GPS Spoofing With The HackRF On Windows

Note: I said 2.5ghz in the video but I meant 1.5Ghz for GPS signals. My antenna was 430mhz
Would you like to help me fund a new camera for the Channel?
Then visit my GoFundMe page here: www.gofundme.com/f/tech-minds...
Here we take a look at how to GPS Spoof with the HackRF SDR Transceiver.
Software used in this video:
github.com/osqzss/gps-sdr-sim
ftp://cddis.gsfc.nasa.gov/gnss/data/daily
downloads.myriadrf.org/builds...
Want to learn more about HackRF, join the HackRF Facebook group: / hackrf
Products used in my videos can be purchased through my Amazon storefront including the HackRF.
US ► www.amazon.com/shop/techminds
UK ► www.amazon.co.uk/shop/techminds
Support This Channel by becoming a Patreon.
My Patreon ► / techminds
My Twitter ► / techmindsyt
My Amazon ► www.amazon.co.uk/hz/wishlist/...
My PayPal ► www.paypal.me/mobiledev
Merch Store ► teespring.com/stores/techminds
If you enjoyed this video please help me out by subscribing and help me get to my next Milestone of 50,000 Subscribers!
Music: www.bensound.com
#TechMinds #HackRF #GPSSpoof

[@TheAnakin101]

Watching this for a college project, and it’s funny because I live not far from where you picked your GPS to be located. Freaked me out for a moment when you pretty much zoomed in on my location 😂

[@drake66668]

I know

[@subhan5092]

That’s super cool! I have to do this for a final project at my universities cyber range. I’m not worried about doing it, only the documentation 😅.

[@pissfilth]

This works wonderfully (june 2023). I only needed to make an account at nasa to be able to download the needed file. Now i can let a friend play his PokemonGo game (from a chosen location) without his need to cheat on his device.

[@daveb2387]

What model phone are you using?

[@yugegao7493]

may I ask what antenna you use on your hackrf?

[@TheDdmdj]

Its your british accent that i love

[@TechMindsOfficial]

Thank you :)

[@draidenmcminn9666]

@@TechMindsOfficial tryrrrrerertwre

[@draidenmcminn9666]

@@TechMindsOfficial eereerereereteeteewrreeee I rfo

[@pabpab8205]

I've managed to do it finally, thanks for the video.

[@TheDeepajha]

Hi. Can you please help me how you did it? I have been trying in the same way. But my mobile GPS isn't getting spoofed location.

[@pabpab8205]

@@TheDeepajha Hi, have you switched off the wifi of your cellphone? it is a difficult for me to check what is blocking remotly. May be you could join the discussion on Discord channel of Techminds to check that.

[@TheDeepajha]

Can you please tell me how to join that discussion?

[@pabpab8205]

@@TheDeepajha kzbin.info?event=video_description&redir_token=QUFFLUhqa1U5R0pMS2I2al9uS2FxZkxJeTkyVWlSRTRGd3xBQ3Jtc0tuNXJTYThVelZOT0tlNGIweGE2OVloUHFYaU5yY1dVZ05iekFfT0lCWDM3WGNEQXBDbXlSc2N0Z1hBVG1nZm5Rb2lnQVlmNmd6bkdMeUl3ekh5S0N6SHpZOXB6ckx2bmdKdm5vX2NUQ2lKX1hoYlVfUQ&q=https%3A%2F%2Fdiscord.gg%2FUhm6gZF

[@ajy1991]

​@@TheDeepajha Did you get any help/ were you able to resolve the iisue?

[@nikosstamos]

you're a long way from kansas dorothy :)

[@TheElijahMinistries]

Very Gr00vy!

[@asif-alam]

around the world in just 10 sec ;)

[@quieofa]

Hi from Kansas City! (Maidenhead coordinates EM28QW to be a little more precise). As Andrew Beals previously commented, you actually chose a location in Missouri, not Kansas. Kansas City is kind of confusing, since it is the name of a city in two different states (Kansas City, Missouri and Kansas City, Kansas). Thanks for the video!

[@c7ndk]

n e R d

[@franciscojavier7103]

it is working, thank you so much.

[@Qcem]

Android or iPhone?

[@franciscojavier7103]

with a gnss-gps receiver but is also work for android and iPhone @@Qcem

[@timecop1983Two]

Amzing job very clever

[@ahmedalday3029]

Hello sir, is it possible to change the transmitter antenna to one suitable for the mentioned frequency and will the transmission range increase, thank you

[@vinaykaundal4505]

What type of antenna you used with hack rf for gps spoofing

[@Reth_Hard]

Yesterday, I made a prank video using this near the airport. Tomorrow, I'm having my trial... :P

[@deBug67]

No worries, Pilots are not allowed to use GPS as the primary navigation or landing system. Now you know why.

