SubGHz Replay Attack

Sub-GHz: Replay Attack

Menu path: SubGHz → Replay Attack

What it does

Uses the CC1101 transceiver with RCSwitch-style decoding to capture simple remote signals (many OOK/ASK fobs) and replay them. Profiles can be saved to SD under /captures when the build supports it.

Prerequisites

• CC1101 wired per shared.h (CC1101_SCK, CC1101_MISO, CC1101_MOSI, CC1101_CS, SUBGHZ_RX_PIN, SUBGHZ_TX_PIN, GDO mapping).
• Antenna matched to your target band.

How to use

1. Open SubGHz → Replay Attack.
2. Set frequency / modulation if the UI exposes them (default e.g. SUBGHZ_DEFAULT_FREQ in shared.h).
3. Record a burst from a remote you own.
4. Replay once to verify on the same receiver.
5. Exit cleanly; unmount SD only when idle.

---

← Sub-GHz tools · Home