← Back to Labs

ADS-B Aircraft Tracking & RF Spoofing

Step through 1090 MHz Mode S PPM modulation, DF=17 112-bit message frames, CPR coordinate decoding, and SDR ghost aircraft injection

AIRSPACE & RADAR SCOPE (1090 MHz)Rx ARx B (Primary)Rx CHackRF SDRBAW123FL320 (Legit)1090 MHz MODE S DF=17 FRAME DECODERPRE8.0µsDF=175-bitsCA3bICAO 24b400A0CME Payload 56bCPR Lat/Lon/AltCRC 24bParity OKPPM Waveform (1 µs Bit Interval)Preamble'1''0''1'Active Phase:1090 MHz RF BroadcastTarget Node:Aircraft Mode S TransponderICAO / Call:400A0C (BAW123)Coordinates:51.470° N, -0.450° WSecurity Status:Broadcast Active (2 Hz)STEP 1: ADS-B OUT SIGNAL TRANSMISSIONBroadcast Active (2 Hz)
STEP 1 OF 6

ADS-B Out Signal Transmission

Commercial aircraft calculate their position via onboard GPS and continuously broadcast unencrypted transponder signals on 1090 MHz. Pulse Position Modulation (PPM) sends altitude and flight data to ground receivers and nearby planes.

Arrow keys to navigate · R to reset

Tap dots to jump to any step

Read the full article →Take the quiz →