Media

DragonOS FocalX Detecting Cell Simulators: DIY Kit & Proof of Concept with srsRAN and RayCatcher

In this video, I explore the potential of offering a preconfigured kit designed for 2G/3G/4G/5G experimentation. The kit includes a laptop, a LibreSDR (B210-style SDR), an Orbic mobile hotspot, and ...a 5Ghoul-compatible and exploitable 5G modem. I demonstrate one of many things that can be achieved with this setup and provide guidance for those who want to replicate it using similar hardware.

Here’s what you’ll see in the video:

- Configuring srsRAN 4G to authorize the sysmocom SIM inside the Orbic mobile hotspot to connect to a custom srsRAN 4G network.

- Loading RayCatcher, a Rust-based tool, onto the Orbic hotspot to detect and analyze cell simulators. https://github.com/EFForg/rayhunter

- Demonstrating the Orbic connecting to the network and generating alarms when detecting anomalies in the signal.

This proof-of-concept video emphasizes the importance of understanding the electromagnetic spectrum to protect yourself against potential threats like rogue cell simulators. I explain the precautions I take, such as using Faraday bags and other measures, to ensure compliance with transmission regulations and avoid broadcasting signals unlawfully.

Finally, I reflect on the broader implications of this work: Why does detecting cell simulators matter? It’s about empowering individuals with knowledge and tools to navigate and secure the unseen world of the electromagnetic spectrum.

Watch the video to learn how this kit—and the knowledge it builds—can help you stay one step ahead in an increasingly connected world.

WarDragon available here (when in stock): https://cemaxecuter.com/?post_type=product

Don’t miss out on staying connected: Catch updates on Twitter: https://twitter.com/cemaxecuter

Supporting the channel: If you find this content helpful, please consider supporting the channel through Patreon: https://www.patreon.com/cemaxecuter[+] Show More

DragonOS FocalX Detecting Cell Simulators: DIY Kit & Proof of Concept with srsRAN and RayCatcher

In this video, I explore the potential of offering a preconfigured kit ...

DragonOS FocalX LibreSDR (USRP) Hands On w/ Osmo NITB Scripts (UHD)

In this video, I start testing the LibreSDR, a USRP-type SDR I picked ...

Building the DragonBridge: Long-Range 802.11ah Wireless Networking with Drones and T-HaLow Devices

Join me on an exciting month long+ journey as I push the boundaries of ...

Join me on an exciting month long+ journey as I push the boundaries of wireless communication using the Lilygo T-HaLow 802.11ah devices in bridge mode! In this video, I demonstrate ...how I successfully established an SSH connection from my laptop, across six T-HaLow units—some mounted on two drones and others on the ground—to a Raspberry Pi ground station equipped with DragonOS pi64 and a KrakenSDR.

What You'll See:

Innovative Network Setup: I configured three pairs of T-HaLow units, each pair consisting of an access point and a client. The first pair connected my laptop to the first drone. On each drone, I bridged two T-HaLow units via Ethernet, effectively creating a relay system. The second pair connected the two drones, and the third pair linked the second drone to the ground station Raspberry Pi.

Successful Long-Distance Communication: By the third attempt, I achieved a stable ping across the entire bridge and streamed IQ data from the SDR++ server on the Raspberry Pi to the SDR++ client on my laptop—over a distance of 1.6 km between drones!

Challenges and Triumphs: Experience the hurdles I faced, from connectivity issues to environmental obstacles, and how perseverance led to a successful connection.

Stunning Aerial Footage: Enjoy breathtaking drone shots that not only showcase the technology but also add a visual treat to the technical journey.
Why This Matters:

This project highlights the potential of increasing the standoff distance between equipment using 802.11ah technology, also known as Wi-Fi HaLow. Operating in the sub-1 GHz unlicensed bands, 802.11ah offers extended range and improved propagation through obstacles compared to traditional Wi-Fi frequencies. It's designed for low-power, long-range connectivity with lower power consumption—ideal for IoT applications, remote deployments, and innovative projects like this DragonBridge.

