ilusm.dev

lora

LoRaWAN hacking, gateway simulation, packet decoding.

Load with: use lora

Quick example

use lora

result = lorag(\(x) x, \(x) x, 10)
prn(result)

Functions

Gateway simulation

lorag(freq_mhz, sf, bw_khz)

Performs the operation. Takes freq_mhz, sf, bw_khz.

lorag1(h)

Performs the operation. Takes h.

lorag2(h, timeout_ms)

Performs the operation. Takes h, timeout_ms.

lorag3(h, data, spreading_factor)

Performs the operation. Takes h, data, spreading_factor.

Packet decoder

lorad(raw_bytes)

Adds an item. Takes raw_bytes.

loram(mtype)

Performs the operation. Takes mtype.

MIC verification

lorav(packet, nwk_key)

Performs the operation. Takes packet, nwk_key.

Join procedure

loraf(deveui, appeui, appkey, devnonce)

Performs the operation. Takes deveui, appeui, appkey, devnonce.

lorab(deveui, appeui, devnonce, known_plaintext, wordlist)

Performs the operation. Takes deveui, appeui, devnonce, known_plaintext, wordlist.

Session keys derivation

lorde(appkey, devnonce, netid)

Decodes. Takes appkey, devnonce, netid.

Decryption

lorad1(payload, key, fcnt)

Performs the operation. Takes payload, key, fcnt.

Fuzzer

loraf1(h, start_sf, end_sf, data)

Performs the operation. Takes h, start_sf, end_sf, data.

Spreading factor scan

loras(h, freq_mhz)

Performs the operation. Takes h, freq_mhz.

Replay attack

loraf2(captured, new_fcnt)

Performs the operation. Takes captured, new_fcnt.

Downlink injection

lorai(target_dev_addr, data, fcnt, key)

Performs the operation. Takes target_dev_addr, data, fcnt, key.

Common frequencies

loraa()

Performs the operation.

eurof()

Performs the operation.

usfre()

Performs the operation.

Gateway enumeration

lorad2(iface)

Performs the operation. Takes iface.

Notes

  • LoRa (Long Range) radio utilities for IoT.