[@RobertResearchRadios]

@@deBug67 meh. Probably more of a holdover from the widespread use of Selective Availability back in the 20th century. Manned aviation regulations tend to move slow in my experience.

[@weikiatteo]

Do I need to obtain the the brbd data on a daily basis for the sim to work?

[@kleiman1]

Hi, Thanks for the video ... but it didn't work for me !!! I don't even receive GPS signals (I put my phone - Sam S10+ on airplane mode and i'm in a controlled env. Using Windows 10). What am i missing? Are you using attenuators?

[@memoriasIT]

Cool video :)

[@TechMindsOfficial]

Thanks!

[@bobwmcgrath]

What would be a good antenna to use for this?

[@rupakmandal5236]

is there any easy way to transmit the gps signal using adalm pluto?

[@user_nicmir]

Отличное видео! Спасибо!

[@OZ6JO]

interesting yes... I'm into geocaching.. I could imagine making a geocache in a shed - and make players believe I've made a very quick travel machine - enter the shed please and check your gps... now leave again.. and wouw - was that fast or not?

[@passiveftp]

nice! How about having a tardis in your garden that teleports you around the world? you could add sound effects. the Tardis noise, then the sounds of new york or somewhere.

[@BentConrod]

Did I hear around 2.5GHz correctly? Civilian frequencies For Block IIA, IIR, IIR-M and IIF: L1, 20.46 MHz bandwidth, centred around the nominal frequency of 1575.42 MHz L2, 20.46 MHz bandwidth, centred around the nominal frequency of 1227.6 MHz

[@TechMindsOfficial]

I meant 1.5ghz not 2.5ghz 😩

[@BentConrod]

@@TechMindsOfficial 👍

[@neil2905]

​@@TechMindsOfficialhi man, is there any way to spoof several gps co-ordinates simultaneously at the same? Or run a setup where several different gps co-ordinates are automatically alternated very fast between several locations.

[@superbcutter16]

another thing!!! can we do this without adding coordinates from the google maps? I mean just by feeding the rinex file from a different date. Obviously the position of satellites would be different and eventually it would result in wrong position

[@aftereffects-7483]

can you create video where how i can try to dynamic spoofing? i mean I have a certain route, and so that it would be broadcast through hackrf

[@ShahZahidKhan]

Great. How to create the gps-sim-sdr.exe. I am facing problems creating .exe file from the c code in Visual Studio.

[@arduinosuperuser-hu9tr]

How to constantly posting the spoofed coordinates? In your video,the spoofed coordinates should be transmitted till 5 min,right?? Suppose i want to transmit a spoofed location for longer time say 10 hrs,how to do that??

[@sumeetbhardwaj6251]

i am not able to download the curent year brdc file from the cidss

[@yarivshavit4893]

Hi Nice presentation! How many Sat (SV) can you generate? Is the limitation of 300 s because of the baseband memory of the HackRF? If I record in my location GPS and GLONASS, and then only change the location, will it work?

[@inavigator1779]

Nope there's a workway around

[@yarivshavit4893]

@@inavigator1779 appreciate any tips and elaborations ;-)

[@chaim0001]

Nice way to make the google location history go nuts. Make yourself levitate over the ocean and go to the mouth of a volcano. It will me a nice location history map.

[@bogdanmuraru2319]

Thanks you I made it all the steps however doesn't work anymore :( Nasa doesn't offer future position for the satellites , any suggestion? or please could you make an updated version of the video ?

[@matthewdieckmann9320]

You'll need to make an account, but it looks like they moved it cddis.nasa.gov/archive/gnss/

[@MKhanfar-MWK]

Thanks for a video mate ... do you try tx fake GPS signals , I do it using ubuntu and some libraries...

[@superbcutter16]

Hi, can you explain a bit more how do you tx fake GPS signal using ubuntu and libs? I mean if there's any tutorial or guide I can follow.

[@MrDenisJoshua]

Hi there, I just want is to simulate a GPS position of my home when I'm not at home. Please indicate me if you want, the possibility to do this with a minimal hardware cost. I just take a look around net in order to find HackRF hardware but there is a lot of type... I just need to simulate the GPS for about 20 seconds until I login in my work office remotely. Can you indicate me witch minimal hardware HackRF can I buy please ? Thanks a lot for the video

[@superbcutter16]

ftp is not accessible using Chrome browser do we need anything else?