Equipment Used:

Lilygo T-HaLow Units (kindly provided by Lilygo for testing)
- https://lilygo.cc/products/t-halow
Raspberry Pi with DragonOS pi64
- https://sourceforge.net/projects/dragonos-pi64/
KrakenSDR
- https://www.crowdsupply.com/krakenrf/krakensdr
SDR++ Software
https://github.com/AlexandreRouma/SDRPlusPlus

Join Me:

Embark on this adventure to explore the possibilities of 802.11ah technology. Whether you're a tech enthusiast, a drone hobbyist, or just curious about long-range wireless communication, this video has something for you!

WarDragon available here (when in stock): https://cemaxecuter.com/?post_type=product

Don’t miss out on staying connected: Catch updates on Twitter: https://twitter.com/cemaxecuter

Supporting the channel: If you find this content helpful, please consider supporting the channel through Patreon: https://www.patreon.com/cemaxecuter[+] Show More

DragonOS FocalX Tezuka Firmware Setup + 3rd Party Software Mods (PlutoSDR, SDR++, SatDump, Soapy)

In this video, I demonstrate how to modify the PlutoSDR using firmware ...

In this video, I demonstrate how to modify the PlutoSDR using firmware built with the tezuka_fw firmware builder.

https://github.com/F5OEO/tezuka_fw

I showcase downloading pre-built firmware from the releases section and unlocking powerful ...new capabilities, including:

- Frequency Extension: 47.5 MHz to 6 GHz
- Seamless Switching: RX1/RX2 and TX1/TX2
- 8-Bit Complex Mode: Push bandwidth to 14 MHz over USB2 for smooth high-rate streaming
- Audio Gadget Support: Recognized as a soundcard (no need for virtual cables)
- USB Boot Support: Embed heavy applications like GNU Radio
- SD Boot Support: For platforms like Pluto+ and AntSDR

Why this matters: The shift from 12-bit to 8-bit sampling is key—it sacrifices a bit of resolution to dramatically increase bandwidth. Thanks to changes implemented in the FPGA, I was able to expand from a stable ~5 MHz bandwidth to nearly 15 MHz over USB2, unlocking new potential for high-rate data streaming. Even better, the firmware retains the PlutoSDR's normal operations while enabling Maia SDR functionality, which includes a local webpage capable of streaming and viewing over 60 MHz of wideband data—right in your browser!

https://github.com/maia-sdr/maia-sdr

I also quickly cover building and compiling tools like Soapy, SDR++, and SatDump to work with the modified firmware. Soapy is hardcoded for 8-bit mode as far as I know, and SDR++/SatDump include settings to enable this as well. I demo these tools, along with CubicSDR, to show how they integrate and operate seamlessly.

If you're looking to unlock wider bandwidth, enable advanced features, and retain full functionality of your PlutoSDR, this video has you covered!

WarDragon available here (when in stock): https://cemaxecuter.com/?post_type=product

Don’t miss out on staying connected: Catch updates on Twitter: https://twitter.com/cemaxecuter

Supporting the channel: If you find this content helpful, please consider supporting the channel through Patreon: https://www.patreon.com/cemaxecuter[+] Show More

DragonOS FocalX Setup AISMon with WINE + Virtual Audio Sink (HackRF, RTLSDR, SDR++, AIS-Simulator)

In this video, I walk through a quick setup for running AISMon, a ...

WarDragon Headless RustDesk Connection Setup w/ Linux WiFi Hotspot (Android Tablet)

In this video, I walk through setting up the WarDragon to function as ...

In this video, I walk through setting up the WarDragon to function as a Wi-Fi hotspot using the Linux WiFi Hotspot application. This allows the WarDragon’s internal Wi-Fi to act ...as a hotspot for client devices, such as an Android tablet. I demonstrate how to configure the hotspot, install and use RustDesk on the WarDragon, and establish remote desktop access over the Wi-Fi link. While I use RustDesk in this example, other remote control methods like SSH can also be employed once the connection is established.

