# Radio Hacks Published articles for Radio Hacks. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## The Hidden Microcontroller Inside a LoRa chip DevFeed: [The Hidden Microcontroller Inside a LoRa chip]() Original publisher: [Read original article]() Author: Jenny List Published: 2026-11-07T12:00:34Z Content type: news Language: en Sources: [Hackaday]() Topics: [Microcontroller](), [Electrical engineering and computer science (EECS)]() Tags: [asic](), [chip](), [display](), [firmware](), [llms](), [lora](), [lr2021](), [mesh](), [mesh-network](), [microcontroller](), [microcontrollers](), [module](), [network](), [node](), [peripheral](), [radio](), [radio-hacks](), [reverse-engineering](), [sdr](), [semtech](), [software-defined-radio](), [wifi]() ### AI overview The Semtech LR2021 has an onboard microcontroller with updateable firmware, rather than operating only as a preprogrammed radio ASIC. Alex Beale reverse engineered it with help from LLMs and demonstrated custom firmware that runs FFTs for a waterfall display and can host a mesh network node on the chip. The excerpt describes these as newly unlocked capabilities; it does not detail the reverse-engineering method or the firmware update requirements. ### Source excerpt If you've ever done anything with LoRa, the chances are you've used a LoRa chip or module as a peripheral for a microcontroller, and left it at that. But that's ...read more ## Hacking a Marine Radio Dish DevFeed: [Hacking a Marine Radio Dish]() Original publisher: [Read original article]() Author: Zoe Skyforest Published: 2026-10-28T05:00:31Z Content type: news Language: en Sources: [Hackaday]() Topics: [Hacking]() Tags: [hacking](), [nmea](), [radio](), [radio-hacks](), [satellite](), [satellite-dish]() ### AI overview Melan repurposed an Intellian i4 marine satellite dish for land use by using an RP2040 and RS-422 module to send NMEA sentences that supplied the boat heading the antenna expected. After getting the manufacturer's software running with help from the company, she explored software-free control by sniffing communications to the Antenna Control Unit and decompiling the code. This let her describe the protocol and point the antenna with azimuth and elevation commands. ### Source excerpt Having watched some fun videos on repurposed satellite dishes on YouTube, [Melan] wanted to get in on the action. She managed to source herself an Intellian i4, a dish built ...read more ## Pushing Bluetooth out to 12 Kilometers DevFeed: [Pushing Bluetooth out to 12 Kilometers]() Original publisher: [Read original article]() Author: Tyler August Published: 2026-10-25T05:00:51Z Content type: article Language: en Sources: [Hackaday]() Topics: [Bluetooth](), [Networking hardware]() Tags: [bluetooth](), [directional-antennas](), [long-distance](), [lora](), [radio-hacks](), [radio-propagation]() ### AI overview A video by [nktbuilds] demonstrates a Bluetooth tracker tag communicating over a reported distance of 12 kilometers without extra transmit power. The setup uses a parabolic antenna to capture more signal and a sensitive receiver with a lower noise floor than typical phone hardware. The excerpt notes that this is a demonstration, not a reason to use Bluetooth for long-distance communications; it points to LoRa as better suited to that purpose, describing ranges from hundreds of miles with line of sight to tens of thousands with the right setup. ### Source excerpt Bluetooth is a short-range protocol that's great for peripherals and finding your keys, but it's limited range is mainly a product of how it's usually implemented. A recent video from ...read more ## 5 GHz Drone Video, With An ESP32 DevFeed: [5 GHz Drone Video, With An ESP32]() Original publisher: [Read original article]() Author: Jenny List Published: 2026-10-21T05:00:05Z Content type: news Language: en Sources: [Hackaday]() Topics: [ESP32-C5](), [ESP32]() Tags: [analog](), [analog-video](), [dac](), [drone](), [drone-hacks](), [drones](), [esp32](), [esp32-c5](), [latency](), [low-latency](), [radio-hacks](), [receiver](), [sdr](), [software-defined-radio](), [video]() ### AI overview A Seeed Studio Xiao ESP32-C5 uses the chip's software-defined radio