
Explore RF penetration testing with HackRF One PortaPack, mastering antenna optimization, replay attacks, jamming, GPS spoofing, and secure assessment of wireless devices using Mayhem firmware.
Discover precautions for assembling port pack with HackRF One, including thermal tape and pads, and why buy components separately; install mayhem firmware via command line, then update via web interface.
Install mayhem firmware on the HackRF One PortaPack using a Kali Linux workflow: download firmware.zip and copy-to-sd-card.zip, flash with hackRF_SPI_flash, then verify updated to mayhem 2.0.
Assemble the HackRF One board with the PortaPack, flash and install mayhem firmware from GitHub onto a micro SD card, and troubleshoot screen issues to operate the device.
update the mayhem firmware via the web interface by connecting the porta pack, navigating to manage firmware, and updating to the latest stable release, achieving version 2.0.1.
Explore the Mayhem firmware options on HackRF PortaPack, from screenshot and sleep to stealth and upconverter, highlighting capture, replay, and other tools for penetration testing and security.
Explore the receive menu in mayhem firmware for the HackRF PortaPack, covering ADS-B, AIS, POCSAG, radiosonde, analog TV, and other options like TPMS and weather signals.
Explore the mayhem firmware transmit menu on the HackRF One PortaPack, with safety cautions and an overview of ads-b, prs, morse, key fob, gps sim, jammer, and S center.
Explore antennas for HackRF PortaPack, including a telescopic antenna, a 5 ghz antenna, RH 775 for 30 mhz to 900 mhz, and SRH 805 S for 900 to 1200 mhz.
Tune the PortaPack to receive strong signals by adjusting saturation between 60 and 80 percent, using VGA and LN values to fine-tune saturation across various antennas.
Discover essential field accessories for portapack, including a shock‑proof bag, a 3D‑printed case, charging adapters, and a Bluetooth transceiver for wireless audio.
Learn to find frequencies of devices using the Looking Glass app, pinpointing wireless switches, doorbells, and car keys with presets and markers. Explore waterfall graphs, min/max ranges, and exact frequencies.
Perform a capture and replay attack on a wireless switch by locating and locking its 433 MHz frequency, recording the signal, and replaying it in a loop.
Demonstrates a capture and replay attack on a wireless doorbell using the Looking Glass app and 433 MHz presets. Guides through identifying frequency, recording NB D0005, and replaying the signal.
Capture the car key signal at around 312.3 MHz, log the exact frequency, and record unlock and lock events for a forthcoming replay attack outside the lab.
perform a replay attack on a car to determine if its remote uses a static or rolling code, noting that rolling codes prevent replay and would require decoding.
Demonstrates a jamming attack on a doorbell using rf tools to identify 433 mhz frequency and generate noise signals for interference, then applies the same test to a wireless switch.
Demonstrates a jamming attack on a wireless switch by transmitting a pseudo-noise signal at the switch’s frequency with a signal generator, showing how interference disrupts the switch’s operation.
Learn to prepare GPS spoofing with PortaPack by downloading daily NASA satellite data, building two files with gps-sdr-sim, and configuring latitude, longitude, height, and output format.
Showcases gps spoofing with the portapack, revealing location changes on a map during a looped attack and noting the need to download and compile a daily nasa file.
Explore how AI tools like ChatGPT and Gemini help identify radio frequencies worldwide and locally, from FM to aviation bands, with practical search tips for use with HackRF One PortaPack.
Connect a Bluetooth transceiver and speakers, and listen to raw audio via the PortaPack's audio app. Tune AM, FM, and WWFM by adjusting frequency, bandwidth, LNA, and VGA.
Demonstrate transmitting and receiving pocsag messages with HackRF One devices and a pocsag application. Also explore a Raspberry Pi based transmission setup and frequency configuration.
Transmit and receive ads-b data using the HackRF One PortaPack, configuring latitude and longitude, icao 24, call sign, speed, bearing, altitude, and squawk, then visualize aircraft on a map.
Transmit and receive APRS messages at 433.15 mhz, sending data like a hello message and decoding source, destination, and APRS data in the apps.
Demonstrates a BLE beacon spoofing app that transmits beacon frames to show how fake devices can appear, including random devices on iOS, Android, and Windows.
Receive ham radio signals with the port pack, using 430–440 mhz (435 mhz) and the scanner and audio apps to transmit, monitor, and decode amateur radio traffic.
Examine first-person view fpv cameras, their transmitter and five gigahertz receiver, and learn how to sniff and visualize the video feed using port pack and related software.
Install RPITX on a raspberry pi to convert it into a versatile rf transmitter. Explore signals across five kilohertz to fifteen hundred megahertz, including carrier, fm, am, sstv, and pocsag.
Transmit and decode pocsag messages using PortaPack and the Rpet tool, configuring frequency and baud rate, and sending an echo message to a pager address.
Transmit FM broadcasts using the pi fm tool with 434 MHz and a WAV audio file, run via sudo, then verify playback on a Bluetooth speaker.
Encourage learners to leave an honest review to improve the course and inspire new offerings, and access the bonus section to download the HTML file and view discounted courses.
Embark on an advanced, lab-based journey into RF security with the HackRF One PortaPack. This course is designed for cybersecurity professionals, ethical hackers, students, and technology enthusiasts who want to analyze, understand, and secure wireless communication systems in a safe and controlled environment.
You will begin by assembling and configuring the HackRF One with the PortaPack H2, installing and navigating the Mayhem firmware, and understanding its Rx/Tx architecture. The course explains core RF concepts including frequency ranges, modulation types (AM, FM), digital signal basics, bandwidth management, and antenna optimization techniques to improve reception and transmission quality within authorized lab setups.
Through structured hands-on exercises, you will explore signal analysis across multiple protocols such as FM broadcast, ADS-B, APRS, and POCSAG. You will examine how replay attack mechanisms work conceptually in isolated lab devices, study signal interference scenarios for defensive awareness, and simulate GPS signals strictly within controlled testing environments. The course also demonstrates how Raspberry Pi can be integrated with HackRF for extended experimentation and structured RF research workflows.
Special focus is placed on understanding wireless vulnerabilities from a defensive perspective, analyzing how unauthorized signal manipulation occurs, and implementing mitigation strategies to strengthen system security.
By the end of this course, you will possess practical, ethical, and technically sound RF security testing skills using HackRF One PortaPack.
Disclaimer: All demonstrations in this course are conducted in controlled lab environments and are intended strictly for educational, ethical, and legal purposes. Unauthorized interference with live devices or networks is strictly prohibited.