Hacking Restaurant Pagers with HackRF

This Video Content has been made available for informational and educational purposes only. The publisher does not make any representation or warranties with respect to the accuracy, applicability, fitness, or completeness of the Video Content. The video publisher hereby disclaims any and all liability to any party for any direct, indirect, implied, punitive, special, incidental or other consequential damages arising directly or indirectly from any use of the Video Content, which is provided as is, and without warranties.
This video shows how to use your HackRF software defined radio to trigger restaurant pagers. The pagers shown in this video are manufactured by Long Range Systems. The operating frequency is 467.750 Mhz. A software tool called GNU Radio is connected to HackRF to generate the data packet. I provided the GNU radio file and some raw binary pager files on Github for you to experiment with.
Please note: This video is not demonstrating a security hole. HackRF is simply generating the same wireless data packet as the base station would in order to trigger the pagers.
Helpful information links:
Download the Python program for generating manchester encoded data packets. Binary pager files, including the GNU radio file. github.com/ton...
Software with HackRF Support - hackrf_transfer
github.com/mos...
Universal Radio Hacker:
github.com/jop...
Inspectrum:
github.com/mie...
Pager Information:
paging-systems...
Get your HackRF here:
shop.hak5.org/...
GNU Radio
www.gnuradio.org

[@3nigma.3nc]

Imagine the chaos....

[@dbkgravity]

I can already see everyone jumping up at the same time in the restaurant.
:))
I think these things are a bad habit anyway.
You can't tip for self-service.

[@thatoneintrovert9618]

I have a HackRF with a Portapack H2 and Mayhem. Is there any way I can do it with this?

[@jameshilferty5403]

I've always wondered about this!!! The range from the HackRF isn't great, right? A couple feet at the most?

[@CharlotteAldebron]

What makes and models is the compatible with? Or is this limited to LRS devices? Thank you!

[@nad6234]

oh this is just wonderful ! Thank you for sharing :-)

[@trestuges]

I just have to work how to turn this into free burgers...

[@skyking6989]

Omg this is giving me horrible ideas..😈

[@chrisrock9937]

Awesome!! Is it possible to share your source code?

[@jasonspo]

How are you powering the pagers? Are you connecting to the charging pins or internally? Voltage? Thx.

[@karter61]

Do you mind sharing your GRC file?

[@barbaracarver5565]

Please start the dryer drying again when you come in againwill you

[@fedefernandez127]

Hi, Tony, great video! I have a question about this: how do you program on GNU Radio the duration of each bit to be transmited, and also, how you set f1 and f2 for FSK? I didn't see that on the video. Thanks.

[@NotPike]

Nice!

[@karter61]

Is there a way to work out what restaurant number the pager is set to?

[@brandoncurnutte8235]

Chaos at Applebee's!

[@rickb06]

Bawaahahahahahaha

[@-_______________________.___]

Whats the native range for something like this?

[@shambahri]

Thank you for sharing. What a awesome reverse engineering. :)

[@catalinalb1722]

Brilliant, can you share the grc file and the python script ? thank you

[@MrFoxtroop11]

Did you ever get around to posting the grc file? Can’t find it on your git page. Thanks.

[@cupcakecupcake5360]

Use hack is it for radio attack

[@nomadic_rider42]

Great hack, thanks.

[@mattmurdock8446]

That's awesome!