joelsernamoreno / evilcrowrf-v2

EvilCrowRF-V2

Idea, development and implementation: Joel Serna (@JoelSernaMoreno).

Main collaborator: Little Satan (https://github.com/LSatan/)

Other collaborators: Jordi Castelló (@iordic), Eduardo Blázquez (@_eblazquez), Federico Maggi (@phretor), Andrea Guglielmini (@Guglio95) and RFQuack (@rfquack).

PCB design: Ignacio Díaz Álvarez (@Nacon_96), Forensic Security (@ForensicSec) and April Brother (@aprbrother).

Manufacturer and distributor: April Brother (@aprbrother).

Distributor from United Kingdom: KSEC Worldwide (@KSEC_KC).

The developers and collaborators of this project do not earn money with this. You can invite me for a coffee to further develop Low-Cost hacking devices. If you don't invite me for a coffee, nothing happens, I will continue developing devices.

For sale with April Brother (shipping from China):

• Evil Crow RF V2 Aliexpress: https://aliexpress.com/item/1005004032930927.html
• Evil Crow RF V2 Lite (without NRF2401L) Aliexpress: https://aliexpress.com/item/1005004032930927.html
• Evil Crow RF V2 Alibaba: https://www.alibaba.com/product-detail/Evil-Crow-RF2-signal-receiver-with_1600467911757.html

For sale with KSEC Worldwide (shipping from United Kingdom):

• Evil Crow RF V2: https://labs.ksec.co.uk/product/evil-crow-rf-v2/
• Evil Crow RF V2 Lite: https://labs.ksec.co.uk/product/evil-crow-rf2-lite/

Discord Group: https://discord.gg/evilcrowrf

Summary:

1. Disclaimer
2. Introduction
3. Firmware
   • Installation
   • First steps with Evil Crow RF V2
   • RX Config Example
   • RX Log Example
   • RAW TX Config Example
   • Binary TX Config Example
   • Pushbuttons Configuration
   • Tesla Charge Door Opener
   • URH Parse example
   • OTA Update
   • Wi-Fi Config
   • Power management
   • Other Sketches
4. Evil Crow RF V2 Support

Disclaimer

Evil Crow RF V2 is a basic device for professionals and cybersecurity enthusiasts.

We are not responsible for the incorrect use of Evil Crow RF V2.

We recommend using this device for testing, learning and fun :D

Be careful with this device and the transmission of signals. Make sure to follow the laws that apply to your country.

Introduction

Evil Crow RF V2 is a radiofrequency hacking device for pentest and Red Team operations, this device operates in the following radiofrequency bands:

• 300Mhz-348Mhz
• 387Mhz-464Mhz
• 779Mhz-928Mhz
• 2.4GHz

Evil Crow RF V2 has two CC1101 radiofrequency modules, these modules can be configured to transmit or receive on different frequencies at the same time. Additionally, Evil Crow RF V2 has a NRF24L01 module for other attacks.

Evil Crow RF V2 allows the following attacks:

• Signal receiver
• Signal transmitter
• Replay attack
• URH parse
• Mousejacking
• ...

NOTE:

• All devices have been flashed with basic firmware Evil Crow RF V2 before shipping.
• Please do not ask me to implement new functions in this code. You can develop code for Evil Crow RF V2 and send PR with your new code.

Firmware

The basic firmware allows to receive and transmit signals. You can configure the two radio modules through a web panel via WiFi.

Installation

1. Install esptool: sudo apt install esptool
2. Install pyserial: sudo pip install pyserial
3. Download and Install the Arduino IDE: https://www.arduino.cc/en/main/software
4. Download Evil Crow RF V2 repository: git clone https://github.com/joelsernamoreno/EvilCrowRF-V2.git
5. Download the ESPAsyncWebServer library in the Arduino library directory: git clone https://github.com/me-no-dev/ESPAsyncWebServer.git
6. Download the AsyncElegantOTA library in the Arduino library directory: git clone https://github.com/ayushsharma82/AsyncElegantOTA.git
7. Download the ESP32-targz library in the Arduino library directory: git clone https://github.com/tobozo/ESP32-targz.git
8. Download the AsyncTCP library in the Arduino library directory: git clone https://github.com/me-no-dev/AsyncTCP.git
9. Edit AsyncTCP/src/AsyncTCP.h and change the following:

