PandwaRF Rogue Pro Kit
Pro version of the PandwaRF, a highly flexible RF sniff/capture/replay device. The Rouge Pro version allows for cracking and bruteforcing of fixed and rolling code devices, such as garage remote controls. Extensive database of already cracked devices and 30x brute-engine.
Introduction
After the success of the PandwaRF, Lab401 worked with the ComThings engineers to build a version of the device optimised for Penetration Testing and the Security Industry.
The result is the PandwaRF Rogue Pro. Built with the same quality as the PandwaRF - the similarities stop with the case.
Engineered to work as an autonomous, RF brute-forcing device - the Rogue Pro has vastly improved functionality.
The PandwaRF is pocket-sized, portable RF analysis tool operating the sub-1 GHz range.
It allows for the capture, analysis and re-transmission of RF via an Android device or linux PC.
Practically, it removes the 'standard SDR Grind' of capturing, demodulating, analysing, modifying and replaying by hand - replacing it with a simple but powerful interface.
The PandwaRF Rogue Pro brings significant improvement in automated brute-forcing, aimed at security professionals and penetration testers to perform highly-targeted, rapid auditing and owning.
System Overview
The PandwaRF System consists of two elements: The hardware device, and the software controller, either Android device or PC.
Beyond the functionality provided by the Android interface, the PandwaRF can be easily controlled and customised. No need to risk bricking your device or writing in C, the PandwaRF can be controlled by Javascript, either on the phone, or remotely via your browser.
Rogue Pro Advantages
The Rogue Pro has significant advantages over the standard version - we have highlighted the most relevant below:
30x Faster Brute Forcing
Reworked Brute Force engine + De Bruijn attack.
Preloaded Example Database
Function masks preloaded for common wireless targets.
Pause / Resume Functionality
Pause and resume attacks if disturbed or out of time.
32-bit codeword support
Extended codeword length up to 4-billion combinations.
Set & Forget
Supports untethered cracking - will run autonomously.
Extended Protocols
Most generic remote control protocols are natively supported.
PandwaRF Model Comparison
Model | PandwaRF | Rogue Pro |
---|---|---|
Audience | Public / Hobbyist | Pentesters / Security Companies |
Brute Force | ||
Frame repetition | X | X |
Max Base | 4 | 4 |
De Bruijn attack (OpenSesame) * | X | |
Function mask | X | X |
Function mask bit skipping (time optimization) | X | |
Zero Delay between attempts | X | |
Logic symbols on multiple bytes | X | |
More brute force patterns | X | |
Split BF in several steps (saving last status) | X | |
Codeword support | 16 bits | 32 bits |
Synchro / tail support (bytes) | 8/8 | 40/40 |
Autonomous Brute Force * | X | |
Protocols | X | |
Session save/session load | X |
Technical Specs
Hardware- Bluetooth Smart Module ISP130301, based on nRF51
- CC1111 Low-Power SoC with Sub-1 GHz RF Transceiver
- 16 Mbit Flash Memory to save custom RF protocols
- Rechargeable battery powered for stand-alone operation
- Real-time battery status
- SMA connector (compatible with a HackRF Antenna, or our antenna)
- 4x programmable buttons
- Debug Connectors & GPIO
- Spectrum Analyser
- Automatically scan, capture, demodulate, replay data
- Capture & decode RF devices (IoT, Remote Controls..)
- RF Jamming
- Remote Control Brute-Force (RollJam)
RF
- Supports ASK/OOK/MSK/2-FSK/GFSK modulation
- 300-928 MHz band
- 10000 Bits/s data rate
- Transmit power: +10dBm (w/ inbuilt amps)
- Custom functionality Javascript API
- GPIO & Debug pads
- Auto-stream captured data to a remote server
- Modify/share captured data in-app
What's included
- 1x PandwaRF Rogue Pro
- 1x Battery
- 3x Antennas (300-400MHZ, 400-500MHZ, 800-1000MHZ range)
Shipping & Packaging
- Each PandwaRF Rogue Pro is dispatched from Europe - no need to worry about slow shipping times, import duties or damaged goods.
- Packed in a sturdy compact 85x130x45mm box.
- We provide world-wide shipping with express options.
Compatible Sysems
- Android 4.0.1 Minimum, 4.3 Preferred
- Linux: Debian, Ubunto, CentOS, etc (All Versions)
PandwaRF Rogue Pro Resources
Technical Documents Community / Usage / Tutorial ResourcesPandawaRF: Unboxing and Assembly
Hands on: PandwaRF
SHIPPING & PACKAGING INFORMATION
Lab401's engagement is to get your orders to you as quickly as possible in a perfect condition. All packages are insured to 100% of the value, and Lab401 Delivery Protection can be used to ensure immediate re-shipment if a package is lost or damaged.