I also address a known bug in Ubuntu 22.04’s network manager or wpa_supplicant that prevents some devices from connecting when encryption is enabled. To work around this issue, I use the Linux WiFi Hotspot tool, which is available via the DragonOS PPA for easy installation with:

sudo apt install linux-wifi-hotspot

Here are the relevant links:
Linux WiFi Hotspot repository:
https://github.com/lakinduakash/linux-wifi-hotspot

Command-line instructions:
https://github.com/lakinduakash/linux-wifi-hotspot/blob/master/src/scripts/README.md

During the video, I also show how to set the hotspot to automatically activate after a reboot by enabling the appropriate service. However, I want to clarify that when I mentioned the “service is running” in the video, I was referring to the fact that since I started the hotspot through the GUI, it continues to run without needing to manually trigger it with systemctl until rebooted. The service that I enabled via systemctl will automatically restart the hotspot on reboot, thanks to the configuration steps I demonstrate.

I discuss the convenience of having the WarDragon’s internal Wi-Fi act as a hotspot but also explain the trade-offs: since the internal Wi-Fi is dedicated to the hotspot, it can’t be used simultaneously for other applications like Kismet. Additionally, enabling the hotspot means the WarDragon will emit RF signals, which might be important to consider depending on your operating environment.

This tutorial provides a straightforward way to set up a remote-controlled WarDragon and highlights both the benefits and limitations of using the built-in Wi-Fi for hotspot functionality.[+] Show More

DragonOS FocalX HackRF_Sweeper Quick Setup and Test (hackRF)

In this video, I walk through a quick setup, install, and test of ...

WarDragon WiFi + BT Type Drone Remote ID Detection/Decoding WIP (Sniffle/DroneID Repo)

In this video, I showcase the WarDragon in action using the new ...

WarDragon AIS-Simulator TX + AIS-Catcher RX (GNU Radio, HackRF, RTLSDR)

In this video, I take a look at Automatic Identification System (AIS) ...

DragonOS Pi64 Autonomous Payload Swaps & Real-Time EMS Monitoring w/ Drone (T-Halow, RTLSDR)

In this video, I collaborate with Airrow, the company behind the ...

DragonOS FocalX: T-Halow Experience & Quick Setup Guide (Serial Port Assistant)

In this video, I share my experience so far with the LilyGO T-Halow ...

In this video, I share my experience so far with the LilyGO T-Halow hardware, including some initial hurdles like replacing the chips (thanks to LilyGO for providing those) due to ...an early firmware fix. My units were likely part of the first production run, so I walk through key things to be aware of, like understanding the LED behavior when running on battery power. For example, the current hardware revision only shows an LED if the USB-C cable is connected or an active Ethernet connection is present. This can be important—if you’re not paying attention and unplug both Ethernet and USB-C, you might forget to switch the device off using the hardware switch.

I also show how I built Serial Port Assistant and made it into a deb package that DragonOS users can easily install, or at least I share the repo for anyone interested. Additionally, I dive into accessing the T-Halow TX-AH via the micro USB port and configuring it through the serial application. Since I had already done the configuration before, I talk through how to do it and what to expect, focusing on setting one device as a station (STA) and the other as an access point (AP), and how to start and stop the pairing sequence to get them connected.

This video is both a documentation of my experience and a visual aid to go along with the LilyGO documentation.

In a previous video, I showed how I made a 1km connection between two T-Halows, and I plan to extend that distance using multiple drones and multiple T-Halows in future experiments.

Relevant Links:
Lilygo T-Halow GitHub Info: https://github.com/Xinyuan-LilyGO/T-Halow?tab=readme-ov-file

Lilygo T-Halow Product Page: https://github.com/Xinyuan-LilyGO/T-Halow

Serial Port Assistant GitHub Repo: https://github.com/KangLin/SerialPortAssistant

WarDragon available here (when in stock): https://cemaxecuter.com/?post_type=product

Don’t miss out on staying connected: Catch updates on Twitter: https://twitter.com/cemaxecuter

Supporting the channel: If you find this content helpful, please consider supporting the channel through Patreon: https://www.patreon.com/cemaxecuter[+] Show More

DragonOS FocalX 1km Wireless Bridge Mode Link w/ T-Halow (AntSDR, Pi5, HackRF)

In this video, I set up a wireless bridge using two T-Halow devices ...

1 of 26

Cart

DragonOS FocalX Detecting Cell Simulators: DIY Kit & Proof of Concept with srsRAN and RayCatcher