• #define CONFIG_ASYNC_TCP_USE_WDT 1 to #define CONFIG_ASYNC_TCP_USE_WDT 0

10. Open Arduino IDE
11. Go to File - Preferences. Locate the field "Additional Board Manager URLs:" Add "https://dl.espressif.com/dl/package_esp32_index.json" without quotes. Click "Ok"
12. Select Tools - Board - Boards Manager. Search for "esp32". Install "esp32 by Espressif system version 1.0.6". Click "Close".
13. Open the EvilCrowRF-V2/firmware/v1.3.2/EvilCrow-RFv2/EvilCrow-RFv2.ino sketch
14. Select Tools:
    • Board - "ESP32 Dev Module".
    • Flash Size - "4MB (32Mb)".
    • CPU Frequency - "80MHz (WiFi/BT)".
    • Flash Frequency - "40MHz"
    • Flash Mode - "DIO"
15. Upload the code to the Evil Crow RF V2 device
16. Copy the EvilCrowRF-V2/firmware/v1.3.2/SD/HTML folder to a MicroSD card.
17. Copy the EvilCrowRF-V2/firmware/v1.3.2/SD/URH folder to a MicroSD card.

Notes about SD:

• Web server will not load, is a blank page or displays nothing:

Check you have copied the relevant files to the SD card and the SD card is inserted in the Evil Crow RF V2 device. Check you are connected to the Wifi Access Point of the Evil Crow RF V2.

• My files are on the SD card but the web server will not work:

Check your SD card size. It is recommended to use a small card. 32GB or smaller is sufficent for operation. Cards larger than this have been shown to cause issues and not work.

• I cannot access the internet when I am connected to the Evil Crow RF V2:

By default, the Evil Crow operates as an access point. When you connect to it, it has no internet access as it is not connected to the internet. If you need internet at the same time, read the Wi-Fi Config section of this repository to configure Evil Crow RF V2 in STATION mode.

First steps with Evil Crow RF V2

0. Check & verify you have copied the relevant files to your SD card.
1. Insert the MicroSD card into the Evil Crow RF V2 and connect the device to an external battery or laptop.
2. Visualize the wifi networks around you and connect to the Evil Crow RF V2 (default SSID: Evil Crow RF v2).
3. Enter the password for the wifi network (default password: 123456789).
4. Open a browser and access the web panel (default IP: 192.168.4.1).
5. Go!

RX Config Example

• Module: (1 for first CC1101 module, 2 for second CC1101 module)
• Modulation: (example ASK/OOK)
• Frequency: (example 433.92)
• RxBW bandwidth: (example 58)
• Deviation: (example 0)
• Data rate: (example 5)

2-FSK NOTES:

• Evil Crow RF V2 allows 2-FSK (RX/TX) modulation, this is configured for use with CC1101 module 2. Do not use CC1101 module 1 for 2-FSK RX.

• You can use 2-FSK TX with module 1 or with module 2.

• Evil Crow RF V2 allows you to receive signals at the same time on two different frequencies, but this does not work correctly if you use 2-FSK. Make sure you use module 2 for 2-FSK RX, while doing this do not use module 1 for anything or you will not receive the 2-FSK signals correctly.

• You can receive two signals on different frequencies with ASK/OOK.

RX Log Example

RAW TX Config Example

• Module: (1 for first CC1101 module, 2 for second CC1101 module)
• Modulation: (example ASK/OOK)
• Transmissions: (number transmissions)
• Frequency: (example 433.92)
• RAW Data: (raw data or raw data corrected displayed in RX Log)
• Deviation: (example 0)

Binary TX Config Example

• Module: (1 for first CC1101 module, 2 for second CC1101 module)
• Modulation: (example ASK/OOK)
• Transmissions: (number transmissions)
• Frequency: (example 433.92)
• Binary Data: (binary data displayed in RX Log)
• Sample Pulse: (samples/symbol displayed in RX Log)
• Deviation: (example 0)