[@youssefkaissef7726]

i got that Error {ERROR: Invalid I/Q data format.} after flow your toturial please is possible told me how to fix it

[@TRIPPLEJAY00]

Ideal if your a spy but not practical. Hack RF is a don bit of kit. I need one maybe 2 lol.

[@EpicLPer]

Wait so this means if you take that to a Pokemon Go event you could theoretically get hundreds of players banned in a few seconds... Oh fuck me

[@stewartrv]

Very interesting I like it, is there any way to achieve this with anything but a HackRF? They are a bit pricey for me at the mo... (Oh also apparently first comment too!)

[@buzz-es]

Search online. The HackRF is "open source" public domain. You can buy a knock-off, off brand for around $80 US.... Most work great !

[@stewartrv]

@@buzz-es Yeah I've seen some on AliExpress but I've had issues before withe rother things so I like to buy only from a "known good source" these days unless it's cheap as chips! When I got some more spare cash I'll look again.

[@tarfawisa]

Is it possible to spoof starlink dishy?

[@weirdsciencetv4999]

No TOTO, we actually *ARE* in Kansas, look!!

[@marvinmatthews7223]

Hello, Amazing Video. I've got one question. is there any way to run this script while the Hackrf is on Portapack mode? So that way I don't have to carry my laptop with me? As long as I keep the files on the microsd card on the Portapack H2+

[@Hex-Mas]

How dose this work? I tried it and did not teleport to london. Is there a portal that opens in my living room?

[@muradmehrababrar4133]

it shows me "illegal option -- 1" when I execute the gps-sdr-sim -b 8 -e brdc..... longitude, latitude, altitude" command. May I know how to fix this?

[@cuqier5889]

you are missing -l in command

[@PhilippinesScam]

how do you set it to keep repeating indefinitely and not stop after it gets to the end of the file

[@nhatminhnguyen9972]

thêm - R

[@jtr82369]

That is really cool lol

[@seb2118]

Do you know what might be wrong? I'm getting the failed: HackRF not found (-5), windows 10

[@Antonio-ms3gb]

you have tu plug the equipment Hack RF One in uSB

[@MohitRawat-el4qu]

Hi, the ephemeris files available at cddis websites are no longer available, now .gz files are only available, will this work the same with these files?

[@superbcutter16]

extract them and you will get .n file

[@TheDeepajha]

Hi. I have been trying to achieve this in the same way. But my phone Gps App doesn't show the spoofed location. Can you please guide me how to go about it?

[@Nchernishov]

man, turn on "airmode". phone may synchronize it's geoloc through telephone cells

[@pauloliver9350]

is this what people are using to spoof their locations of helium hotspots with rf actuators too do you think?

[@SKADUSSH]

You managed to set it up?

[@voidvoid606]

Thanks for the tutorial, is there any way to change the gps position whilst the command is running without rebuilding the .bin file? I would like to send a command to move a few meters for example, without my android phone loosing its simulated gps lock. thanks

[@TechMindsOfficial]

I don’t believe you can change without recompiling the BIN file, at least not with this method.

[@StillGraffHere]

If you check the github repo, in the readme you can find the way to generate a .bin file which plays back a RINEX or a user motion or an NMEA GGA stream file. With this technique you can simulate motion. I have not tried it yet, but planning to do so.

[@superbcutter16]

@@StillGraffHere can we use a RINEX file to spoof the user position? by RINEX file I mean I have already recorded data but it was collected in 2017.

[@huseman21]

ugg cant find the .exe and I just cant bring myself to spend hours trying to compile it.

[@equinoxelahin3767]

I don't know if someone has already had this problem but the 1rst time I tried this tuto it worked. But now it doesn't work : my GPS isn't affected by the signal of the HackRF. Someone has an idea?

[@Antonio-ms3gb]

I have the same problem. Did you solve it please ?

[@user-ei6nr2nc6r]

On Sdr github page the .exe for 64 bit doesnt exist. there are NO release. How we do?

[@admin.ChristianoGaio]

eu estou procurando o arquivo GPS-SDR-SIM.zip que não está mais disponível e eu não sei como compilar ele para se ter.

[@superbcutter16]

can we use RTL SDR?

[@superbcutter16]

@J I am using rtl sdr for an position determination but it isn't working at all. The windows keep opening and closing but rtklib isn't getting any data

[@wchafe1]

Useful if your wife keeps track of you via GPS. :)

[@NewsBroadcasting]

if a wife has a bf (common in USA) find his address and put it in . she will be like wtf

[@tymon1928]

That would be a waste of hardware. There are already apps on Google play store that let you spoof your location.

