This RF Jammer App for the Flipper Zero, made by RocketGod, is a powerful tool for jamming across multiple radio frequencies and modulation schemes. Below is an in-depth look at each mode, from its technical details to the real-world impact of its jamming strategy.
IMG_0317.mov
75053963551__B28B5535-0F15-40AC-8939-57464B195E90.mov
Modulation-Testing.mov
🧪 RF Jammer App and External CC1101/Antenna Flux Capacitor by Rabbit Labs (10dBm) [TinySA Ultra hard wired w/25W attenuator]
TinySA-Ultra_Ext-CC1101.mov
- To use an external CC1101, attach it to the GPIO before starting the app.
- Tested with Rabbit Labs - Flux Capacitor amplified external CC1101
The app supports multiple frequency bands, ensuring compliance with the ranges handled by the Flipper's sub-GHz radio:
- Band 1: 300 MHz – 348 MHz
- Band 2: 387 MHz – 464 MHz
- Band 3: 779 MHz – 928 MHz
You can adjust frequencies with precision:
- Left/Right arrows move between digits to adjust.
- Up/Down arrows increase or decrease the selected digit.
The app will automatically correct the frequency if it's outside the valid range for the selected band.
Each jamming mode is implemented as a distinct modulation scheme and data pattern. The app generates these patterns and transmits them over the RF link to disrupt legitimate signals in the selected frequency range.
- Pattern: A continuous stream of
0xFF(i.e., all bits set to1, equivalent to11111111). - Mechanism: In OOK (On-Off Keying), the presence or absence of a carrier wave represents binary data. In this case, the app transmits
11111111, meaning the carrier is always "on." - Impact: This mode overwhelms receivers that use OOK modulation by constantly transmitting a high state (fully "on"). Because the signal never drops, devices expecting to detect short pulses (like garage doors, remotes, etc.) will be swamped and unable to distinguish real data from the noise.
- Pattern: Alternates between
0xAA(10101010) and0x55(01010101), simulating binary0s and1s. - Mechanism: 2FSK modulates the frequency by shifting between two discrete frequencies. A low deviation of 2.38 kHz means that the frequency shifts only slightly between the two states, making this mode very precise.
- Impact: Narrowband receivers expecting binary frequency-shifted data will receive rapid shifts between frequencies, confusing their demodulators. This small frequency shift can effectively jam simple devices, such as low-data-rate remotes, by creating ambiguity in the frequency state they expect.
- Pattern: Alternates between
0xAAand0x55, just like the 2.38 kHz mode. - Mechanism: Similar to the 2FSK 2.38 kHz mode, but with a much higher deviation of 47.6 kHz. This makes the frequency shifts more pronounced, allowing the jammer to disrupt broader spectrum devices.
- Impact: The wider frequency deviation affects a larger bandwidth, making it effective against systems that use wider channels or higher data rates. This mode can cause severe interference across a broader frequency spectrum, jamming systems with a higher tolerance for noise or frequency shifts.
- Pattern: A stream of random data (each byte is randomly generated, not a static pattern like the previous modes).
- Mechanism: MSK is a highly efficient modulation technique where the frequency shifts are minimal, which makes it spectrally efficient (i.e., it occupies less bandwidth). The randomness of the data simulates high-speed communication, creating a noise-like signal.
- Impact: By simulating a noisy digital communication channel, this mode is highly effective against digital systems that rely on MSK or similar modulation schemes. The continuous flow of random data saturates the receiver, making it impossible for legitimate data to be detected, especially in high-speed links like telemetry systems.
- Pattern: Like the MSK mode, this also uses random data.
- Mechanism: GFSK is a variant of FSK where the frequency shifts are smoothed by a Gaussian filter. This reduces the bandwidth required for transmission, making it more efficient while still being robust against interference.
- Impact: GFSK is widely used in Bluetooth and low-power RF systems. This mode simulates an authentic transmission with continuous random data, making it ideal for disrupting low-power communications without requiring significant bandwidth. Devices expecting real GFSK signals will be overloaded with random frequency shifts, making proper communication impossible.
- Pattern: A continuous stream of
0xFF(equivalent to11111111). - Mechanism: This mode sends a constant, unmodulated signal of
1s. In the digital domain,0xFFmeans every bit is a1, resulting in a strong, uninterrupted carrier wave being transmitted. - Impact: The Bruteforce 0xFF mode creates the most aggressive form of jamming. By transmitting non-stop high bits, it forces constant noise across the frequency, which jams nearly any communication within the affected band. Most RF systems rely on alternating data bits (
1s and0s), so flooding the airwaves with pure1s causes receivers to lock up, unable to process real signals.
- Pattern: Generates a continuous sine wave signal across the frequency.
- Mechanism: Sine waves represent the most basic continuous wave (CW) modulation, commonly used in signal testing.
- Impact: Affects devices using analog modulation schemes, causing them to interpret the signal as a valid, albeit meaningless, transmission, effectively drowning out real signals.
- Pattern: Alternates between high (
0xFF) and low (0x00) states. - Mechanism: Square waves are simple digital pulses that are straightforward to generate and disruptive across various digital communication schemes.
- Impact: Mimics basic digital signals, likely interfering with devices expecting digital pulse sequences like on-off signaling, potentially causing dropouts or erratic behavior.
- Pattern: A gradually increasing signal followed by a sharp drop, repeated continuously.
- Mechanism: The sawtooth pattern is similar to frequency sweeps used in testing, creating a continuously shifting interference.
- Impact: Effective against frequency-sensitive systems by introducing an unpredictable, ramped noise, often disrupting RF links that lack sufficient error correction.
- Pattern: Randomized data across the signal spectrum.
- Mechanism: Emulates white noise, a common form of interference that introduces random amplitude values.
- Impact: White noise can disrupt any frequency-based device, particularly analog devices, making it a universal jamming signal for both digital and analog targets.
- Pattern: Oscillates linearly between high and low values in a symmetric pattern.
- Mechanism: The triangular waveform introduces a consistent frequency shift, resembling certain synthetic modulations.
- Impact: Affects devices relying on predictable frequency patterns, making it harder for them to differentiate between legitimate and jammed signals.
- Pattern: Frequency increases steadily within the waveform, known as a "chirp."
- Mechanism: Common in radar and sonar, chirp signals create a rising frequency pattern over time.
- Impact: Causes RF receivers to detect multiple frequencies simultaneously, often confusing or overloading their demodulators.
- Pattern: Random values with a Gaussian (bell-curve) distribution.
- Mechanism: Gaussian noise introduces random, statistically distributed values that mimic natural noise in RF environments.
- Impact: Particularly effective for jamming digital signals relying on Gaussian-based frequency modulation, as it closely resembles natural interference, making the jamming less detectable.
- Pattern: Periodic bursts of high (
0xFF) data with pauses in between. - Mechanism: Sends intense pulses followed by intervals, creating an effect similar to packetized data.
- Impact: Effective against burst-based communication systems by mimicking valid data bursts, which can confuse or overload the receiver's data handling.
- Up/Down Buttons: Modify the currently selected digit in the frequency.
- Left/Right Buttons: Move between digits to adjust frequency values.
- OK Button: Switch jamming modes in real-time.
- Back Button: Stop the jamming and exit the app.
Disclaimer: This app is intended for educational and research purposes by experienced RF users. Ensure compliance with local regulations before using this tool.