Pushbuttons Configuration

• Button: (1 for first pushbutton, 2 for second pushbutton)
• Modulation: (example ASK/OOK)
• Transmissions: (number transmissions)
• Frequency: (example 433.92)
• RAW Data: (raw data or raw data corrected displayed in RX Log)
• Deviation: (example 0)

Tesla Charge Door Opener

Demo: https://www.youtube.com/watch?v=feNokjfEGgs

URH Parse example

Demo: https://youtube.com/watch?v=TAgtaAnLL6U

OTA Update

Demo: https://www.youtube.com/watch?v=YQFNLyHu42A

WiFi Config

Evil Crow RF V2 is configured in AP mode with a default SSID and password. You can change the mode to STATION or AP, change SSID, change password and change Wi-Fi channel remotely from the web panel.

The changes will be stored in the device, every time you restart Evil Crow RF V2 the new Wi-Fi settings will be applied. If you want to return to the default settings, you can delete the stored Wi-Fi configuration from the web panel.

NOTE: When changing the Wi-Fi configuration you have to fill in all the fields correctly, if you do not do this you bricked the device.

Power Management

1. In normal mode, press push2 + reset, then release reset: Evil Crow RF v2 blinks several times and goes to sleep.
2. In sleep mode, press push2 + reset, then release reset to wake him up.

Demo: https://www.youtube.com/shorts/K_Qkss6-pEY

NOTE: If Evil Crow RF v2 is sleeping and you accidentally press reset, he'll go straight back to sleep. If he isn't asleep and you press reset then he will stay awake too.

Other Sketches

• Mousejacking: EvilCrowRF-V2/firmware/other/standalone-mousejacking
• ...

Evil Crow RF V2 Support

• You can ask in the Discord group: https://discord.gg/jECPUtdrnW
• You can open issue or send me a message via twitter (@JoelSernaMoreno).

evilcrowrf-v2's Issues

RFcat

I want to use this with tools that the YS1 can use. Is it possible for use with RFcat python?

Evcv2

joelsernamoreno/EvilCrow-RF@e834995

Defaults for rxconfig

It is quite uncomfortable to have to input all the data every time (especially by phone). I suggest putting some defaults in the HTML.
As an example:

    <select name="mod" form="config" id="styledSelect1">
       <option value="0">2-FSK</option> 
       <option value="2" selected="selected">ASK/OOK</option>
    </select>
    </label>
    <hr>
     <p>Frequency: </p><textarea class="css-input-text" form="config" rows="1" cols="50" name="frequency">433.92</textarea>
    <hr>
    <p>RxBW: </p><textarea class="css-input-text" form="config" rows="1" cols="50" name="setrxbw">58</textarea>
    <hr>
    <p>Deviation: </p><textarea class="css-input-text" form="config" rows="1" cols="50" name="deviation">0</textarea>
    <hr>
    <p>Data Rate: </p><textarea class="css-input-text" form="config" rows="1" cols="50" name="datarate">5</textarea>

Feature Request: Spectrum Analyzer

It could probably be done once a screen is added. It would also be really cool expanding that functionality to the web interface. I'm pretty sure it can be done because I've seen some ESP based power sockets do real time power monitoring back to their mobile apps. There would probably be a slight delay but it would still be really useful.

Booting in Downloading Mode

Hi,
i'm actually stuck in a bootloop :

...

rst:0x10 (RTCWDT_RTC_RESET),boot:0x13 (SPI_FAST_FLASH_BOOT)
flash read err, 1000
main.c 342
ets Jan 2 2023 00:22:57

rst:0x10 (RTCWDT_RTC_RESET),boot:0x1b (SPI_FAST_FLASH_BOOT)
flash read err, 1000
main.c 342
ets Jan 2 2023 00:22:57

...

I've tried multiple flashing solutions from ESP but still can't get that downloading mode :

ESP Chip Auto-Detection failed: Failed to connect to Espressif device: Invalid head of packet (0x65)

Which pins do i have to short on the board to enter in this state ?

Thank you

Discord Link

Not so much of an issue but the disocrd link is now invalid.
Cheers.

