Trunked Radio: A Guide

Trunked Radio: A Guide

TLDR; You can listen to all of the San Francisco CERS (Public Safety) Trunked system atĀ , this guide will show you how you can do the same for it or another trunked system! I am uploading all of San Francisco CERS ( Public Safety ), including Police/EMS/Sheriff/Citywide/gov/etc to Covers the area in the…

Hardware HacksRadioRTLSDR

Bypassing Rolling Code Systems

This blog post will discuss the implementation of Codegrabbing / RollJam, just one method of attacking AM/OOK systems that implement rolling codes (such as keeloq) — these systems are commonly found on modern vehicles and entry systems such as gates and garages. This technique has been used and spoken about for a number of years…


Hacking fixed key remotes

Previously I discussed using my RTL-SDR to merely listen for analog audio signals. In this entry I’ll discuss using it to decode digital signals (this example on fixed remote signals often used for garages / gates ) so that they can be replayed/brute forced with something like the RFCat project (based on TI’s CC1111EMK module)….

Hardware HacksRadio


A few weeks ago (I’ve been meaning to do this post for ages, few weeks ago is give or take 2 months) there was a post on reddit regarding a new software defined radio that cost around $20. After reading a few topics on the discussion (now all avail at now my interest…