.-. .-. (: `--------------------' :) ) intel brief // #33 ( (: .--------------------. :) `-' `-'
- KrakenSDR V2 suite rewritten in C++ -- The 5-channel coherent RTL-SDR direction finder shed its Python layer entirely: real-time spectrum and audio demod now run concurrently with MUSIC DoA estimation, with a Mode selector carving up tuner usage. Coherent RTL phase calibration plus MUSIC on a Pi 5 is a bench-grade passive radar and foxhunt core that just got battery-portable [@krakenrf].
- Two-element CRPA anti-jam prototype on PlutoSDR -- osqzss shipped a CRPA null-steering rig on AD9363 + Zynq-7010: adaptive weights computed on the PS, combined in the PL, re-transmitted at GPS L1 into a COTS GNSS receiver. A clean open recipe for measuring how much nulling a cheap two-element array actually buys you against a jammer [@osqzss].
- Lima GNSS jamming + spoofing pushes drones into Peru -- Ukraine's Lima system combines wideband GNSS jamming with false position fixes so drones and guided weapons (Oreshnik included) resolve to coordinates in Peru. Russian kit still leans on GNSS despite Chayka/eLoran alternatives -- spoofing is now a first-line EW effect, not a curiosity [RNT Foundation].
- Turk Telekom holdover measurements: GNSS loss is a hard failure -- ITSF 2026 bench data shows base-station timing has no re-sync grace once GNSS drops: holdover runs out and sync degrades silently. Every cellular timing audit should start with 'what happens when the antenna is jammed' [RNT Foundation].
- High-sensitivity ADS-B receiver from EA4GPZ -- Daniel Estevez built a new open-source ADS-B receiver targeting weak-signal and message-collision scenarios where dump1090-class decoders fall over. Worth benching against your existing 1090 MHz stack for fringe aircraft and overlapping DF17 frames [@destevez].
- PortaPack Mayhem hardens TX/RX clocking and SD writes -- PRALINE TX/RX clock sync now extends to the HackRF Pro's internal 25 MHz TCXO, stale audio spectrum during modulation changes is fixed, and SD corruption was killed by switching to single-beat SDIO IDMAC transfers. Cleaner frequency accuracy for anyone doing on-device TX work [@portapack-mayhem].
- hcxtools PMK counter honesty pass -- hcxtools now adds a confirmed-PMK counter and stops counting zeroed PMKs as corrected in WPA handshake dumps. Small fix, but it matters when you're triaging which EAPOL captures are actually crackable versus noise [@ZerBea].
- ESP32-C5 dual-band wardriver promotes 6 GHz to main -- Pager 6 GHz support merged to main with Wardacted log sanitization documented -- 2.4/5/6 GHz capture with hashed MACs in exported logs. Sub-$20 tri-band wardriving hardware is now a mainline build, not a branch experiment [@justcallmekoko].
.-. .-. (: `----------------------' :) ) possibilities // #33 ( (: .----------------------. :) `-' `-'
- Bench the Pluto CRPA against a real jammer -- Feed the two-element array a CW and a chirp jammer at GPS L1 (1575.42 MHz) from a HackRF, sweep jammer power and angle of arrival, and log C/N0 degradation on the COTS receiver with and without PS-computed weights. You'll get a real null-depth-versus-jammer-angle curve for a two-element array, which is the number everyone hand-waves.
- Stress-test KrakenSDR C++ MUSIC under motion -- Strap the 5-channel coherent array to a car and compare DoA estimates against GPS track at VHF/UHF; the Python version choked on concurrent load, so the C++ rewrite is your chance to measure calibration drift and array manifold error while moving. Foxhunt from a moving vehicle just became practical.
- Replay Lima-style spoofing against a COTS receiver in the lab -- Build a GPS L1 spoofer with a HackRF or PlutoSDR (lab bench, attenuators, shielded GPS antenna only), generate a false position fix walking the receiver's coordinates far off truth, and measure how long a u-blox/phone-class receiver takes to lock the fake. Then test whether receiver autonomous integrity monitoring flags it at all.
- Diff EA4GPZ's ADS-B decoder against dump1090 on overlapping frames -- Feed both decoders the same IQ capture at 1090 MHz with deliberately dense traffic (two overlapping DF17 messages, low C/N0), and chart message recovery rate. If the collision handling is real, this becomes your fringe-coverage receiver for passive radar correlation too.
- Fuzz Mayhem's PRALINE clock sync across TCXO drift -- After the 25 MHz TCXO sync extension, measure TX frequency error across temperature swings on H1/H4M and compare against pre-PRALINE builds. Anyone doing replay or signal-generation work from the PortaPack wants to know actual ppm drift before trusting the displayed frequency.
- Hunt 6 GHz APs with the ESP32-C5 wardriver + WiGLE ingest -- Flash the mainline build, sweep a downtown core for 6 GHz WPA3-only APs, and push sanitized logs to WiGLE. 6 GHz wardrive datasets are still thin, so anything you capture is new ground truth on 802.11ax deployment density.
- Grep mt76 for monitor-mode regressions on MT7925 -- Pull the out-of-tree tree, build against a recent kernel, and run the standard aircrack injection test suite on MT7925 and MT7928 -- the firmware skip-pick changes mean the blobs you get differ from what most how-to guides assume. Verify injection and channel-hopping behavior before trusting it in the field.
.-. .-. (: `---------------------' :) ) github brief // #33 ( (: .---------------------. :) `-' `-'
Quiet stretch on the vendor blogs, which left the git stream doing the talking. The pattern this window: DF and anti-jam hardware getting serious engineering passes (a full C++ rewrite of the KrakenSDR stack, a PlutoSDR CRPA nulling prototype), wardriving hardware moving 6 GHz to mainline, and the usual suspects -- hcxtools, rtl_433, Mayhem firmware -- shipping small but real fixes rather than feature churn. Nothing flashy, all bench meat.
- krakenrf/krakensdr_suite -- Full C++ rewrite dropping the Python layer: concurrent real-time spectrum, audio demod, and MUSIC DoA with a Mode selector for tuner allocation, claimed big speedups on Pi 4/5. If you run a coherent RTL array, this is the diff to pull and re-benchmark tonight.
- osqzss/pluto-crpa -- New repo: two-element CRPA anti-jam on PlutoSDR (AD9363 + Zynq-7010), weights combined in the PL, adaptive weights on the PS, re-transmitted at GPS L1 into a COTS receiver. Textbook open anti-jam harness, rare to see the full chain published.
- justcallmekoko/ESP32DualBandWardriver -- ESP32-C5 dual-band wardriver with 6 GHz support promoted to main and Wardacted log sanitization documented. Tri-band capture on hobby hardware with hashed MACs by default -- clean design choice.
- ZerBea/hcxtools -- Confirmed-PMK counter added, zeroed PMKs no longer counted as corrected, status output cleaned up for WPA handshake dumping. Small honesty fix that changes how you triage EAPOL captures.
- portapack-mayhem/mayhem-firmware -- PRALINE TX/RX clock sync extended to the HackRF Pro internal 25 MHz TCXO, stale audio spectrum fix, and SD write corruption killed via single-beat SDIO IDMAC transfers. Worth reflashing if you generate signals from the H4M.