Wednesday, October 18, 2017

What would one need to do in order to hijack a satellite?

First, I learned a lot of my information from a combination of my amateur radio experience and an awesome talk I sat in at DEFCON 18. The majority of satellite systems are simple repeaters. The signal that comes in on a transponder is cleaned, amplified, and retransmitted. If you know the location and input frequency, and you pump more effective radiated power than anybody else, you win.
Many satellites also require command modules. These are used to interpret instructions to boost back into orbit or at the end of life, de-orbit into a "graveyard" pattern (or right into the atmosphere itself). Because most satellite systems are custom, it is a real crapshoot what you see for commands and security. I suspect that most command sequences are unencrypted and rely on the fact that a MITM attack on something in space is fairly hard.
Frequencies vary wildly from MHz to several tens of GHz. Your equipment needs to put out the right frequency through a dish that is the right size. Legally speaking, you will at a minimum foul the FCC or your national equivalent, by violating regulations on licensed broadcasting. Also, "birds" and airtime are expensive, so the civil liability if found can be bankrupting.
As far as taking a satellite transponder over is concerned, security relies on rarity of attacks, detection, and triangulation of the signal source. Then people come knocking on your door.
Finding a bird
First, you've got to have a target. Some satellites are geostationary, so they're easy. Other satellites have orbits that sending them in offset patterns around the world. The satellite will come into view at different elevations in the sky tracing different paths, so you'll need to know where it will be and how it will move in order to communicate.
Communications satellites tend to either be geostationary or part of a cluster of many satellites such that one or more is always in view of at least one ground station and any other point on the planet.
There are websites all over the place for this, and they often end up with military / disavowed satellites listed as people will track them with a telescope and then wonder why that one isn't listed yet.
Talking to a bird: Bands
Satellites operate on different frequencies, and the antenna used has to be sized to the frequency of the satellite. Most satellites operate in the microwave spectrum. The ubiquitous (in the United States) DirecTV / Dish Network antennas are usually on the higher end (smaller wavelength) of the spectrum. Because your signal has a lot of travel in its future and your target is small, your goal is to direct as much power in one direction as possible. Anything sent off to the sides, earth, etc. is wasted energy, so you will want an appropriately-sized high-gain antenna. Antenna design can be learned from amateur radio books on the topic.
Before someone chimes in and says, "You don't NEED a directional antenna and tracking motor," that's true... but it will help a hell of a lot. Just because your spot messenger or GPS doesn't have one doesn't mean you shouldn't use one if you can. It will keep your signal where you want it and limit the possibility of interference from or with other things using the same frequency. It also means that it will be harder for somebody to hunt you down. Being nicked just because you let strangers hear you might have some costs associated.
Talking to a bird: Protocol
Now we're getting a bit trickier. Some satellites are very simple, particularly amateur radio satellites. They receive a signal and they transmit that signal back. There are different variations of protocol, polarisation, modulation (QAM is a good one to understand), etc. If your target does more cleanup than just setting a noise floor and spitting things back out, you'll need to know that information as well.
Higher-level protocols may be standard IP/TCP, plaintext, encrypted, or some totally imaginary 17 bit codeword system that was dreamed up by a guy like Mel.
Taking over
You need to deliver more power to the right place with the appropriate protocol. Because almost every satellite is a custom design, that's challenging. If you goal is beyond simple re-broadcast, you're up against a big black box every time. Computers are small, low-power, and probably have next to nothing on them.
The best bet for MITM
If you can't afford to launch your own satellite, figure out where the ground station is and fly over it. Small aircraft are relatively cheap to rent (under $100 / hour to operate), tethered balloons may get high enough to have an effective angle, and if you're quite sneaky you can put something on the transmitter feed line itself.
Many smaller organizations rent their satellite time. I learned when I was 11 that the guy running the local news station's satellite truck is bored as hell when they're in between shots and will definitely show you all the cool things about his rig. Whatever he's renting is probably one of the easier things to get at because that has to be documented and relatively easy to work with.

