Analyze the signaling of common low-power ISM devices and distinguish between legacy and modern security.
ISM Band OOK/FSK (315/433 MHz)
I/Q recording of short-burst transmissions from remotes, doorbells, or simple IoT sensors.
Visualizing the waveform in inspectrum to determine bit timing and symbol structure (Manchester vs. PWM).
Static protocol detected. The binary sequence is constant across sessions, enabling simple I/Q capture and replay exploitation.
Fixed-code systems are vulnerable to simple capture-and-replay, whereas modern rolling-code systems prevent such attacks using cryptographic counters.
Replaying signals to devices you do not own can interfere with local communications and may be illegal. Test only in a controlled lab environment.
Study how rolling code (Keeloq) and challenge-response protocols provide modern security.