[@Zessenr1]

a divorce lawyer would be more useful imo

[@ahashef]

Don't we need to use a TXC0 with the hackrf One to spoof GPS signals ? As far as I have tried (without it), it does not work. Neither on Windows 10 nor on SigintOS. I will try later another RF Gnu/Linux based distro if I can but I seriously doubt it will work without it any way.

[@TechMindsOfficial]

For my test I did not use a TCXO. Make sure you try with -b 8 as shown in the video. :)

[@ahashef]

R4F Be sure you turned on localization but for device only (not based on BLE or WiFi). That can be a thing too ^^

[@ahashef]

​@@TechMindsOfficial Yep me neither @R4F , just to be sure, what is your HackRF One firmware's version ? =3

[@ahashef]

R4F Hummm... strange, as far as I know, latest portapack devices include a TXCO.

[@ahashef]

R4F Yep it needs further investigating then :p. I just ordered a TXCO for one of my H1. I will see in the future how it goes... or take a good « soldering time » if I am to impatient ^^

[@AlphaEF]

Tested it with hackRF/portapack (blue edition including TXCO 0.5 ppm) but it dont works... neither Iphone or car GPS in garage decoded the given location. I followed exactly the steps advised... monitored output signal with RTL-SDR and a signal was transmitted on 1.575. What can be the issue? Is the 0.5ppm TXCO not stable enought? Someone here who get it working with hackRF/portapack sucessfully?

[@NicolasTsagarides]

Well, modern devices rely on much more than just a single positioning system. My device supports both GPS, GLONASS and GALILEO

[@bugrahan1946]

That is right. To generate GPS signals, you must have a very accurate CLK. In video he tried to generate the signal without using an EXT CLK. How can even he generate the signals?

[@superbcutter16]

Hi, I am posting the question again here. Actually I have done a simulation of varying the ephemeris data which resulted in location changing. I want to develop a Record, modify and replay attack. Is it possible in Matlab environment?

[@seiv-]

tried it on both iPhone 11 Pro Max and Samsung S10 Plus. Both hdevices acted like they were being jammed. I had WiFi, BT, and percise location services OFF using other apps turned OFF. Actually i had airplane more and nothing running. Also tried all 3 samples rates, 2.5 2.6 and 1.25. Devices showed they reach 30-35 satelites and when i was turning ON the spoof i was losing connection to all satelites and no signal/location was detected. Any ideas ?

[@marcferretti]

Could I jam my ankle monitor?

[@pabpab8205]

I can go until the RF transmission, but the location in the US is not detected through internal of Android smartphone. Anye clue ? thanks

[@superbcutter16]

it is because modern smartphones use AGNSS and multi constellation positioning.

[@pabpab8205]

@@superbcutter16 it works with an Iphone6

[@sebastianschachinger6149]

why did the time on your phone not change?

[@TechMindsOfficial]

🤷‍♂️

[@dyndel15]

Any ideas if I followed the steps exactly and my phone doesn't receive spoofed gps? Did you use a special antenna?

[@TechMindsOfficial]

What phone? Turn off your WiFi and take SIM card out or disable network as it might be pulling A-GPS

[@dyndel15]

@@TechMindsOfficial I did it with airplane mode on. android

[@dyndel15]

I tried it with two different android phones actually

[@Antonio-ms3gb]

@@dyndel15 Did you solve the problem ?I also face the same problem ....

[@Sfgvghb-xv2gq]

Great tutorial, but I need your help. Last week I do exactly the same to this video spoofing, and it’s work fine with iPhone. But currently unfortunately it is doesn’t work for iPhone. Currently it is work only for android device. What can I do for improve spoofing?

[@yugegao7493]

may I ask what antenna you use for your hackrf? I currently use ANT500 and I could only detect the signal hackrf transmit but location can not be changed

[@Sfgvghb-xv2gq]

@@yugegao7493 it is very wide and direct antenna . Looks like triangle.

[@user-wb9lw7qp5j]

ERROR: No current set of ephemerides has been found Why bro?

[@cnrk1832]

Hi can you update it please? 2024 and not working anymore

[@AndrewBeals]

You zoomed down into Kansas City, _Missouri_, and not far from a place with decent pizza, but it's not in Kansas. Also, at the point you picked, ground level is just about 300m above sea level. Sure, KCMO is next to Kansas, but it's not particularly close to the geographic center of the contiguous United States (CONUS) aka "The Lower 48". That location would be in Lebanon, Kansas, and is 39.833333, -98.583333.

[@Hex-Mas]

How do you simulate walking?

[@davemarm]

Lay down in bed and put your feet up in the air. Move one foot in front of the other in a walking-like motion.