HACKING SATELLITES

MeteoFax32. It is a French program that is especially adapted  to use on computers embarked on board of the boats. An English version of this program will  available later. This program provides some information concerning the frequencies and the programs of the stations. 
The  address of the Meteofax32 site is:
 http://www.meteofax32.com
HamDream and WinDRM from HB9TLK is for Digital Transmissions of Voice and Data over radio with 2.3 to 2.5 khz bandwidth.
 First beta version of atpdec has just been released.
Atpdec is a NOAA POES satellite APT image decoder.
It's an open source program targeted for Unix platforms (in particular Linux). It lacks fancy graphical interface but focus more on image quality. (see http://atpdec.sourceforge.net/gallery.html for some examples
N0ONG WX Sat Kepler Editor is designed to work only with AMSAT (verbose) format elements.  Import the kepler file from AMSAT using the Open button. Everything other  than the weather satellite elemnts will be removed automatically. Now you can remove specific satellites by pushing the appropriate button. Pressing  the Save button will save the edited elements as kepler.dat.
The  program was written by 
Robert Boeckmann and runs on Macintosh OS X and OS9 and  is freeware
The  narrow-Band-Television AssociationThis Association was formed to shed fresh light on the Television systems used by Hohn Logie Baird.
NBTV (RX) Softwarehere   NBTV (TX) Softwarehere
HDSSTV High  Definition Slow Scan TV, Softwarehere
Aleex Greenland G7JGQ have been devoloping a excellent Satellite tracking program AGSatTrack, and is now available to others.
XAXERO come out with an Internet solution to the Weather Fax for Windows  Software for under $90. Please check the XAXERO page www.xaxero.com for more  details.
a new version of  WXTOIMG from Abstract Technologies New Zealand Limited is out that provides a  complete Windows 95/98/ME/2000/NTinterface in a self-installing archive.
The software is being supported under Linux, Windows, BeOS,  FreeBSD and AIX versions. a Macintosh version isavailable soon.
A new release of Mscan Meteo Fax now has integrate FAXNAVTEX and RTTY into a single program  called  Mscan Meteo Pro and is now available from the Mscan  pages
WeatherDecode v1.10WeatherDecode is a program for decoding of AAXX  and BBXX (FM-12) Meteo messages
A new free Windows satellite tracker programm called SatScape is now available. Satscape a specialised program that predicts where satellites are at the moment. You have also a World view, Horizon views, tabular list and a keppler update via your Internet connection.
An interesting and simple Satellite Tracker called LE SATELLITE FRANCAIS (LSF)
Alberto Casapa, Italy has written receiver control software for  different receivers such as Kenwood R-5000, Kenwood TS-790E, Yaesu FT 847,  AOR AR 3000 and AOR AR 800. for more info visit Alberto´s  Pages.
WXSat for Windows 3.1/95, decodes the signals in the APT format from NOAA, Meteor, Meteosat and GOES Satellites (AM) with a Soundcard.
WXSat can decode also FM-Fax for decoding facsimile-signals transmitting via shortwave.
WXSat works with the soundcard input so there is no external sampling hardware required. A cable between the receiver and the  soundcard input is enough. The program has also a good English documentation.
Oded Regev 4Z5BS from Israel has written a small program called TRACKER that allows the creation of maps that can be combined with images taken from NOAA satellites.
I have test it successfully with NOAA images received with 
WXSAT and JVComm. With it you can see country borders and sea/surface boundaries.
The program is quite small but it comes with the world map so it is about 3.4 Mb in total.
Here is a 
example from a NOAA 14 picture  decoded with WXSAT and added the country borders from the TRACKER program.
Several replies from test users, Oded send me a  corrected versionv1.1 . It should work better now. There is still a known bug regarding fast Pentium computers.
The ORBIT program will not run on fast computers (somewhere around 300Mhz and above). The only way to fix it is running a TSR program that slows the computer in DOS mode. You will probably find such TSR programs 
here . In the next version Oded will try to add it to the  release.
v1.1: Fixed bug in TRACKER.EXE with longitudes in the  range 100E-360E (=100E-0E)
Test users should download the upgrade from v1.0 to v1.1 here and copy the new files to the TRACKER directory

