Skip to content

Usage Examples

Jump to bottom
null edited this page Jun 17, 2026 · 1 revision

This page provides practical, hands‑on examples for the most common VoidRecon operations. All commands assume you are connected via the Python CLI (voidrecon-cli.py) or a serial terminal at 115200 baud.

📋 Table of Contents

Example 1: Set up a 433.92 MHz OOK Receiver

This configures the CC1101 for ASK/OOK modulation at 433.92 MHz and starts the sniffer.

setmodulation 2
setmhz 433.92
setdrate 1.2
setdeviation 10.0
setrxbw 100.0
rx
  • Now every received OOK packet will be printed in hex on the terminal.
  • Press x to stop sniffing.

Example 2: Transmit a Custom Packet

Send a 6‑byte payload over the air with the current settings.

tx AABBCCDDEEFF

This transmits the bytes AA BB CC DD EE FF. You can use up to 60 bytes (hex values separated by spaces or without).

Example 3: Sniff Raw Samples at 100 µs Intervals

Use raw sampling to capture the on‑off state of the carrier at 100 µs resolution.

rxraw 100
  • The device will sample the RSSI at the given interval and print 1 or 0 (or raw hex) to the terminal.
  • Press x to stop.

Example 4: Record and Replay a Captured Signal

Record a complete packet payload and replay it later.

rec            # start recording
# ... now transmit the target signal (press the remote, etc.)
rec            # stop recording
show           # list all recorded frames (each has an index)
play 0         # replay all frames (0 = all)

If you only want to replay a specific frame (say frame #2):

play 2

Example 5: Save and Load a Recorded Sequence

Persist the recorded payload buffer to flash so it survives a power cycle.

save           # store current buffer to flash
flush          # clear buffer (optional, to test)
load           # reload from flash
play 0         # replay restored frames

Note: The save and load commands work for the packet buffer. For raw samples, use saveraw and loadraw.

Example 6: Brute‑Force a 24‑bit Remote

If you have a fixed‑code remote with a 24‑bit code and a symbol time of 200 µs, you can attempt an exhaustive search:

brute 200 24
  • The device will transmit every possible combination until the correct one is found.
  • ⚠️ Warning: 2²⁴ = 16.7 million attempts – this can take many hours. Only use on devices you own or have explicit permission to test.

Example 7: Jamming a Frequency

To broadcast a continuous carrier on the currently selected frequency and modulation:

setmhz 433.92
jam
  • The device will start transmitting non‑stop.
  • Press x to stop jamming.

Legal notice: Jamming is illegal in most countries. Use only in a shielded, controlled environment where you have the right to transmit.

💡 Troubleshooting Tips

Symptom Likely Fix
No packets appear in rx Double‑check setmhz, setmodulation, and setdrate. Use analyze to find active frequencies.
tx seems to do nothing Increase setpa power level; ensure you have an antenna connected.
play doesn't replay The buffer may be empty. Run show to verify frames exist.
save/load fail Flash may be full or no data saved. Use save immediately after recording.

Clone this wiki locally