Crashing

When i transmit ook more then once on ether modules web browser times out and esp32 reboots.
15:53:49.404 ->
15:53:49.404 -> 1101001010010100100100010010110100101001010010010001001011010010100101001001000100101101001010010
15:53:49.436 -> 800,400,400,800,400,400,400,800,400,400,400,800,400,800,400,1200,400,800,400,400,800,400,400,800,400,400,400,800,400,400,400,800,400,800,400,1200,400,800,400,400,800,400,400,800,400,400,400,800,400,400,400,800,400,800,400,1200,400,800,400,400,800,400,400,800,400,400,400,800,400,400,E (27616) task_wdt: Task watchdog got triggered. The following tasks did not reset the watchdog in time:
15:53:54.403 -> E (27616) task_wdt: - async_tcp (CPU 0)
15:53:54.434 -> E (27616) task_wdt: Tasks currently running:
15:53:54.434 -> E (27616) task_wdt: CPU 0: IDLE0
15:53:54.434 -> E (27616) task_wdt: CPU 1: loopTask
15:53:54.467 -> E (27616) task_wdt: Aborting.
15:53:54.467 -> abort() was called at PC 0x4014e8f8 on core 0
15:53:54.467 ->
15:53:54.467 -> ELF file SHA256: 0000000000000000
15:53:54.467 ->
15:53:54.467 -> Backtrace: 0x40088e94:0x3ffbf8e0 0x40089111:0x3ffbf900 0x4014e8f8:0x3ffbf920 0x40087609:0x3ffbf940 0x40162c73:0x3ffbc2f0 0x4015075f:0x3ffbc310 0x4008b8d1:0x3ffbc330 0x4008a122:0x3ffbc350
15:53:54.531 ->
15:53:54.531 -> Rebooting...
15:53:54.531 -> �e��qi}5�H���q�⊌q5�;2Kq1��S���}����(��9�����i�bq�81yC溅9�cCs�pر8q����9��cCv``8��S����k�

On the latest FW.

"Unexpected error: ESP is not in flash boot mode. If your board has a flashing pin, try again while keeping it pressed."

I purchased one of these through aliexpress, when I arrived I prepared the SD card with the files and when I plugged it in I saw that it was already configured with the EvilCrow_v2 wifi network
However, when accessing 192.168.4.1, the page loads infinitely.
So I thought about updating the Firmware, but when updating the Firmware I receive the following errors:

Error 1:
"Unexpected error: ESP is not in flash boot mode. If your board has a flashing pin, try again while keeping it pressed."

When I press the EN button:
Error 2:
Using 'COM3' as serial port.
Connecting......................................
Unexpected error: ESP Chip Auto-Detection failed: Failed to connect to Espressif device: No serial data received.
For troubleshooting steps visit: https://github.com/espressif/esptool#troubleshooting

When I press the EN button several times
Error 3:
Using 'COM3' as serial port.
Unexpected error: could not open port 'COM3': PermissionError(13, 'Acesso negado.', None, 5)

esphome-flasher on Windows 11, as administrator.

I also tested an esp boot via browser, but it didn't work either.

I've done several tests, I've put it on different USBs, 2.0, 3.0, with cable, without cable, I've tested with microSD, without microSD and several continuously without being able to update the firmware.
Can someone help me?

Discord (again)

Hey, I'm new to hardware hacking in general and I'm trying to learn more about it. I've bought the Evil Crow RF v2, and I want to buy an RTL-SDR! Unfortunately, the Discord link is not working :( and I was hoping to use it as a community to learn more about the possibilities of using the Evil Crow.

WARNING: Failed to communicate with the flash chip, read/write operations will fail. Try checking the chip connections or removing any other hardware connected to IOs.