Julian Moss wrote a application called SatMon. With this utillity you can recording audio signals from weather satellites as WAV files to decode  with WXSAT or other programs.
David J Taylor wrote a decode program called SatSignalWith this  program you can demodulate signals from pre-recorded .WAV files. This program produce higher resolution images without the bent verticals resulting from Meteor decode with WXSAT.
David has also excellent satellite tracking software called 
WXtrack
Les Hamilton wrote a program called PALETTE to optimised the colors from images decoded with WXSAT.
PALETTE is a Windows 3.x/9.x compliant program wich operates on luminance bands within a BMP image  produced using WXSAT in conjunction with an image processing  program such as Paintshop Pro etc.
Hellschreiber, wich becomes worldwide a renewed interest is a very old mode wich was first introduced 1921 by Rudolf Hell.
The Hellschreiber is an early faximile communication , where only upper case letters were transmitted and received.
Hellschreiber is an asynchronous transfer mode where  the signal is discretely coded. This means two things:
The transmitter  does not tell the receiver how fast it transmits. It simply sends the message in it's own speed and the receiver must do it's best.
Hellschript is transmitted with either on or off signal. It was  hence easy to implement on available radio equipement. One simply connected the transmitter to where the morse key would be. Such signals  are very sturdy to radio noise. All unwanted frequencies may be filtered  away.
The hellschreiber was invented by Dr. Rudolf Hell in 1929 . It was used by the Germans during WW2 and some receivers was built by the British and Americans to intercept enemy communications.
 
