that hardware.

There are a number of splash screens on GitHUB.

@@PenTestTuner I will look there more deeply.

@@d.tracylane8661 did you find them?

You can find allot of the HTML on GitHUB.

@@PenTestTuner how can you make a number of different APs and select them? does a folder need to be created?

You are able to create 2 “Portals” at once with this device. Each chip can function independently.

Thanks you.

I have not.

That has not been my experience.

So much.

Oh yeah.

There are a number of different ways. This is my favorite.

Nice.

Thank you.

It is simply a vector that can be exploited.

Thank you.

It is a 433MHz antenna. So it works in ranges around 300MHz to about 450MHz.

Thanks for the motivation. More to come.

There are a couple of ways to deauthorize. Just keep trying.

You can use a CLI to interface with it and do not have to use the screen.

@@PenTestTuner Ah. That still needs physical connection. I was talking about controlling it wirelessly.

I have not seen it used in that way.

It would be best to just watch the video and take notes.

Watch my video over and over to take notes.

In this video I was using the XTREME firmware. Now I use Momentum, most of the time. If you are referring to the Bruteforce attacks, they are in the Momentum firmware by default.

That’s cool.

Sounds cool, too.

I know. I’ll get better. Hahaha.

Yep.

I haven’t done it in the mini.

Mini is easier to navigate. Touchscreen is better when you are looking at the data right there, especially with functions that show you a graph. So I just like a bigger screen. I would also say that that the mini has an advantage when selecting things and scrolling. Touch relies on swipes to scroll and sometimes those swipes end up selecting things you don’t want to select. It becomes a pain. So… Mini most of the time.

This is the ESP32-WROOM chip.

Because of the nature of rolling codes, the code changes every time. So yes, you would need to copy it every time to perform this attack. It is a great security feature. This video shows a specific attack vector that only works once.

I don’t believe that is the screen that is used.

Make sure to navigate to the folder in Command Prompt, then type the entire name of the file I state. You will get it.

Limited Edition is no longer available, however, the standard version is still being produced. Keep an eye out for when it is stock. rabbit-labs.com/product/rabbit-labs-flux-capacitor-amplified-cc1101/

Hey. I appreciate the kudos. Look forward to the fix. Your stuff is great.

I disagree. Access to the fob could happen without the owner knowing. I agree that the vector is not ideal, but it is possible. Dude, thank you for liking.

@@PenTestTuner you have knowledge we don’t. Without the button actuation there is no signal to emulate. The reason that worked is becuase you recorded it without it reaching the vehicle. Once they correspond the code rolls from the vehicle and sets the fob for its next signal. Or the vehicle is pre rolling era.

Correct. And that, one time you are in. My point is that you can get in, even if the vector is not the most ideal.

I know rolling codes and vehicles better than you. His technique works fine. That same recording will open the door many times. I do it all the time. You don't know what you're talking about.

@@honestlocksmith5428 apparently not. In his example he only recorded 1 code. In order to open any rolling code device you have to have the signal recorded that’s the same in sequence expected by the reciever. Of coarse if you have every signal recorded and play them eventually one is going to be right. You missed the part of my comment that it would take participation to achieve that. I get that it’s able to be done but not with one random recorded signal.

Keep trying.

Thank you for the suggestion.

Thank you.

Love you Amsterdam.

I know that it works with Momentum.

1. Allot of trail and error. 2. Allot of trial and error.

3. Try again.

Make sure you have the latest firmware. Remember there are two chips to flash.

I haven’t had enough experience with markets. Vulnerabilities are everywhere.