Practical SDR Attacks GAWN Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which of the following is a common low-cost SDR hardware platform that is widely used for wireless signal analysis and experimentation?

   • AArduino Uno
   • BRaspberry Pi
   • CIntel NUC
   • DRTL-SDR
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A penetration tester is assessing a wireless sensor network that uses a proprietary protocol. The tester has captured a valid sensor reading and wants to inject a false reading. The tester has identified the modulation and frame format. Which tool is most appropriate for crafting and transmitting the false reading?

   • AWireshark to craft and send the packet.
   • BAircrack-ng to inject the packet into the sensor network.
   • CGNU Radio with a custom flowgraph to modulate and transmit the crafted packet.
   • DKismet to inject the false reading.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A security researcher is analyzing a wireless tire-pressure monitoring system (TPMS) that uses a proprietary protocol. The researcher has captured several signals and needs to determine the frame structure, including the preamble, sync word, and data fields. Which tool is specifically designed to assist in reverse engineering unknown wireless protocols from captured signals?

   • AAircrack-ng
   • BWireshark
   • CGNU Radio Companion
   • DUniversal Radio Hacker (URH)
   Reveal Solution Discussion Select an answer first
5. 34expert · medium

   A researcher is reverse engineering a wireless protocol used by a fleet of drones. The protocol uses a custom modulation that is not supported by any commercial demodulator. The researcher has captured IQ data and needs to determine the symbol rate and modulation scheme. The researcher has access to GNU Radio and Universal Radio Hacker (URH). Which approach is most efficient?

   • AUse Wireshark to decode the protocol from the IQ data.
   • BUse URH's constellation analyzer to identify the modulation and symbol rate from the captured IQ data.
   • CUse a spectrum analyzer to visually estimate the symbol rate from the signal bandwidth.
   • DUse GNU Radio to manually build a demodulator for every possible modulation scheme and test each one.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A penetration tester is assessing a wireless door lock system that uses a 433 MHz OOK signal. The tester has captured a valid 'unlock' transmission and wants to verify that the lock accepts a replayed signal. The assessment scope explicitly permits replay attacks against the lock. Which approach is the most reliable way to execute the replay?

   • AUse a USRP with Wireshark to replay the captured packet at the link layer.
   • BUse a HackRF with GNU Radio to replay the captured IQ file at the same frequency and sample rate.
   • CUse an RTL-SDR to transmit the captured signal by simply connecting the antenna to the TX port.
   • DUse a Yard Stick One to replay the signal after demodulating it to a binary bitstream and re-modulating with a different frequency.
   Reveal Solution Discussion Select an answer first