[@davemarm]

Otherwise use the -u option of gps-sdr-sim and pass in a user motion file.

[@Hex-Mas]

@@davemarm I found out how to thanks.

[@navirolok2574]

What is the maximum distance between HackRF one and mobile phone at 1.5 GHz frequency. Is it possible to see what power in dBm the HackRF one transmits on this frequency. I am also interested in whether the radiation of the HackRF one antenna is directional or non-directional.

[@psymosk]

modern cells ignore spoofing

[@inavigator1779]

Still vulnerable to spoofing attacks just need some modification

[@Sfgvghb-xv2gq]

Which modification is needed? Last week I do exactly the same to this video spoofing, and it’s work fine with iPhone. But currently unfortunately is doesn’t work for iPhone. Currently it is work only for android device. What can I do for improve spoofing?

[@inavigator1779]

use a 50 dB attenuator to decrease the signal noise; make sure to turn off the automatic date and time of the phone. Make a fresh boot in airplane mode to avoid taking GNSS data from GLP and network, if necessary, flush the A-GNSS data from the phone to make it rely only on GNSS. Lastly turn off the wifi and Bluetooth scanning. @@Sfgvghb-xv2gq

[@datopoti]

Would this work for Uber drivers ? since phones are getting GPS signals from cell towers as well.

[@mikealani1168]

Tried exactly steps but my phone never locked on gps, I can see signals bar but no gps luck, would you help me

[@tithobeelzbub3955]

I'm trying this 2024, It's not working!

[@Itsmesam99]

at what freq and sampling rate did the transmission through HackRf takes place?

[@pissfilth]

As you can see in the video @6:30 The frequency is set to 1575420000 Hz, and the sampling rate is set to 2600000 Hz

[@kevtheskin]

Did not work for me :(

[@mikealani1168]

@@julienperret3178 what is the right antenna?

[@doughnuteater]

Does this then mean that you, for example, could listen to Police/Fire/Ambulance in a diferent location if, i.e., your local is encrypted?

[@pissfilth]

You still need to receive that police signal. Your actual location must be within range.. of course

[@SmokiesDen]

Your spoofing a place in Missouri, not Kansas. It's named such as it's at the confluence of the Kansas and Missouri Rivers. Kansas City, Kansas came later and took the name of the larger Kansas City, Missouri. If you wish to read more: kchistory.org/faq/why-there-kansas-city-both-kansas-and-missouri

[@TechMindsOfficial]

Thank you sir for the information. I’m not very good when it comes to US states 😩

[@kmoney604]

Is the Hack RF just not really compatable with a Mac? Am I better off to buy a windows laptop instead of pulling my hair with Mac?

[@TechMindsOfficial]

A lot of command line application use Linux with the Hack RF

[@iaman6047]

Use a virtual machine with linux on your trashy MacBook

[@passiveftp]

How do you set this to transmit for longer than 300 seconds?

[@passiveftp]

whats the difference between dynamic and static?

[@AnishKumar-qb9hm]

with the -d argument then put in the no of seconds u want ie. -d 500

[@vaibhav2314]

No this is legal

[@jlemyp4uk]

у кого получилось ?

[@Andersss]

GPS jamming is becoming a problem for air traffic in Finland and northern Norway. This would be much more dangerous as the pilots might not realize something is wrong if you were to fake another path. Hope the Russians don't get any ideas..

[@aja9664]

Russians have long been realizing these ideas, you are late with your hope)))

[@Andersss]

Any reports of them actually transmitting a fake path? Can't find any.

[@kerbalairforce8802]

Russians jammed US aircraft in Syria. Modern planes switch to a INU backup if the GPS was s unreliable

[@SandeepKumar-jj7zi]

@@kerbalairforce8802 INU means inertial navigation unit?

[@detaart]

You do realize that this is highly illegal all around the world, right?

[@vk3fbab]

Most countries don't take kindly to transmitting on GPS frequencies. In Australia where I am some cab drivers got serious fines for doing this. Our regulator takes the view this activity could cost a life given that emergency services now rely on GPS. So be very careful with your emissions.

[@rkan2]

@@vk3fbab They most likely weren't even spoofing, just jamming...

[@vk3fbab]

@@rkan2 ACMA in Australia makes no distinction between spoofing and jamming. They both involve unlicensed transmission by unlicensed individuals with unauthorised transmitters. It's pretty serious stuff here, understandable given the aviation and emergency services use GPS.

[@rkan2]

@@vk3fbab The same goes for pretty much any country...

[@BorisDessimond]

It doesn't transmit more than a few meters. There's 0 risks.

[@sirajkasideen7706]

mozilla no longer support ftp files to browse