Hello!
I purchased an evil crow rf v2 on aliexpress after arriving I tried to flash it with firmware but error appeared. In arduino ide error:

Sketch uses 940046 bytes (71%) of program storage space. Maximum is 1310720 bytes.
Global variables use 90720 bytes (27%) of dynamic memory, leaving 236960 bytes for local variables. Maximum is 327680 bytes.
esptool.py v3.0-dev
Serial port /dev/ttyUSB0
Connecting........_____....._____....._____....._
Chip is ESP32-PICO-D4 (revision 1)
Features: WiFi, BT, Dual Core, 240MHz, Embedded Flash, VRef calibration in efuse, Coding Scheme None
Crystal is 40MHz
MAC: d4:d4:da:97:8d:f8
Uploading stub...
Running stub...
Stub running...
Changing baud rate to 921600
Changed.
Configuring flash size...
Warning: Could not auto-detect Flash size (FlashID=0x0, SizeID=0x0), defaulting to 4MB
Compressed 8192 bytes to 47...
Writing at 0x0000e000... (100 %)
Wrote 8192 bytes (47 compressed) at 0x0000e000 in 0.0 seconds (effective 19910.0 kbit/s)...

After that, I tried to erase flash with esptool

esptool.py --chip esp32 --port /dev/ttyUSB0 erase_flash

esptool.py v4.7.0
Serial port /dev/ttyUSB0
Connecting....
Chip is ESP32-PICO-D4 (revision v1.0)
Features: WiFi, BT, Dual Core, 240MHz, Embedded Flash, VRef calibration in efuse, Coding Scheme None
Crystal is 40MHz
MAC: d4:d4:da:97:8d:f8
Uploading stub...
Running stub...
Stub running...
WARNING: Failed to communicate with the flash chip, read/write operations will fail. Try checking the chip connections or removing any other hardware connected to IOs.
Erasing flash (this may take a while)...

A fatal error occurred: Packet content transfer stopped (received 3016 bytes)

And got info about flash

esptool.py --chip esp32 --port /dev/ttyUSB0 flash_id

esptool.py v4.7.0
Serial port /dev/ttyUSB0
Connecting....
Chip is ESP32-PICO-D4 (revision v1.0)
Features: WiFi, BT, Dual Core, 240MHz, Embedded Flash, VRef calibration in efuse, Coding Scheme None
Crystal is 40MHz
MAC: d4:d4:da:97:8d:f8
Uploading stub...
Running stub...
Stub running...
WARNING: Failed to communicate with the flash chip, read/write operations will fail. Try checking the chip connections or removing any other hardware connected to IOs.
Manufacturer: 00
Device: 0000
Detected flash size: Unknown
Hard resetting via RTS pin...

radio is off frequency by 50khz

More of a hardware issue maybe?

Not sure, I can only find the circuit for the first version.
The cc1101 modules seem to be off frequency by 50khz
Offset looks to be the same for both modules.

Any suggestions?

EN Button

Does the EN button do anything besides putting the device in sleep mode?

Evil crow web page not loading on 192.168.4.1

I am unable to load Web page of Evil crow. I can ping to the ip.
I can see Evil Crow SSID, I can connect to it.
I have copied files to SD card.
SD card is 32Gb and formatted using FAT32
I tried changeing SD card module and also confirmed SD card is working fine.
Below are connections to SD Card.
ESP32 SD Card.

Pin 22 CS
Pin 23 MOSI
Pin 18 SCK
Pin 19 MISO

My esp is "DOIT ESP32 DEVKIT V1"
I am not getting any error during compilation.
What could be the reason. ???

Hi Dear,

im really happy to see you are planning a V2 of your great RF Tool. I searched for hours to find a seller who selling the first one and got found one with only 3 items in stock and im in doubt it make sense to buy the old one. So my question is, can you tell me approximately when you planned to sell the V2 and where, also on Tindie? Wanna set my order in the first place to get one, not like the V1 lol. Greetz

https://github.com/joelsernamoreno/EvilCrowRF-V2.git

Discord

I just tried the above link and it indicated it is invalid.
Thanks

targzfs not declared in this scope ?

Arduino IDE 1.8. All libraries installed (I believe so anyway). I'm attempting to compile and getting the following error:

tarGzFS.begin();
^
exit status 1
'tarGzFS' was not declared in this scope

Any ideas anyone?

BTW Thank you so much to the developer of this Evil Crow V2 project. I just purchased the hardware, it looks like a ton of work has gone into all this! Very excited to try it out. Thank you for any input I can get, in advance.

