htotoo / nrf24channelscanner

Scan all the NFR24 channels, and see where is any data

Flipperzero -NRF24 channel scanner

Author: htotoo

What is it?

This app will scan all the NRF24's frequencies, and shows where it found any traffic. The more traffic, the higher the bars. After the scanning finished, you can hit left or right keys, to find what frequency is in use.

How to use

• Connect NRF24 to flipper using provided pinouts
• Open NRF24 Channel scanner, and hit OK
• Done

Screenshot

Buttons

OK short: start / stop the scan.

OK long: start an infinite scan, that scans until stopped.

BACK long: exit the app.

LEFT / RIGHT: when not scanning select the channel to see it's frequency. Short press steps 1, long 10.

UP / DOWN: change the time spent in a channel. Suggested: 150 us, but you can play around.

Warning

These apps are for educational purposes only. Please use this code responsibly and only use these apps on your own equipment.

Compared to HackRf

Thanks for the image: Sil333033

Pinout from from NoComp/Frog

Mousejacker / NRF24 pinout by UberGuidoZ

2/A7 on FZ goes to MOSI/6 on nrf24l01
3/A6 on FZ goes to MISO/7 on nrf24l01
4/A4 on FZ goes to CSN/4 on nrf24l01
5/B3 on FZ goes to SCK/5 on nrf24l01
6/B2 on FZ goes to CE/3 on nrf24l01
8/GND on FZ goes to GND/1 on nrf24l01
9/3V3 on FZ goes to VCC/2 on nrf24l01
IRQ/8 is left disconnected on nrf24l01

If the nRF module is acting a bit flakey, try adding a capacitor to the vcc/gnd lines! I've not tried the Plus model so it may have a bigger need for a cap. Otherwise, I haven't had any major issues. Anything from a 3.3 uF to 10 uF should do. (Watch your positive/negative placement! Negative to ground.) I learned if you wanna get fancy, include a 0.1 uF cap in parallel. The 3.3 uF to 10 uF will respond to slow freq changes while the 0.1 uF will respond to the high freq switching spikes that the larger one cannot. That said, a single 10 uF will likely suffice for the Mousejack attack. ¯\_(ツ)_/¯

Disclaimer

Used images and some text from this repo: https://raw.githubusercontent.com/RogueMaster/flipperzero-firmware-wPlugins/420/documentation/NRF24.md Used some code from this repo: https://github.com/Flipper-XFW/Xtreme-Firmware Thanks for them for their work!