Nino Porcino, IZ8BLY in QSQ with Vilnes, YL2KF on  14063.5 KHz (LSB) Mode Feld Hell
Nino Porcino, IZ8BLYhas make a excellent Windows 95/NT based Hell program wich used the Sound  Card from your PC. You can download the program from Nino´s Home  Page
For more info on Hellschreiber you should first check Murray´s
ZL1BPU Pages wich is the best source on the net.
You can find Hellschreiber transmissions during weekends at 14063.5 KHz LSB (13:00 UTC mode Feldhell), also on 7037 KHz and 3580 KHz LSB (Tuesdays 20:00 UTC) for Europe.
Check also 3560 KHz LSB at 08:00-09:30 UTC for the "Hellraisers" Net or the DX Hell frequencies at 10140, 14063.5 or 21063.5 KHz LSB between 05:00 and 10:00 UTC.
There is a limited Beat version of Radioraft3 available now. Full version is expected in April.
New version of JVComm32 ready for download.The  current version is 0.97
Some new features: SSTV Robot 36 mode  for MIR reception, FAX TX in B&W, Scheduler (RX and TX) for FAX and SSTV, pre-select for different Sound Cards, Different Configurations and a lot of other usefull new features.
When more time I will make all FAX schedules for JVComm32 and will upload them on the "Schedule" page.
Les Hamilton, UK has launched a new Satellite tracking program called Footprint.
Footprint is program which displays the positions of an orbiting satellite and its footprint on a map of the Earth, updating its position and footprint every minute.
The program  can also provide reference tables of relevant ephemeris, A.O.S. and keplerian element data.
The program reads satellites' orbital elements from keplerian element files in standard NASA 2-line format, specifically  filtering out only those satellites belonging to the following classes :
NOAA, USA; Meteor Okean and Resurs, Russia; Sich,  Ukraine.
Download your copy of Footprint from 
Les  Hamilton´s Home Page.
FOOTPRINT has now a  two-map option. You can change the map to one centred on 180 degrees ( for  Australian users ).Also, the time and date routines have been improved.
Adding a Software overview for other decoding Software using the  Sound Card (see table below)
FAX & SSTV Modemfor JVComm32MScan and other Programms from Bernhard Thiem (Germany)
This "all mode" Modem (Rec/TX 8 bit 256) from  Bernhard Thiem, Germany works with Mscan 2.2x (DOS) SSTV & FAX, Mscan v3.0x (Win 95) SSTV, Mscan 1.3 (DOS) FAX
JVComm32 (Win 95, Win NT) for SSTV, FAX, Wefax (Satellite) JvFax 7.0/7.1 (DOS) SSTV, FAX, Wefax (satellite)
Also all programs, which work with a "Comparator"- modem e.g. HamComm, GSHPC, EZSSTV - and several Programs, which transfer their data serial.
Bernhard has now also his own HariFax IV 
Home Page
JVComm Beta 0.9 from Eberhard Backeshoff , DK8JV now available, this new 0.9 beta release supports also transmission/reception  via sound cards. At least a 16 bit sound card is required, and the  the computer should be a Pentium 90 or better. You can download JVComm32 as a unregistered demo version from Eberhard Backeshoff´s Home Pages
I have uploaded a Sound Blaster TSR programm (written by 4Z5BS) that allows you to receive and transmit FM-FAX, SSTV and AM-FAX using only  your Sound Blaster card. All you need is a Sound Blaster Pro card and JVFAX. For download see Software overview.
Just testing the JVComm32 Beta version 0.8 from Eberhard Backeshoff, DK8JV. The author who was written also the populair JVFAX software, wrote JVComm32 for use with DSP controller such as the new EasyDSP from DF6JB. JVComm32 will running  only with Windows 95 or Windows NT, not with Windows 3.1 or Windows 3.11 for Workgroups.
JVComm32 decodes all Fax modes, FM for shortwave, AM for Geo- and Polar Satellites, also H 288/120 and Ham  288B.
Also all "Free Run" SSTV modes Martin M1 and M2, Scotti S1 and S2, Scotti DX, Wraase 180s, Pasakon P3, P5 and P7.
JVComm from  DK8JV together with EasyDSP from DF6JB is a new revolution for image communications.
Eberhard Backeshoff DK8JV has now his own JVComm32 WWW Page