Discord

Hello!

Is it possible to get the discord link? :)

evc2

Problem reading SD Card

Hi all! I bought a Evil Crow to start learning hardware hacking, but got stuck in the last step of the tutorial
The board's webserver simply doesn't go up. Searching for issues I find out that the SD card was not detected.

I tried the following code:

#include <SD.h>
void setup() {
Serial.begin(38400);
for (int csPin = 5; csPin <= 32; csPin++) {
if (SD.begin(csPin)) {
Serial.print("SD card detected on CS pin: ");
Serial.println(csPin);
} else {
Serial.print("No SD card found on CS pin: ");
Serial.println(csPin);
}
}
}
void loop() {}

But never got success reading the SD card.

I tried:

• Formating the SD card in FAT32 and FAT16
• Changing SD card
• Creating a file in the SD card using my PC and tried read it in the uploaded firmware

If I dont solve this issue till tomorrow I'm considering to return the board and ask for refund.

Is it a board's problem or software? Any thoughts or tips on how to solve this?

Please add RFQuack config

There is no schematic so it is not easy to guess pins. Please add build.env for rfquack.

Hi Joel

Tried to make this one using ESP32 : RAW 2.2 New Interface but can get the RF corrected code ? do you have pin connection CC1101 to ESP32? your help is much appreciated.

Wisnu - Indonesia

Sketch error

When I try to load the sketch on the device arduino ide give me back stray errors. I follow the guide but I can't go further.
Thanks in advance

nrf24 pins

Hi i was looking to solder the screen on ecrf v2 but it seems like pins of nrf24 are not what it is by default so could you send me esp32/nrf24 pins

Hi!

what versions should be used for?
ESPAsyncWebServer
AsyncElegantOTA
ESP32-targz
AsyncTCP library

schematic / board layout?

Hi Joel

I got a new battery for my ecrfv2 and stupidly assumed the colours on the lead were correct

Now the magic smoke has come out of a couple of what I believe to be SOT transistors/diodes or similar. Is there a circuit diagram and board layout available so I can fix the problem? I googled around and found a schematic for the original board (at least part of it), but I'm no wiser.

Are these resources publicly available somewhere ?

Alternatively if you'd like to keep those details close, I've attached a couple of pics with the damaged parts indicated. If you could tell me the components, I could replace them (although a schematic may help diagnose any other issues arising...)

Cheers

Mike

Feature Request: Brute Force

I realize that the V2 dose not work with the original EvilCrowRF .ino I tried flashing the https://github.com/joelsernamoreno/EvilCrow-RF/blob/main/EvilCrowRF/EvilCrowRF.ino but web interface will not see anything as far as options. Nothing will work. I just want to know if there will be a brute force option for the V2 like the other one has?

Cannot upload

Stuck at step 15.

/home/daniel/Arduino/EvilCrowRF-V2/firmware/v1.3.2/EvilCrow-RFv2/EvilCrow-RFv2.ino:4:22: fatal error: AsyncTCP.h: No such file or directory
compilation terminated.

exit status 1

Compilation error: AsyncTCP.h: No such file or directory

for loop exceeds array bounds

The two for loops in line 1383 and 1391 access the jammer array. The cycle index goes from 0 to 10 and is used to index the array at i and i+1 but the array is declared as
byte jammer[11] = {0xff,0xff,};
which means the index can only go from 0 to 10.
This can be easily spotted by simply enabling the default level of warnings for the compiler in the IDE settings

Non-security usage GPR

I was wondering, how hard would it be to use the Evil Crow for ground penetrating radar (single pulsed frequency, 433mhz).

Basically how much coding do I need to do so that it can send out a signal with the time (down to the nano second) in the header every 100ish nano seconds from one module then log the time that it took those signals to return on the other?

Biggest issue is I'm an archeologist and really not that experienced with coding. So if this is something that's pretty straight forward I can figure it out with what little experience I have.

I realize that the evil Crow is a pen testing tool, but it feels like this could be the cheapest option for this project. Thanks for any input y'all have.

