hello world !
a few attempts regarding tempest eavesdropping.
idea :
audit tempest softwares solutions,
if working, find ways / methods / techniques / devices to block it
softwares used : tempestforelisa, tempestformp3, tempestSDR, tempest-gr
recover content
test BT jammers / portapack
BT jamming with portapack
https://github.com/sharebrained/portapack-hackrf/issues/163
https://github.com/lws803/BLE-jammer
https://transitional.anarchaserver.org/jirafeau/
https://transitional.anarchaserver.org/jirafeau/f.php?h=1lQGJuea&d=1
Tempest for Eliza
http://www.erikyyy.de/tempest/
Tempest for Eliza is a Program that uses your computer monitor
to send out AM radio signals. You can then hear computer
generated music in your radio.
this document first describes tempest for eliza, the old program that
plays music like your cellphone does when you get a phonecall. then it
describes tempest for mp3 which you can use to play mp3 files :-)
Tempest for MP3
- get your favourite mp3 file to the current directory. let's call it
- 'foobar.mp3'. make sure you have "amp" and "sox" installed. you must
- use X11 with 8 bits colordepth. use the old -bpp 8 option to your
- xserver or the new -fbbpp 8 option if you have a newer Xserver.
- first we need to find out what the correct sampling rate will
- be. therefore start:
- ./tempest_for_mp3 115500000 1024 768 1350 810 1500000 0 20 notexist.raw
- pixel-clock resy vtotal playmode
- resx htotal radio-frequency
- amplification
- filename
- note that the vtotal parameter is a new one and must be read from the
- xvidtune screen!
- also note that the notexist.raw file does not exist. we just want to
- see the output of the program, play no music yet.
- it will display:
- "audio file frequency should be 13519.890261 Hz"
- now take this value and convert your mp3 like this:
- ./mksong.sh 13519 foobar.mp3 cool.raw
- you can now listen to it with this command:
- ./tempest_for_mp3 115500000 1024 768 1350 810 1500000 0 20 cool.raw
a few tests to pipe a stream into the tempestformp3
https://p.p-node.org/p/eliza
TempestSDR
This project is a software toolkit for remotely eavesdropping video monitors using a Software Defined Radio (SDR) receiver. It exploits compromising emanations from cables carrying video signals.
Raster video is usually transmitted one line of pixels at a time, encoded as a varying current. This generates an electromagnetic wave that can be picked up by an SDR receiver. The software maps the received field strength of a pixel to a gray-scale shade in real-time. This forms a false colour estimate of the original video signal.
The toolkit uses unmodified off-the-shelf hardware which lowers the costs and increases mobility compared to existing solutions. It allows for additional post-processing which improves the signal-to-noise ratio. The attacker does not need to have prior knowledge about the target video display. All parameters such as resolution and refresh rate are estimated with the aid of the software.
gr-tempest
An implementation of TEMPEST en GNU Radio.
https://github.com/git-artes/gr-tempest
- TEMPEST (or Van Eck Phreaking) is a technique to eavesdrop video monitors by receiving the electromagnetic signal emitted by the VGA/HDMI cable and connectors (although other targets are possible, such as keyboards, for which the same term is generally used, see Wikipedia/Tempest).
- This is basically a re-implementation of Martin Marinov's excelent TempestSDR in GNU Radio (see https://github.com/martinmarinov/TempestSDR). The reason is that I felt it may be easier to maintain and extend. Note however that the basic ideas were imitated, but the synchronization algorithms are different, and some functionalities (particularly in the GUI) are missing.
TEST PATTERN VIDEO FOR TEMPEST TESTS
a video to braodact on the screnn so to know the frequency to search.
https://transitional.anarchaserver.org/jirafeau/f.php?h=2m7AjFAt&d=1
- tested and worked with 10MHz with :
- AM Radio receiver
- hackRF / Portapack + GQRX + CUBIC SDR