trendmicro/rfquack

RFQuack: the versatile RF-analysis tool that quacks!

rfquack's Issues

Handle multiple radio modules simultaneously

Example use case: receive, manipulate packet, reconfigure modem, retransmit. This eliminates the need to reset the module, which takes time.

The idea is to keep an array of radio modules with certain configurations and capabilities, and route the packet to the desired one.

Consider removing TX queues and used direct send

Interrupt-driven RX function: no polling in the firmware

Allow the RFQuack radio module to pass a callback to the RadioHAL driver. The callback will be invoked upon all valid RX interrupts, such that polling won't be needed anymore.

Rule chaining in packet-manipulation engine

Add the possibility of chaining rules conditionally, for instance: if (pattern of) a rule matches, go to another rule and skip the rest.

API to perform SPI transactions from the Python client

RFQuack for Evil Crow RF

Hello!

I have spoken with Federico about implementing Evil Crow RF with RFQuack

Well... Evil Crow RF is a device with ESP32-PICO and two CC1101 modules

The problem with Evil Crow RF is that to upload any code it has to be set to QOUT or DOUT flash mode

So... when using your docker container it doesn't work because it needs this mode (esp32-PICO is continuously rebooted)

To fix this, you have to add board_build.flash_mode = qout in the RFQuack platformio.ini file

I have tried to do this in your example RFQuack-esp32-CC1101-serial, but when I run pio run -t upload -d RFQuack-esp32-CC1101-serial it gives many compilation errors.

Attached is a file with the errors
output.txt

Can you help me implement RFQuack with Evil Crow RF?

Thank you!

DSL for packet manipulation rules

On the client side, provide an expressive packet-manipulation mini language. For instance:

q.add_packet_manipulation("/[ke]$/: [2] ^= 0x30")
q.add_packet_manipulation("[5] ^= 0x04")
q.add_packet_manipulation("[@'A')] &= 0x03")

would be equivalent to

q.add_packet_manipulation(pattern='[ke]$', position=2, operation=3, operand=0x30)
q.add_packet_manipulation(position=5, operation=3, operand=0x04)
q.add_packet_manipulation(content=b'\x42', operation=1, operand=0x03)