Cannot view the Evil Crow's SSID from cell phones.

I cannot view the Evil Crow's SSID from cell phones. Is there any issue that may be causing this? I can see the Evil Crow SSID from any computer and my ESP LilyGo watch. I cannot however see the SSID from multiple cell phones. I do not have this issue with other ESP8266/32 Arduino programmed devices that host an AP. I'm testing this with Android phones since I do not have an Iphone.

Bricked in Station Mode - is there any way to recover?

I've accidentally changed my EvilCrowRF-V2 from AP to Station mode without entering any connection settings (blank). Apparently, this bricks the device. I cannot connect to the device any longer via wifi. Is there any way to recover or reset the device with factory firmware settings? Thank you.

error Architecture or board not supported

I bought the device on https://cyborg.ksecsolutions.com/.

I plugged the device while pressing the 'EN' button and on Arduino the port /dev/cu.usbserial-14210 showed up.

I opened the sketch file EvilCrowRF-V2/firmware/v1.0/EvilCrow-RFv2/EvilCrow-RFv2.ino.

I tried to compile/upload the code to my EvilCrow RF v2 but I got the following error:

In file included from /Users/gj/Library/Arduino15/libraries/SD/src/utility/Sd2Card.h:26:0,
                 from /Users/gj/Library/Arduino15/libraries/SD/src/utility/SdFat.h:29,
                 from /Users/gj/Library/Arduino15/libraries/SD/src/SD.h:20,
                 from /Users/gj/Tools/EvilCrowRF-V2/firmware/v1.0/EvilCrow-RFv2/EvilCrow-RFv2.ino:12:
/Users/gj/Library/Arduino15/libraries/SD/src/utility/Sd2PinMap.h:524:2: error: #error Architecture or board not supported.
 #error Architecture or board not supported.
  ^
Multiple libraries were found for "SD.h"
  Used: /Users/gj/Library/Arduino15/libraries/SD
  Not used: /Users/gj/Library/Arduino15/packages/esp32/hardware/esp32/1.0.6/libraries/SD
exit status 1

Compilation error: exit status 1

If I use the esp32 by Espressif system version 2.0.5, the compilation seems to work but I got the following error:

Sketch uses 858093 bytes (65%) of program storage space. Maximum is 1310720 bytes.
Global variables use 63724 bytes (19%) of dynamic memory, leaving 263956 bytes for local variables. Maximum is 327680 bytes.
esptool.py v4.2.1
Serial port /dev/cu.usbserial-14210
Connecting....Traceback (most recent call last):
  File "esptool.py", line 34, in <module>
  File "esptool/__init__.py", line 1004, in _main
  File "esptool/__init__.py", line 790, in main
  File "esptool/loader.py", line 1108, in flash_set_parameters
  File "esptool/loader.py", line 406, in check_command
  File "esptool/loader.py", line 375, in command
  File "esptool/loader.py", line 307, in read
StopIteration
[6275] Failed to execute script 'esptool' due to unhandled exception!

Chip is ESP32-PICO-D4 (revision 1)
Features: WiFi, BT, Dual Core, 240MHz, Embedded Flash, VRef calibration in efuse, Coding Scheme None
Crystal is 40MHz
MAC: 4c:75:25:da:83:00
Uploading stub...
Running stub...
Stub running...
Changing baud rate to 921600
Changed.
Configuring flash size...
Failed uploading: uploading error: exit status 1

Maybe my guess to boot the device while pressing the 'EN' button to put it in 'flash' mode is wrong and it is not needed ? Anyway, if you have time to help :)

Bad battery connection.

Hi all.
I bought battery and immediately connected without checking the plus and minus. It turned out that the wires are backwards and smoke came out. What could have been damaged then? Is there any way to tell? I'm sure the LDO is working. When I connect via usb, the LED lights up slightly and the LDO gets very hot. Of course, the device doesn't work. Has anyone had such an adventure?

ECRFv2 with LDO desoldered.

Hi I have maybe stupid question. I have evil with desoldered LDO. Can I attach it to USB port without any worries? Is it safe for the board?

