domains / families / security / offensive-lorawan-sub-ghz

offensive-lorawan-sub-ghz

separate

LoRaWAN and sub-GHz (433 / 868 / 915 MHz) attack methodology — LoRaWAN ABP/OTAA join attack, network/session key reuse, frame counter replay, downlink injection on TTN/Helium-style networks, sub-GHz protocol replay (KeeLoq garage doors, fixed-code remotes, TPMS spoofing, smart plug telemetry), HackRF / RTL-SDR / Flipper Zero workflows, signal analysis with Inspectrum / Universal Radio Hacker, and reconstruction of proprietary packet formats. Use for LoRaWAN deployments (smart cities, asset tracking, industrial telemetry), or any wireless device using the unlicensed 433/868/915 MHz bands (garage openers, doorbells, IoT sensors, RC equipment).

When to use

• LoRaWAN ABP/OTAA join attack
• network/session key reuse
• frame counter replay
• downlink injection on TTN/Helium-style networks
• sub-GHz protocol replay
• KeeLoq garage doors
• fixed-code remotes
• TPMS spoofing

Skill page

Source