The EasyDSPfrom Ulrich Bangert DF6JB is now available. The universal DSP controller works with the Motorola DSP56002, and a lot of software is available.
EasyDSP software example: JVComm32 (see before), 5 CW filter  100Hz-500Hzautomatic CW filter from SP9VRC, automatic  Notchfilter and Noisefilter from OH2LNS, 300,1200 and 9600 bit/s  AFSK TNCfrom OH2LNS/DF6JB, Emulation Simple/Hamcomm modem,  Emulation Zornslemma converter, Emulation Faxellite (Digisat)  convertor, Emulation Multiscan (PA3GPY) convertor, Emulation Code3 LF3 convertorAMSAT Phase-3D telemetry simulatorPhase-3D telemetry de-modulator 1200 bit/s RS-232
Schematic of a simple decoder circuit, for receiving and  transmitting. DECODER.GIF (7K)Here are some  order info´sfor a simple decoder from Dieter Dippel DF4RD.
Easy Docs for Hamradio programms  from Paul Simpson G0RUR
Complete FAX/SSTV/RTTY hard/software/equipment
RADIOFAX Interface from CIRO MAZZONI, Italy
TT-Designs Marine Computing UK, with hard/software products for hobbyist, sailers and professionals.
TT-Designs Marine Computing UK, Fax/SSTV/RTTY (W95/Sound Card) Software from BONITO English distributor.
ROY1 SSTV for W95 from Fontana Software (IK8BZA)
SC-70 Color Slow Scan TV Converter
WeatherTrac Systems from SFWX,  Inc.
Weather Fax For  Windows3.x/95/NT from  XAXERO Software New Zealand
Software overview
For info on Hellschreiber, wich becomes worldwide a renewed interest , you should check the ZL1BPU Pages
SOFTWARE
MODES
SYSTEM
DECODER
 ATPDECAPTLINUXSOUNDCARD
 MACROBOTSSTVMAC OS X
SKYSWEEPER V2.10.7DX RADIO SOFTWARE MUTIMODEWINDOWSSOUND CARD
ZORNS LEMMA 10.0FAX SYNOPWINDOWSSOUND CARD
WXTOIMG 2.4.12FAX AMWINDOWS, MAC, LINUXSOUND CARD
Digital SSTVWINDOWS 9X XPSOUND CARD
DIGSSTVDigital SSTV  UpdateWINDOWS 9X XPSOUND CARD
SSTVWINDOWSSOUND CARD
PICTOAUDDigital SSTVWINDOWSSOUND CARD
SSTV32 v1.7.2.70SSTV/WEBCAMWINDOWSSOUND CARD
METEOFAX32FAX AMWINDOWS
JPG files for WXSATStores JPG instead of BMP in WXSATWINDOWSSOUND CARD
WTHRTTYRTTY/NAVTEXWINDOWSSOUND CARD
WXDecode v2.20SYNOPWINDOWS
FAX(FM/AM)SSTV/
NAVTEX/RTTY/SYNOP
WNDOWSSOUNDCARD
WXAPT 0.4 BETAFAX AMLINUXSOUND CARD
RTTY/NAVTEXWINDOWSSOUND CARD
METEOFAX32
FAXWINDOWS 95/98UNKNOWN
WXTOIMGFAX (AM)WINDOWS/ LINUXSOUND CARD
MSCAN METEO ProFAX/ RTTY/ NAVTEXWINDOWSSOUND CARD
FAX (AM)WINDOWSSOUND CARD
FAX
LINUX
SOUND CARD
FAX (AM/FM)
WINDOWS 95/NT
SOUND CARD
RTTY/PSK31/AMTOR-FEC/ PACKET AX25
WINDOWS 95/98
SOUND CARD
CW/MORSE
WINDOWS 95/98
SOUND CARD
FAX
WINDOWS 95/98/NT
KANTRONICS TNC
SSTV
LINUX
SOUNDCARD
FELD HELL C/MT S/MT &  CW
WINDOWS 95/NT
SOUNDCARD
PSK31
WINDOWS 95/NT
SOUNDCARD
FAX RTTY CW & OTHER
MAC
SOUNDCARD
MAKING SSTV PICTURES
WINDOWS 95/NT
FAX (FM) SSTV & RTTY
WINDOWS 95/NT
SOUNDCARD
FAX (FM/AM) & SSTV
WINDOWS 95/NT
FAX (FM/AM) & SSTV
WINDOWS 95/NT
SOUNDCARD
FAX (FM/AM) & SSTV
DOS
DECODER
FAX (FM/AM) & SSTV
DOS
DECODER
JVFAX WITH SOUND BLASTER
DOS
SOUNDCARD
SSTV
WINDOWS95/NT
SOUNDCARD
SSTV
DOS
DECODER
SSTV
DOS
VIEWPORT INTERFACE
FAX (FM)
DOS
SOUNDCARD
SSTV
WINDOWS3.X/95
SOUNDCARD
RTTY
DOS
DECODER
RTTY
DOS
DECODER
FAX (FM/AM) SSTV & RTTY
DOS
SOUNDCARD
FAX (FM)
DOS
DECODER
SSTV
DOS
SOUNDCARD
FAX (FM)
MAC
SOUNDCARD
SSTV/FAX
DOS/WIN
DECODER
SSTV
DOS
DECODER
FAX (FM)
ATARI ST
KANTRONICS KPC/KAM
FAX (FM)
LINUX
SOUNDCARD
SSTV
WINDOWS 3.1/95
SOUNDCARD
FAX (FM) RTTY & CW
MAC
SOUNDCARD
RTTY
DOS
SOUNDCARD
SYNOP
DOS
DECODER
FAX (FM)
OS/2
SOUNDCARD/DE CODER
FAX (AM)
WINDOWS3.X/95
SOUNDCARD
SSTV
ACORN RISC PC
FAX (AM)
DOS
SOUNDCARD
SSTV
WINDOWS 95
SOUNDCARD
FM = Radiofax via shortwave
AM = Wefax via satellite
SSTV = Slow Scan Television
RTTY = Radio Teletype modes  (Baudot, ARQ, FEC, CW and/or other digital modes)
Software wich use the soundcard input, no other hardware required. Just  plug NF output from the receiver into the soundcard input.
Software wich use a external decoder, you need a simple (HamComm)  decoder between the NF output from the receiver to the serial port.
* = ATFAX requires a more elaborate decoder circuit ! (HAMCOM interface  can be used in SSTV mode)

