RF Replay Attack on a Fob
hardware · medium · +45 XP
Target
GET /api/lab/rf-replay-101/capture (raw bitstream from rtl_433)
POST /api/lab/rf-replay-101/replay body {bitstream} → door status
POST /api/lab/rf-replay-101/submit body {bitstream}
Goal: the captured signal is 64 bits at 433.92 MHz, OOK encoding. Replay verbatim → door opens. Bonus: any byte flip makes the rolling-code (mock) reject it.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/rf-replay-101/
// reuse on the cli
// submit flag
// no solves yet
4 of 5 · hardware