PandwaRF Device Bounty

The PandwaRF device bounty is a program where you can share your device’s Radiofrequency data with us and get rewarded for it. A device can be a keyfob (car, alarm, gate opener, ...), a wireless plug, a wireless chime, etc...

We increase our RF database and you get rewards.

Why participate?

1. Depending on the devices you provide and their type, you receive a discount on our website, a PandwaRF (value 160€) or even a PandwaRF Rogue Pro (value 800€). Find out more about the reward system below.
2. It will benefit you and all the PandwaRF users. We will do our best to integrate as many devices as possible in the PandwaRF app.
3. It is a pretty simple task which doesn’t require a lot of time,
4. You also get rewarded for it.
5. Some of the devices won’t be integrated, depending on the type of device, but in this case you still get a reward.

What do you need ?

Here is what you need in order to participate in the device bounty:

• A Software Defined Radio (RTL-SDR, HackRF, BladeRF, etc…)
• A SDR software (SDR#, HDSDR , …) or even better: Universal Radio Hacker (URH)
• A RF device to capture (remote control, keyfob, detector, chime, …)
• Optional: a PandwaRF to test the device. This is optional, but it can gain you more points if you provide us with data that can be used directly with PandwaRF.

What do we need ?

If you are doing this contest and made it to this point, you probably have the skills to capture some RF data. So here what we need in detail.

We need basic information about the device you captured (aka RF data):

• Brand/model/reference of the device
• URL where we can see it/buy it, with pictures
• Frequency (mandatory): must be in the range: 300-348 MHz, 391-464 MHz and 782-928 MHz
• Modulation: must be OOK/MSK/2-FSK/4-FSK/GFSK
• Data rate in bits/s
• Codeword length (in symbol)
• Synchro & tails bits before/after codeword
• Repetition: number of times the codeword is repeated
• Position of the fixed and variable part if any
• Symbol encoding: 1 Symbol can be encoded using several bits. Eg. Symbol 0: 0x8E, symbol 1: 0xEE, etc…
• One or several files containing I/Q samples with high sampling rate (at least 1M Sample/s). These are big files. Alternatively a (PCM uncompressed) wav file with high sampling rate can be OK. Share the files with us ([email protected]). You can use any file sharing service you want (WeTransfer, Dropbox, etc…). For more details on how to capture RF data, cf. How to capture and record data using SDR#
• A brief description of what actions correspond to the I/Q samples file (eg. Push button 1 then push button 2, Arm then disarm, etc…). If there are several actions in the same file, indicate the timestamp of each action.
• If there is a logical encoding of data (symbol encoding, fixed part, variable part, etc…) and you manage to understand it, provide it, you will get more rewards.

The more information you provide, the more rewards you get.

The information you provide must not have already been made publicly available, but you can communicate on it.

What should I do ?

• Send us an email at [email protected] with the brand and model names of the device you intend to reverse.
• Once we agree on the device: send us an email at [email protected] with the filled template.

What are the rewards?

Depending on the number of devices you share and their type, you can receive a discount on our website, a PandwaRF (value 160€) or even a PandwaRF Rogue Pro (value 800€).

Each type of device equals a number of points, as follows:

Device type	Rewards (points)
Alarm keyfob	10
Car keyfob	8
Garage door opener keyfob	8
Wireless chime	3
Wireless plug	3
Other	3

Each additional information provided gives you additional points, as follows:

Information	Rewards (points)
Brand/model/reference of the device	Mandatory
URL	Mandatory
Frequency	Mandatory
Modulation	Mandatory
Data rate	Mandatory
Codeword length	Mandatory
Synchro & tails bits	Mandatory
Repetition	Mandatory
Position of the fixed and variable part	Mandatory
Symbol encoding	Mandatory
URL for I/Q samples files	Mandatory
Description of what actions correspond to the I/Q samples	Mandatory
PandwaRF setup for device configuration	+10
Additional information	+X (depending on the information)

Each reward is credited on your account, until you decide to spend it.

In case we receive the same device from several people the first one gets the highest reward, the second one gets 50% of the reward, the third one 25%.

And this is how the points turn into rewards:

Number of points earned	Reward
100 points	Free PandwaRF
500 points	Free PandwaRF Rogue Pro
Other score (X)	X% discount on PandwaRF or X/5 discount on Rogue Pro, as you prefer

For example: If you have earned 25 points, you get a 25% discount on PandwaRF or a 5% discount on Rogue Pro (your choice). For 150 points, you can either:

• Turn 100 points into a free PandwaRF and the other 50 into a discount on PandwaRF or Rogue Pro, or
• Turn the 150 points into a 33% discount on Rogue Pro

This way even the smallest contribution gets rewarded!

How to claim your reward?

After successfully verifying the RF data we received from you, we will send you a coupon code that you will be able to use on pandwarf.com. Note that verifying the data can take us a few weeks.

Need more information?

Feel free to contact us at [email protected] !

Note: When turning your points into rewards you will receive a non-nominative coupon code that you can use to place your order anonymously. The devices you provide will not be associated with your order.

How to capture and record data using SDR#

• Buy a RTL-SDR USB device like this one (low cost) or this one (better quality).
• Start SDR#
• Choose in the source list the "RTL-SDR USB" device (or any other device you have connected).
• For better results, go to the Configure Source settings (the metal gear icon) and increase the RF Gain.
• Click on Start (the triangle icon) to start receiving RF data.
• In the Recording menu:
  • Set Sample Format to Baseband 16 Bit PCM.
  • Click on the Record button to start capturing RF data into a file.
  • Press the button of the a remote control to capture RF data from.
  • Stop the data capture. The result is saved in a .wav file in the install folder of SDR Sharp.
• Click on Stop to stop receiving RF data.
• Give yourself a pat on the back.

Android Brute Force Tutorial

Want more? Have a look at our Android Brute Force Tutorial