Skip to content

Home

Jump to bottom
null edited this page Jun 17, 2026 · 3 revisions

License: MIT Platform: ESP32 Radio: CC1101

Sub‑1 GHz Swiss Army knife – Sniff, record, replay, and brute‑force signals with an ESP32 and a CC1101 transceiver.

📡 Overview

VoidRecon is a compact, feature‑packed RF tool built around the Texas Instruments CC1101 low‑power sub‑1 GHz transceiver and an ESP32 microcontroller. It provides a powerful command‑line interface (CLI) to configure the radio, capture and replay packets, analyse spectrum activity, and even brute‑force fixed‑code remote controls.

Whether you’re reverse‑engineering wireless protocols, testing IoT devices, or experimenting with RF, VoidRecon offers a flexible and affordable platform for all your sub‑1 GHz needs.

✨ Key Features

  • Wide frequency coverage – 300‑348 MHz, 387‑464 MHz, and 779‑928 MHz
  • Multiple modulations – 2‑FSK, GFSK, ASK/OOK, 4‑FSK, MSK
  • Adjustable data rate – from 0.02 to 1621.83 kBaud
  • Programmable output power – from ‑30 dBm up to +12 dBm
  • Packet engine – fixed, variable, and infinite packet lengths with CRC, whitening, Manchester, FEC
  • Real‑time sniffer – view incoming packets on the serial terminal
  • Signal analysis – RSSI/LQI readout and frequency scanning (analyze)
  • Recording & playback – capture and replay raw or decoded frames
  • Non‑volatile storage – save/load buffers to/from flash
  • Jamming – continuous‑wave or modulated jamming on selected bands
  • Brute‑force – automate fixed‑code garage/gate code discovery
  • Chat mode – direct device‑to‑device communication

🚀 Quick Start

  1. Hardware: Wire the CC1101 to your ESP32 (see Hardware).
  2. Firmware: Flash the pre‑compiled voidrecon.bin (see Firmware Setup) or build from source.
  3. Connect via serial – use the Python CLI tool (voidrecon-cli.py) or a terminal at 115200 baud.
  4. Start sniffing: setmhz 433.92 → rx.

📚 Documentation

Page Description
Hardware PCB assembly and DIY breadboard wiring
Firmware Setup Flashing the binary, Python CLI, and serial connection
Command Reference All CLI commands (configuration, packet, sniffing, replay)
Usage Examples Step‑by‑step practical tutorials
Recording & Replay Workflow Packet vs. raw modes, buffer management, save/load
Brute‑Force & Jamming Detailed explanation of brute‑force and jamming (with legal warnings)
Troubleshooting & Notes Common issues, solutions, and important legal notes

📜 License

This project is licensed under the MIT License – see the LICENSE file for details.

Clone this wiki locally