Hacking Restaurant Pagers with HackRF

This Video Content has been made available for informational and educational purposes only. The publisher does not make any representation or warranties with respect to the accuracy, applicability, fitness, or completeness of the Video Content. The video publisher hereby disclaims any and all liability to any party for any direct, indirect, implied, punitive, special, incidental or other consequential damages arising directly or indirectly from any use of the Video Content, which is provided as is, and without warranties.
This video shows how to use your HackRF software defined radio to trigger restaurant pagers. The pagers shown in this video are manufactured by Long Range Systems. The operating frequency is 467.750 Mhz. A software tool called GNU Radio is connected to HackRF to generate the data packet. I provided the GNU radio file and some raw binary pager files on Github for you to experiment with.
Please note: This video is not demonstrating a security hole. HackRF is simply generating the same wireless data packet as the base station would in order to trigger the pagers.
Helpful information links:
Download the Python program for generating manchester encoded data packets. Binary pager files, including the GNU radio file. github.com/ton...
Software with HackRF Support - hackrf_transfer
github.com/mos...
Universal Radio Hacker:
github.com/jop...
Inspectrum:
github.com/mie...
Pager Information:
paging-systems...
Get your HackRF here:
shop.hak5.org/...
GNU Radio
www.gnuradio.org

[@3nigma.3nc]

Imagine the chaos....

[@nad6234]

oh this is just wonderful ! Thank you for sharing :-)

[@dbkgravity]

I can already see everyone jumping up at the same time in the restaurant.
:))
I think these things are a bad habit anyway.
You can't tip for self-service.

[@jameshilferty5403]

I've always wondered about this!!! The range from the HackRF isn't great, right? A couple feet at the most?

[@fedefernandez127]

Hi, Tony, great video! I have a question about this: how do you program on GNU Radio the duration of each bit to be transmited, and also, how you set f1 and f2 for FSK? I didn't see that on the video. Thanks.

[@thatoneintrovert9618]

I have a HackRF with a Portapack H2 and Mayhem. Is there any way I can do it with this?

[@user-xx3ey2mp1e]

What makes and models is the compatible with? Or is this limited to LRS devices? Thank you!

[@jasonspo]

How are you powering the pagers? Are you connecting to the charging pins or internally? Voltage? Thx.

[@NotPike]

Nice!

[@brandoncurnutte8235]

Chaos at Applebee's!

[@rickb06]

Bawaahahahahahaha

[@karter61]

Is there a way to work out what restaurant number the pager is set to?

[@mattmurdock8446]

That's awesome!

[@shambahri]

Thank you for sharing. What a awesome reverse engineering. :)

[@karter61]

Do you mind sharing your GRC file?

[@chrisrock9937]

Awesome!! Is it possible to share your source code?

[@-_______________________.___]

Whats the native range for something like this?

[@nomadic_rider42]

Great hack, thanks.

[@trestuges]

I just have to work how to turn this into free burgers...

[@barbaracarver5565]

Please start the dryer drying again when you come in againwill you

[@catalinalb1722]

Brilliant, can you share the grc file and the python script ? thank you

[@MrFoxtroop11]

Did you ever get around to posting the grc file? Can’t find it on your git page. Thanks.

[@skyking6989]

Omg this is giving me horrible ideas..😈

[@cupcakecupcake5360]

Use hack is it for radio attack