Initializing 
› booting orchestrator kernel …
M · AhsanAgentic AI Engineer
M·AHSAN, home
← All projects
RF SecuritySub-GHz · RF Forensics

433 MHz Doorbell RF Replay

Intercepted and replayed sub-GHz doorbell transmissions programmatically.

01 · The problem

Fixed-code RF transmitters can be trivially replayed — demonstrated on a doorbell.

02 · Approach

  1. 1

    Scanned 433.91 MHz with RTL-SDR / Airspy and Gqrx.

  2. 2

    Saved raw IQ data of the transmission.

  3. 3

    Replayed via a Raspberry Pi transmitter (rpitx / sendiq).

03 · Outcome

Triggered the doorbell on demand, illustrating the security flaws of fixed-code RF.

Related work

RF Security Research · Controlled Test

Car Keyless Entry Replay (HackRF)

Low-Cost RF · Controlled Test

Car Keyless Entry Replay (Raspberry Pi)

Spectrum · RF Forensics

FM RDS Broadcaster & RF Jammer

Next projectCar Keyless Entry Replay (Raspberry Pi)→