How to build SDR server with pole-routed +OPENWRT+SDR TV Stick

0x00 Preface

Recently, because of a need to capture wireless signals from a different place, we tried to build an SDR server with openwrt+ public IP. If you have a small partner, the SDR hardware antenna looks too messy, or the computer does not have enough USB ports to build an SDR server on the LAN to call SDR hardware via TCP/IP.

Hiwifi Router

0x01 Get Root

The polar route just bought turns off the root feature and requires the developer mode of routing to be enabled to connect to the shell interface via SSH. Apply for developer mode process: Go to Router backend-Cloud platform-router info-Advanced Settings-request-Bind phone-Enter verification code-BIND-account bound pole routing account.

is the Nmap scan result before and after opening the developer mode:

You can enter the router shell interface via 1022 Port when you turn on developer mode:

SSH [email protected]192.168. 199.1 1022

0x02 Pole route Brush Undead Uboot

When the developer mode is turned on, the device can be brushed, in order to prevent the device from turning brick can be in the device to brush into the breed Bootloader with an immortal uboot. Find the corresponding model uboot on the http://breed.hackpascal.net/page (polar route 1s:hc5661, polar Route 2s:hc5761, Polar Route 3:hc5861)

Download, swipe into uboot

1 CD/tmp2 wget http://breed.hackpascal.net/ Breed-mt7620-hiwifi-hc5861.bin3 mtd-r write  Breed-mt7620-hiwifi-hc5861.bin

Wait for the route restart to complete after displaying rebooting.

When the three lights are on after reboot, disconnect the power, press and hold the router's RST reset key and then power on, and release the RST key when you see the power light flashing. Computer through the network cable access to automatically obtain IP, with a browser 192.168.1.1 can login breed console.

For security reasons, back up all content:

0X03 Pole Routing Brush openwrt

Since the SDR server needs a USB interface to plug in the TV Stick, a machine with a USB interface is required when buying pole routing. Other OPENWRT routers with USB ports also apply to the content below.

To view CPU information:

Cat/proc/cpuinfo

Download OpenWrt firmware: Select the corresponding version of your router

1 CD/tmp2 wget http://rssn.cn/roms/ Openwrt-15.05-ramips-mt7620-hc5861-squashfs-sysupgrade.bin3 sysupgrade-f-n openwrt-15.05- Ramips-mt7620-hc5861-squashfs-sysupgrade.bin

0x04 OpenWrt Installing the RTL driver

OpenWrt After the restart, enter the management interface: Http://192.168.1.1user:rootpass:root

Set SSH password

SSH [email protected]192.168. 1.1

OpenWrt can be used to manage packages using the OPKG command

1 opkg Update 2 opkg List | grep RTL 3 opkg Install RTL-SDR

After the installation is complete, you can plug the TV stick into the USB port of the router:

Start the RTL-SDR on the OPENW

OpenWrt Terminal execution:

192.168. 1.1 8 8

After that, OpenWrt will open port 1234:

0x05 use of SDR services

Executed on the client:

2000000 144000000 ' rtl_tcp=192.168.1.1:1234 '

1.5e6 ' rtl_tcp=192.168.1.1:1234 '

Grqx

0X06 Utilization Scenario

1. The SDR server can be used to monitor adb-s, AIS (Automatic Identification System) in the airport tower, port and other places

2. Capture voice and image data using Sdr+wifi:

For more details, refer to Defcon Paper:

How Hackers Could wirelessly Bug Your Office

Video:youtube

Maybe can also use the SDR server to monitor keyboard and mouse input in the office area using the Mousejack vulnerability:

Mousejack Hacking: How to use mousejack for physical attacks

Gnuradio Hacking②: Sniffing Nordic chip wireless keyboard and mouse packets using SDR

0x07 Refer

Https://github.com/rssnsj/openwrt-hc5x61

http://www.binss.me/blog/install-openwrt-on-hiwifi-router/

Http://www.right.com.cn/forum/thread-161906-1-1.html

Http://www.levey.cn/352.htm

Http://www.right.com.cn/forum/thread-161906-1-1.html

Http://yo2ldk.blogspot.com/2016/03/wireless-sdr-receiver.html

http://adventurist.me/posts/0050

Http://sdr.osmocom.org/trac/wiki/rtl-sdr

Original address: http://www.freebuf.com/articles/wireless/121961.html

How to build SDR server with pole-routed +OPENWRT+SDR TV Stick