capability to receive and demodulate 5 GHz analog FM drone video. A resistor-ladder DAC outputs the video; a button interface selects channels, while a serial link provides more options. The excerpt says analog video avoids the digital signal's abrupt picture loss in poor radio propagation and offers very low latency, but leaves open whether latency in the SDR receiver affects usability. ### Source excerpt With the ESP32 series of microcontrollers having had hidden software-defined radio (SDR) facility revealed, we're now moving on from the announcement into projects making use of the finding. [Twotoz] has ...read more ## Meshtastic Sniffer for DragonOS DevFeed: [Meshtastic Sniffer for DragonOS]() Original publisher: [Read original article]() Author: Bryan Cockfield Published: 2026-10-19T20:00:07Z Content type: article Language: en Sources: [Hackaday]() Topics: [meshtastic](), [SELinux](), [Terminal]() Tags: [dragonos](), [hackrf](), [ham-radio](), [linux](), [linux-distribution](), [meshtastic](), [networks](), [radio](), [radio-hacks](), [sdr](), [sniffer](), [software](), [software-defined-radio](), [terminal](), [traffic]() ### AI overview A developer builds a Meshtastic traffic sniffer into DragonOS, a Linux distribution for radio work. The C program runs as a standalone binary, scans much of Meshtastic's operating bandwidth using a HackRF software-defined radio, and decodes traffic when the key is known. It can help locate active conversations and other networks. ### Source excerpt Meshtastic has gained a lot of popularity over the last few years thanks to its low barrier of entry. No licenses are needed and the hardware is dirt cheap, at ...read more ## Turning a Wi-Fi Adapter into an SDR DevFeed: [Turning a Wi-Fi Adapter into an SDR]() Original publisher: [Read original article]() Author: Aaron Beckendorf Published: 2026-10-18T08:00:22Z Content type: article Language: en Sources: [Hackaday]() Topics: [Wi-Fi](), [Undocumented feature](), [input](), [ESP32]() Tags: [bandwidth](), [esp32](), [firmware](), [i-q](), [interface](), [mediatek](), [monitor-mode](), [radio-hacks](), [raw](), [sdr](), [wi-fi]() ### AI overview Two independent projects have adapted the MediaTek MT7921AU Wi-Fi adapter for software-defined radio use by accessing its raw I/Q sampling features. BirriaSDR streams samples over libusb without permanent firmware changes, while Mtk79ICAP uses a modified driver and firmware changes, offering wider bandwidth and 5 GHz tuning. The adapter can also operate in monitor mode while streaming SDR data when automatic gain control is enabled. ### Source excerpt Since the discovery of an undocumented I/Q sampling feature in ESP32 chips about two weeks ago, there's been a flood of similar features being found in other wireless chips, including ...read more ## Discovering SDRs Everywhere DevFeed: [Discovering SDRs Everywhere]() Original publisher: [Read original article]() Author: Elliot Williams Published: 2026-10-17T14:00:24Z Content type: article Language: en Sources: [Hackaday]() Topics: [cortex m4](), [Ubiquiti airMAX]() Tags: [chip](), [esp32](), [hackaday-columns](), [lora](), [lr2021](), [newsletter](), [radio](), [radio-hacks](), [sdr](), [software-defined-radio](), [wireless]() ### AI overview Hackers have uncovered software-defined radio capabilities in ESP32 chips and an LR2021 LoRa chip, including access to raw IQ data and transmission. The article describes how these discoveries let existing SDR tools work with newly accessible radios and lower the cost of experimenting with digital radio. ### Source excerpt To quote commenter [douyarou], "It's like our little version of a Precambrian explosion". A bunch of hackers have discovered, independently and building on each other's work, software-defined radio (SDR) capabilities ...read more ## LR2021 LoRa chip revealed to support software-defined radio DevFeed: [LR2021 LoRa chip revealed to support software-defined radio]() Original publisher: [Read original article]() Author: Jenny List Published: 2026-10-16T05:00:10Z Content type: news Language: en Sources: [Hackaday]() Topics: [Bluetooth LE](), [Scapy]() Tags: [development](), [esp32](), [lr2021](), [radio](), [radio-hacks](), [sdr](), [software-defined-radio](), [wireless]() ### AI overview A post describes SDR functionality revealed in the LR2021 LoRa chip, including a 2.4 GHz radio and a 150-960 MHz radio. It supports 16-bit SDR reception and transmission; the current main demo is P25 digital voice. ### Source excerpt The news of the past couple of weeks has seen the ESP32 turned into an software-defined radio (SDR) thanks to a hidden baseband mode, an exciting development by anyone's standards. ...read more ## So You Want To Make Your SDR Work On Other Frequencies DevFeed: [So You Want To Make Your SDR Work On Other Frequencies]() Original publisher: [Read original article]() Author: Jenny List Published: 2026-10-15T14:00:44Z Content type: tutorial Language: en Sources: [Hackaday]() Topics: [ESP32-C3](), [Networking hardware]() Tags: [all](), [circuit](), [engineering](), [esp32](), [featured](), [hacking](), [hardware](), [hardware-hacking](), [radio-hacks](), [receive-converter](), [sdr](), [wi-fi]() ### AI overview The article explains how a frequency converter can let an ESP32 Wi-Fi radio, used as an SDR, receive or transmit on frequencies outside its native Wi-Fi band. It outlines a converter using filters, a local oscillator, and a mixer, and cautions that the suggested circuit is not a finished design. ### Source excerpt Perhaps the most exciting news of the past few weeks in the world of hardware hacking has been the unlocking of hidden SDR functionality in the Wi-Fi radios found on ...read more ## Pager Converted to Meshtastic Node DevFeed: [Pager Converted to Meshtastic Node]() Original publisher: [Read original article]() Author: Bryan Cockfield Published: 2026-10-15T05:00:22Z Content type: article Language: en Sources: [Hackaday]() Topics: [meshtastic](), [Esp32 C2]() Tags: [esp32](), [esp32-s3](), [hardware](), [heltec](), [keyboard](), [meshtastic](), [pager](), [pcb](), [radio](), [radio-hacks](), [reverse-engineering](), [screen]() ### AI overview A Motorola T900 pager was converted into a Meshtastic node using a Heltec V4 with an ESP32-S3. The prototype required reverse-engineering the pager's undocumented screen and keyboard, and its makers may add features or build a replacement PCB. ### Source excerpt Text messaging has been around on cellular networks en masse for around three decades now. It's so common that it's difficult to remember a time without it. Its two-way quick ...read more ## Using an ESP32-C3's RF Hardware for DVB-S2 Video Transmission DevFeed: [Using an ESP32-C3's RF Hardware for DVB-S2 Video Transmission]() Original publisher: [Read original article]() Author: Maya Posch Published: 2026-10-14T20:00:15Z Content type: news Language: en Sources: [Hackaday]() Topics: [ESP32-C3](), [Embedded Software Dev](), [ESP32]() Tags: [dvb-s2](), [esp32-c3](), [hardware](), [microcontrollers](), [radio-hacks](), [rf](), [transmission](), [video]() ### AI overview The ESP32-DATV project uses an ESP32-C3's RF hardware to transmit a DVB-S2 signal. A host PC converts input video into a compliant signal, while the ESP32-C3 prepares samples for transmission. The device operates around 2.4 GHz, outside DVB-S2's stated 10.7-12.7 GHz range, so the article notes that an off-the-shelf DVB-S2 receiver cannot directly receive the transmission. ### Source excerpt Generally the DVB-S and -S2 standards require a satellite somewhere in Earth orbit to provide a signal to receive, but you can also transmit your own DVB-S2 stream with any ...read more ## ESP-SDR Can Now Transmit DevFeed: [ESP-SDR Can Now Transmit]() Original publisher: [Read original article]() Author: Elliot Williams Published: 2026-10-13T20:00:21Z Content type: news Language: en Sources: [Hackaday]() Topics: [ESP32-C3](), [ESP32-S3](), [ESP32-H2]() Tags: [802-15-4](), [esp32](), [firmware](), [hack](), [radio-hacks](), [rtl](), [sdr](), [software-defined-radio](), [wireless-hacks](), [zigbee]() ### AI overview A new ESP32 firmware version enables transmission through the chips' 2.4 GHz radios, extending earlier listen-only software-defined radio hacks. A demo sends Hellschreiber signals between ESP32-S3 and ESP32-C6 boards, and work on 802.15.4 modulation is underway. ### Source