All orders are securely packaged. Premium and Express orders are further protected in an untearable polyurethane satchel, ensuring that your package is not tampered with during delivery.
To ensure privacy and reduce theft, all packages are anonymous - there is no mention of product contents or Lab401 branding on the outside of the packaging.
Shipping Options
Lab401 provides three types of shipping options:
- Eco Delivery
- Premium Delivery
- Urgent Express Delivery
Eco Delivery is for available light and slim orders, particulaly cards, keyfobs and accessories. It is dispatched by La Poste (French postal system) and tracked.
Premium Delivery is our default shipping option: fast and reliable delivery via courier. Depending on the destination, Premium Delivery use UPS, DHL, FedEx, Chronopost or Colissimo.
Urgent Express Delivery uses the fastest possible delivery method possible: UPS Express, FedEx Express, DHL Express or Chronopost Express.
Lab401 provides same day shipping for Urgent Express orders made before 12PM GST+1.
Do you provide free shipping?
Yes - orders over 650€ excluding taxes have free shipping.
Customers that qualify for free shipping can still select rapid shipping options.
When will I receive my order?
Average order times can be estimated below.
Average shipping estimates can be seen by selecting the destination country / region below.
While actual shipping times may vary - these estimations are built off our real delivery statistics. To receive an order as quickly as possible, we recommend:
- Use the Urgent Express shipping method
- Use same day shipment by placing the order before 12PM GMT+1
Do you ship internationally?
We ship world-wide, but due to logistical or legal restrictions, we are unable to ship to the following countries: Argentina, Belarus, Bolivia, Brazil, Cambodia, Chile, Ecuador, Georgia, India, Iraq, Kazakhstan, Kuwait, Liberia, Libya, Nepal, Oman, Panama, Peru, Russia, South Africa (8 of 9 provinces - only authorized Gauteng), Turkey, Ukraine, Vietnam
Due to the current situation, shipping to the Ukraine is currently not possible.
Where do you ship from?
All items are dispatched from France. You will receive a tracking number upon item dispatch. The address used on your purchase is printed as a label - please double check your address to avoid mistakes.
When will my order be dispatched?
Lab401 dispatches orders Monday - Friday.
All orders placed before 12PM GMT+1 will be dispatched the same day. All orders placed after this cutoff time will be dispatched the next business day.
For example:
- An order placed Friday, 9AM GMT+1 will be dispatched the same day.
- An order placed on Friday, 6PM GMT+1 will be dispatched Monday.
- An order placed on Saturday will be dispatched Monday
For any questions, please contact customer support.
How are import duties / customs handled?
For all European Union destinations, all shipments are DDP - Delivered Duty Paid. This means all applicable VAT/TVA, shipping costs and customs fees are pre-paid.
You will not be charged by the courier service / post office or customs.
For all destinations outside European Union, all shipments are DDU - Delivered Duty Unpaid. This means that your country's custom service impose a VAT/TVA/Import Duty on your shipment.
I am charged VAT ?
Lab401 (ETOILE 401 SAS) is an EU-Registered entity. VAT is applicable to purchases delivered within the EU, with exceptions for VAT Registered entities. VAT is calculated at checkout. For your convenience, you can browse Lab401 with prices Including VAT and Excluding VAT.
Sales are contractual
Please note - a purchase is an explicit agreement of our terms and conditions. Any products refused by clients will not be refunded.
Purchase Security Validation may be applied
To protect against credit card fraud, orders may be flagged for Purchase Security Validation. In this instance, we will reach out to the customer to perform a manual verification process.
Orders that are flagged for Purchase Security Validation are considered to be incomplete until validated. Our delivery deadline obligations begin only when an order is validated.
Delivery Protection
Is my delivery protected?
All Lab401 shipments are insured with the carrier.We also provide an advanced insurance, Lab401 Delivery Protection.
Lab401 Delivery Protection means we remain fully responsible for the package right up to delivery. If the package is lost or damaged, the package can be resent immediately (48 business hours) upon receipt of proof.
For orders without Delivery Protection, lost or damaged packages will pass through the carrier's protocols, which can take well over 30 days.
For orders that are time-sensitive, we recommend Lab401 Delivery Protection.
Delivery Protection can be purchased at checkout easily and cheaply.