Other Decoding Software for Sound  Cards
SOFTWAREMODESSYSTEMDECODER
SPECTRALSPECTRUM ANALYSERWINDOWSSOUNDCARD
eSoftAnywhere DSPDSP HAM RADIO DSPWINDOWSSOUND CARD
CW
WINDOWS
SOUND CARD
PC-HFDLARINC 635-3 DECODERWINDOWSSOUND CARD
RTTY-BPSK-QPSK-FEC-CW-
MFSK16
WINDOWSSOUND CARD
WDECPSKPSK 400 AO-40 TELEMETRIE DECODERWINDOWSSOUND CARD
RCKRTTYRTTY/AMTOR/PACTOR/ CW/ PSK31WINDOWSSCS PTC-II/MFJ/ AEA/KAM TNC
WRITELOGRTTY/CW/PSK31WINDOWSSOUND CARD
TWPSKPSK31LINUXSOUND CARD
MIXW32RTTY/PSK31/QPSK/FSK31WIN95/NTSOUND CARD
CHROMA SOUNDFELD HELL, C/MT, S/MT & CWWIN95/NTSOUND CARD
HELLSCHREIBERDSP GRAPHICAL FILTER DESIGNERWIN95/NTSOUND CARD
PSK 31PSK 31WIN95SOUND CARD
OscilloscopeOSCILLOSCOPEWIN95SOUND CARD
FlexnetPACKETDOSSOUND CARD
AGW Packet EnginePACKETWIN95SOUND CARD
BTL (Blaster TeLetype)RTTYDOSSOUND CARD
RITTYRTTY PACTORDOSSOUND CARD
DSP-CWCW / RTTYDOSSOUND CARD
MRP 37 Morse DecoderCWDOSSOUND CARD
Precision CWCOHERENT CWDOSSOUND CARD
SBMSCW / METEOSCATTERDOS/WINSOUND CARD
MSDSPCW / METEOSCATTERDOSSOUND CARD
CW / METEOSCATTERSOUND CARD
WinToneDTMF, CCIR, ZVEI, EIA, EEA, NATEL and  CTCSSWIN95/NTSOUND CARD
FMS-MonitorFMSWINDOWSSOUND CARD
Win-FMSFMSWIN95SOUND CARD
POC32POCSAG MonitorWIN95SOUND CARD
WACARSACARSWINDOWSSOUND CARD
KRACARSACARSSOUND CARD
BIP Labs SoftwareAF COUNTERWINDOWSSOUND CARD
Spectrum FFTAF SPECTRUM ANALYSERDOSSOUND CARD
Audio AnalyzerAF SPECTRUM ANALYSERDOSSOUND CARD
FFT  Spectra SofTest SeriesAF GENERATOR/ANALYSERWINDOWSSOUND CARD
SpectrogramAF ANALYSERWIN95SOUND CARD
Analyzer 2000AF ANALYSERWIN95SOUND CARD
DSP BlasterFILTERS / SPECTRUM ANALYSERDOSSOUND CARD
FFTDSPDSPSOUND CARD
 RCKRtty Rtty, PSK31, Amtor, Pactor and CW program for Windows95/98/NT and different Modems such as SCS, AEA,  MFJ, DSPCOM and KAM
A new satellite wefax image decoding software called SATFAX from John Lee Wilson W4UVV  is now available to the public.
It originally was written to accommodate the image noise dot saturation problem thet occurs when the  disered 40 kHz bandwidth.
SATFAX was designed for the occasional wefax monitor who wishes to use an ICOM R700, R7100, or AOR 3000A (also  other receiver/scanner that receive either 1691 MHz or the 137 MHz range)  and soundcard in his computer with wefax software to receive polar  orbiting and geostationary satellites.
What makes it so special is that in processing the wefax signal, the software compensates for the narrower bandwidth of receivers that typically have a 20 kHz bandwidth for wefax reception.
  MultiMode for Macintosh (new version).
For downloading Meteosat Scheduler V2.1 visit Alberto Casappa´s new Home Page
 Pscan V3.0 SSTV software from  G4IJE, using Acorn computers.
 WAVSat V2.0 (223K) Weather  Satellite Tracking and APT Decode programm from S. Bonnett (UK) using the Soundcard
FTV (relaese 1.0) , a shareware program from Brian 9H1JS wich decodes FAX (FM/AM), SSTV and RTTY with a Soundblaster Card, Transmits FAX and SSTV. Download the FTV  program. from Brian E. Cauchi´s home page.
WFAX a programm for receiving weather charts from shortwave  stations. It supports several decoders and OS/2 -known soundcards.  For downloading WFAX go to the WFAX Home Page from Juergen Dankoweit, Germany.
New SSTV shareware program GSHPC SHW-1.2 from G. Szabados-Hann,  DL4SAW, now available. It uses a simple decoder such as HamComm. For downloading SHW-1.2 or the registered version V-2.22 go to the DL4SAW Home Page
Intercom (197K) from PA3BYZ  decodes CW (8-99 W/M), RTTY (45,50,75 and 100 Baud), ASCII 110 Baud, and  TOR/FEC mode B. Intercom requires a simple decoder circuit.
WXGraph V1.0 (93K) from PA3GGI  decodes SHIP/SYNOP data in a graphical map (Europe). WXGraph requires a simple decodercircuit.
Blaster TeLetype BTL V1.5 from G0VTQ uses the Soundblaster card and a 386DX or better to receive and transmit radio teletype (RTTY).
 Mac MultiMode (Version 0.31B, 63K) allows you to decode and display morse code, RTTY and Fax on your Mac, without any extra hardware! It requires a Mac with sound input.
