EvilCrowRF-V2

Idea, development and implementation: Joel Serna (@JoelSernaMoreno).

Main collaborator: Little Satan (https://github.com/LSatan/)

Other collaborators: Eduardo Blázquez (@_eblazquez), Federico Maggi (@phretor), Andrea Guglielmini (@Guglio95) and RFQuack (@rfquack).

PCB design: Ignacio Díaz Álvarez (@Nacon_96), Forensic Security (@ForensicSec) and April Brother (@aprbrother).

Manufacturer and distributor: April Brother (@aprbrother).

Distributor from United Kingdom: KSEC Worldwide (@KSEC_KC).

The developers and collaborators of this project do not earn money with this. You can invite me for a coffee to further develop Low-Cost hacking devices. If you don't invite me for a coffee, nothing happens, I will continue developing devices.

For sale with April Brother (shipping from China):

Evil Crow RF V2 Aliexpress: https://aliexpress.com/item/1005004019072519.html
Evil Crow RF V2 Lite (without NRF2401L) Aliexpress: https://aliexpress.com/item/1005004032930927.html
Evil Crow RF V2 Alibaba: https://www.alibaba.com/product-detail/Evil-Crow-RF2-signal-receiver-with_1600467911757.html

For sale with KSEC Worldwide (shipping from United Kingdom):

Evil Crow RF V2: https://labs.ksec.co.uk/product/evil-crow-rf-v2/
Evil Crow RF V2 Lite: https://labs.ksec.co.uk/product/evil-crow-rf2-lite/

Discord Group: https://discord.gg/jECPUtdrnW

Summary:

Disclaimer
Introduction
Firmware
- Installation
- First steps with Evil Crow RF V2
- RX Config Example
- RX Log Example
- RAW TX Config Example
- Binary TX Config Example
- Pushbuttons Configuration
- URH Parse example
- Other Sketches
Evil Crow RF V2 Support

Disclaimer

Evil Crow RF V2 is a basic device for professionals and cybersecurity enthusiasts.

We are not responsible for the incorrect use of Evil Crow RF V2.

We recommend using this device for testing, learning and fun :D

Be careful with this device and the transmission of signals. Make sure to follow the laws that apply to your country.

Introduction

Evil Crow RF V2 is a radiofrequency hacking device for pentest and Red Team operations, this device operates in the following radiofrequency bands:

300Mhz-348Mhz
387Mhz-464Mhz
779Mhz-928Mhz
2.4GHz

Evil Crow RF V2 has two CC1101 radiofrequency modules, these modules can be configured to transmit or receive on different frequencies at the same time. Additionally, Evil Crow RF V2 has a NRF24L01 module for other attacks.

Evil Crow RF V2 allows the following attacks:

Signal receiver
Signal transmitter
Replay attack
URH parse
Mousejacking
...

NOTE:

All devices have been flashed with basic firmware Evil Crow RF V2 before shipping.
Please do not ask me to implement new functions in this code. You can develop code for Evil Crow RF V2 and send PR with your new code.

Firmware

The basic firmware allows to receive and transmit signals. You can configure the two radio modules through a web panel via WiFi.

Installation

Install esptool: sudo apt install esptool
Install pyserial: sudo pip install pyserial
Download and Install the Arduino IDE: https://www.arduino.cc/en/main/software
Download Evil Crow RF V2 repository: git clone https://github.com/joelsernamoreno/EvilCrowRF-V2.git
Download the ESPAsyncWebServer library in the Arduino library directory: git clone https://github.com/me-no-dev/ESPAsyncWebServer.git
Download the AsyncTCP library in the Arduino library directory: git clone https://github.com/me-no-dev/AsyncTCP.git
Edit AsyncTCP/src/AsyncTCP.h and change the following:

#define CONFIG_ASYNC_TCP_USE_WDT 1 to #define CONFIG_ASYNC_TCP_USE_WDT 0

Open Arduino IDE
Go to File - Preferences. Locate the field "Additional Board Manager URLs:" Add "https://dl.espressif.com/dl/package_esp32_index.json" without quotes. Click "Ok"
Select Tools - Board - Boards Manager. Search for "esp32". Install "esp32 by Espressif system version 1.0.6". Click "Close".
Open the EvilCrowRF-V2/firmware/v1.0/EvilCrow-RFv2/EvilCrow-RFv2.ino sketch
Select Tools:
- Board - "ESP32 Dev Module".
- Flash Size - "4MB (32Mb)".
- CPU Frequency - "80MHz (WiFi/BT)".
- Flash Frequency - "40MHz"
- Flash Mode - "DIO"
Upload the code to the Evil Crow RF V2 device
Copy the EvilCrowRF-V2/firmware/v1.0/SD/HTML folder to a MicroSD card.
Copy the EvilCrowRF-V2/firmware/v1.0/SD/URH folder to a MicroSD card.

First steps with Evil Crow RF V2

Insert the MicroSD card into the Evil Crow RF V2 and connect the device to an external battery or laptop.
Visualize the wifi networks around you and connect to the Evil Crow RF V2 (default SSID: Evil Crow RF v2).
Enter the password for the wifi network (default password: 123456789).
Open a browser and access the web panel (default IP: 192.168.4.1).
Go!