Initializing 
› booting orchestrator kernel …
M · AhsanAgentic AI Engineer
M·AHSAN, home
← All projects
RF SecurityRF Security Research · Controlled Test

Car Keyless Entry Replay (HackRF)

A replay study of a vehicle's keyless-entry signal using a HackRF One.

01 · The problem

Fixed-code keyless entry is vulnerable to replay. Demonstrated the flaw in a controlled testing environment.

02 · Approach

  1. 1

    Identified the fob frequency (433.91 MHz) via RTL-SDR.

  2. 2

    Captured codes in DragonOS with Universal Radio Hacker.

  3. 3

    Amplified and re-transmitted with a HackRF One transceiver.

03 · Outcome

Reproduced lock/unlock via captured signals — a clear demonstration of fixed-code RKE weakness for defensive awareness.

Related work

Sub-GHz · RF Forensics

433 MHz Doorbell RF Replay

Low-Cost RF · Controlled Test

Car Keyless Entry Replay (Raspberry Pi)

Spectrum · RF Forensics

FM RDS Broadcaster & RF Jammer

Next project433 MHz Doorbell RF Replay→