WinScan 1.00 (150K) for Windows 3.1 or Windows 95 and Soundcard, from PC Bit Software (PROSKAN).
RadioRaft , a multimode Radio Data Decoder software with 10 ARQ modes, 8 FEC modes and many others... now downloadable from the RadioRaft hompage from F6FLT.
RadioRaft is compatible with the simple HamComm interface.
New Windows 95 program to control a Robot 1200C SSTV scan convertor  version 3.0 from William Montgomery VE3EC now available. For more information the author can be contacted via Internet email at: William.Montgomery@cciw.ca
 ST-WEFAX weatherfax display using a Kantronics KPC/KAM and Atari ST.
 FAX.TGZLinux HF Fax software from Thomas Sailer
David Black WB9TMF has written fax software running on Linux. He receives automatically pictures from USCG Point Reyes, and shows the results on the the net. The page automatically updates every 15 minutes.
German release from WXSat Windows95 AM/FM software for Soundblaster now available, click  here
SSTV for Windows95/NT, new public Beta version 1.02 working with the sounblaster card, now available.Download W95SSTV Beta 1.02 now (2.9 M)
You can  upgrade any working copy of Beta 1.01 to Beta 1.02 Build 214 with this  patch.
Download W95SSTV Beta 1.02 Build 214 upgrade file (124 K)
Before downloading the file take a look at the W95SSTV for Windows95/NT 
homepage.
New Version (version 3) of EZ SSTV (using a simple decoder) now available, download EZ SSTV  (437K) here.
For more information visit John  Langer´s 
homepage.
WeatherMan V2.01 (256K). Receive  Weather maps using Sound blaster card.
WINPIXPRO Versio 2, Slowscan TV  for Windows (3.x and 95).
HamComm  version 3.1 (432K) software program for RTTY, requires a simple decoder circuit.
WXSat from Christian Bock Germany, a program to decode the  signals in the APT format from NOAA, Meteor, Meteosat and GOES  Satellites.
It use the soundcard input so there is no external sampling hardware required. A cable between the receiver and the soundcard input is enough. The program has a German dokumentation. For downloading WXSat (110K) 
click here.
RADIOFAX version 1.0 is a 32bit OS/2 PM program that requires OS/2 2.0 or above and a MMPM/2 installed with an MMPM/2 compatible sound card, download RADIOFAX.ZIP (119KB).
DL1UR-SSTV/FAX for PC with sound blaster card (mode  Martin1, Martin2, 8/16/32 sec and fax), download SSTVSOU1.ZIP (580KB).
PROSKAN 2.07b, a great (all modes) SSTV/FAX shareware program from KA1LPA with dual screen and thumbnails, easy to use, requires a simple decoder circuit. PROSKAN.ZIP  (130K).
Here are two pictures I have received  with PROSKAN and a simple decoder on 3730 kHz. 
SSTV001.JPG  (21K), SSTV002.JPG  (19K).
VESTER-I a freeware SSTV program (requires a simple decoder circuit) from Ben Vester K3BC VESTER_I.ZIP (709K) with the most recent 12/21 upgrades. VESTIADD.ZIP (141K)
Easyfax 1.10 FAX reception program from IK1IZA. EF110.EXE (242K)
Fax Display for Kantronix KAM and KPC3 from N8WLC. K-FAX.ZIP (28K)
SSTV with Soundblaster from WB9MMM. SSTVBL.ZIP (422K)
 SSTV with soundblaster
Receive Weather maps using Sound blaster card. WeatherMan V2.0 WXMAN20.ZIP (258K)
RadFax, a shareware WEFAX program for MacintoshRADFAX 0.9 (173K)
MSCAN (from PA3GPY) SSTV program with dual screens, requires a simple decoder circuit. MSCAN202.ZIP (165K)
HamComm software program for RTTY, requires a simple decoder circuit. HAMCOM30.EXE (418K).
New beta SSTV shareware program GSH-PC from G. Szabados-Hann,  DL4SAW, now available. It uses a simple decoder such as HamComm. The program was described in CQ DL 12/95 page 882. GSHPC.ZIP  (646K) Download the instructions from Geza DL4SAW
New Version of JVFAX available. Today many HAMs and SWLs are getting started in the Hobby with a very inexpensive software. The  software is called JVFAX and is written by Eberhard Backeshoff  DK8JV.
Requires a simple Decoder.
Modes: FM-Fax (HF), AM-Fax (Satellite) and SSTV.
JVFAX  release 7.1 (468K) (stores Pictures in TARGA format).JVFAX release 7.0 (stores Pictures  in GIF format).