Compile issue - v1.3.2 - SD.h

Hey team,

which version of SD.h are you using? I've used the esp32 library, but, compilation is choking:

C:\repo\EvilCrowRF-V2\firmware\v1.3.2\EvilCrow-RFv2\EvilCrow-RFv2.ino
EvilCrow-RFv2:216:24: error: 'removeDir' was not declared in this scope
EvilCrow-RFv2:246:31: error: 'deleteFile' was not declared in this scope
EvilCrow-RFv2:265:56: error: 'appendFile' was not declared in this scope

I'm using Arduino15\packages\esp32\hardware\esp32\1.0.5\libraries\SD

Many thanks,

SD Card Not Recognized

Hello everything is fine?

I recently acquired 2 Evil Crow to study, but I'm racking my brain to solve a problem.

One of my evil crow is working correctly.

The other one is not recognizing the SD card. I even changed the SD cards on both, with the same files, but it still didn't work.

I've already updated the firmware, went back to the old one, updated it again, tested it on other computers and nothing...
Everything indicates that the SD card is not being recognized, what can I do?

I've already tested it with 4 different sds cards, 2gb, 2gb, 8gb and 32gb

Both with the HTML and URH folders.

Feature Request: Remote Control (API or ESP Now)

Being able to automate control of the ECRF would be a nice feature. Some examples of what I'm thinking.

1. Controlling ECRF from a FlipperZero (Either with the Wifi Dev board through ESP-Now or some other method)
2. Controlling ECRF using ESPHome. ESPHome has a bunch of automation and scripting functionality. I personally use it with an ESP32 and CC1101 to trigger my doorbell and house fans. There is so much more you could do though. https://github.com/dbuezas/esphome-cc1101
3. Controlling ECRF from Fissure - https://github.com/ainfosec/FISSURE (This should probably be it's own issue)

Feature Request: RF Range Scanning/Receive

Hi @joelsernamoreno I know you are in the middle of adding a bunch of functionality right now, so I wanted to propose some enhancements.

It would be nice if you could setup the ECRF to scan a frequency range and save the requests to SD as capture files. Similar to what the FlipperZero does with hopping and saving known or raw captures. Having two CC1101's gives the ECRF a slight advantage so you could have them covering different frequency ranges.

[Proposal] Add support to Flipper Zero .sub files

Hi Joel,
I was reading your code and I think you can add support to .sub files easily copying the function sendByte() (at least for the raw format):

EvilCrowRF-V2/firmware/v1.3.2/EvilCrow-RFv2/EvilCrow-RFv2.ino

Lines 518 to 523 in 0f64a4c

	void sendByte(uint8_t dataByte) {
	for (int8_t bit=7; bit>=0; bit--) { // MSB
	digitalWrite(TXPin0, (dataByte & (1 << bit)) != 0 ? HIGH : LOW);
	delayMicroseconds(pulseWidth);
	}
	}

Here you have a guide on how to translate the format: https://pandwarf.com/news/kaiju-supports-flipper-zero-sub-ghz-signal-files/

Reading the header you can obtain the preset config. Then, when the "Raw data" section of file has been correctly processed you can obtain an array of integers as a result. I suppose it should work with:

// expecting an integer array. Ex.: [ -1038, 487, -1044, 511, -1010, 1011]
void sendSub(int *values, int size) {
  for (int i = 0; i < size; i++) {
      digitalWrite(TXPin0, values[i] > 0 ? HIGH : LOW);
      delayMicroseconds(abs(values[i]));
    }
}

This would definitely increase the versatility of the evilcrow because there are many files for the zero flipper on the internet. BTW, I'm going to try myself with an ESP32 devboard because i don't have an evilcrowRF device, but i can update you with my results.

Please Update readme

How do i know if the correct version is flashed. Web interface looks the same no indicators of what version is currently running. I followed the install instructions to a T. You forgot to add the speed of Baud rate for flashing this will cause issues or errors to pop up. I use 115200 by default Arduino IDE sets it at 9600. This took me hours to install trying to figure out why it keeps failing. Plz update the readme.

Can't scan

Hi!
I can receive, record and transmit, but scanning does not work ??? v1.3