Monday, October 16, 2017

Identifying Webpages by Tapping the Electrical Outlet EXFILTRATION

so let me start again. I want to connect a probe receptor either on the power outlet , on the common wall, with my neibourhood, either on the phone line outside on the street

Data Exfiltration from air gapped systems using power line communication


Proof-of-concept

To prove this attack actually works a small proof-of-concept implementation was written. For this POC BPSK modulation is used with a configurable carrier frequency and baud rate. All tools have been developed and tested on Linux.
The tools are available for download on Github: https://github.com/dimhoff/powercom.

Ok, after a round on energy grid blackouts again...I just found these gear for health treatmente using the corona effect discharge...which changes the transmission lines impendance. So, these is like having a big storm on your hands.


"PASSPORT FORGERY (part 3)


Circuit Diagram of RFID based Attendance System
Microcontroller
AT89C52 Microcontroller from 8051 family is used in this system. It consists of four ports and 40 pins.
Oscillator Circuit
Oscillator circuit is connected between the 18 and 19 th pin of the microcontroller and consist of an oscillator with a frequency of 11.0592 MHz and two capacitors of 33pF.
Preset Circuit
The 9th pin of the microcontroller is RST pin, which is reset pin. This preset circuit comprises a switch, a capacitor of (10u) and a resistor of 10k. When the switch is pressed, the RST pin is connected to the power supply(Vcc) and the microcontroller gets reset
LCD Display
The LCD display is used for displaying the data. It consists of 16 pins: three pins are connected to the power supply, and the remaining pins are connected to the port 2 of the microcontroller.
RFID Reader
The RFID reader is a module with RFID reader and antenna. It is small in size and integrates with any sort of hardware design. It is used to read the data stored in the RFID tags.
Circuit Working
The data stored in this tag is referred to as the identification and attendance of the person. Once the student places the card in front of the RFID reader, it reads the data and compares the data stored in the microcontroller which is programmed by using Embedded C language. If the data matches, then it displays the information on the LCD. This RFID attendance system also makes use of the status button for retrieving the status of students’ attendance, which is interfaced to the microcontroller. By using this advanced concept, a lot of time can be saved as all the students’ attendance information is directly stored in the database." (these are features from attendance RFID's but also passports)


https://www.elprocus.com/rfid-based-attendance-management-system/

Security Investigator Edit and Customize Data (passport forgery part 2)

Load Modulation in RFID System PASSPORTS FORGERY (part 1)

PadBuster - Automated script for performing Padding Oracle attacks

PadBuster is a Perl script for automating Padding Oracle Attacks. PadBuster  
provides the capability to decrypt arbitrary ciphertext, encrypt arbitrary plaintext, 
and perform automated response analysis to determine whether a request is vulnerable 
to padding oracle attacks.

https://github.com/GDSSecurity/PadBuster