excerpt Well, that was fast! Last week, we reported on two apparently simultaneous hacks using the 2.4 GHz radio inside many ESP32 variants that enabled raw access to the radio samples, ...read more ## WiFi Router Does Software-Defined Radio DevFeed: [WiFi Router Does Software-Defined Radio]() Original publisher: [Read original article]() Author: Jenny List Published: 2026-10-12T23:00:26Z Content type: article Language: en Sources: [Hackaday]() Topics: [Software-defined networking](), [Cloud Networking]() Tags: [linux](), [mediatek](), [radio](), [radio-hacks](), [sdr](), [software-defined-radio](), [wifi](), [wifi-7]() ### AI overview The MediaTek MT7996 radio chip in a Gemtek W1700K WiFi 7 router can stream raw I/Q data over Ethernet to a Linux machine, making the router usable as an SDR receiver on supported 2.4, 5, or 6 GHz bands. The article notes the possibility of finding similar undocumented streaming modes in other devices. ### Source excerpt Perhaps the most famous of software-defined radios is the RTL-SDR, which is very cheap because it's a digital TV receiver that's been pressed into service delivering raw I and Q ...read more ## Keep That Old Radio Alive With An ESP32 DevFeed: [Keep That Old Radio Alive With An ESP32]() Original publisher: [Read original article]() Author: Jenny List Published: 2026-10-08T02:00:32Z Content type: article Language: en Sources: [Hackaday]() Topics: [ESP32-S3](), [Embedded Systems](), [Bluetooth LE]() Tags: [am](), [am-radio](), [electronics](), [esp32](), [esp32-s3](), [gpio](), [radio](), [radio-hacks]() ### AI overview An ESP32-S3-based AM transmitter takes an online radio stream and radiates it through an RF pulse chain on a GPIO pin, allowing vintage tube radios to receive broadcasts. Its 200 kHz output targets the European long wave band; the article suggests a higher medium wave frequency might also be possible. ### Source excerpt As the legacy AM broadcast bands fade away, what happens to the millions of devices built to receive them? Many of them will go into e-waste, but with a century ...read more ## Undocumented ESP32 Mode Enables Radio Reception Using External SDR Software DevFeed: [Undocumented ESP32 Mode Enables Radio Reception Using External SDR Software]() Original publisher: [Read original article]() Author: Jenny List Published: 2026-10-03T17:00:31Z Content type: news Language: en Sources: [Hackaday]() Topics: [ESP32](), [Undocumented feature]() Tags: [esp32](), [radio-hacks](), [sdr](), [software-defined-radio]() ### AI overview An independently discovered undocumented mode on some ESP32 chips exposes the I/Q stream before the WiFi modem for processing by SDR software on an external computer. Reception supports 2.4 GHz and 5 GHz depending on the chip, but the mode does not provide transmission capabilities. ### Source excerpt Perhaps the most famous of all the software-defined radio (SDR) receivers is the RTL-SDR, a digital TV receiver on which an undocumented feature was found. Perhaps other radio-enabled chips also ...read more ## SDR- Lets You Patch Together Your Setup DevFeed: [SDR- Lets You Patch Together Your Setup]() Original publisher: [Read original article]() Author: Zoe Skyforest Published: 2026-10-01T08:00:59Z Content type: article Language: en Sources: [Hackaday]() Topics: [Tool]() Tags: [radio](), [radio-hacks](), [sdr](), [software-defined-radio](), [software-hacks]() ### AI overview SDR- is a software-defined radio program with a modular-synth-style interface. Users connect functional blocks with virtual patch cables to route signals. It includes several decoders, passive radar and direction-finding tools, with files available on GitHub. ### Source excerpt It is often helpful to think of a radio as a series of interconnected functional blocks--hence the use of block diagrams to convey how a given radio operates. [Julian Haag] ...read more ## Synthetic Aperture Radar Drone Gets Interferometric Imaging DevFeed: [Synthetic Aperture Radar Drone Gets Interferometric Imaging]() Original publisher: [Read original article]() Author: Aaron Beckendorf Published: 2026-09-28T20:00:17Z Content type: article Language: en Sources: [Hackaday]() Topics: [Medical imaging](), [3D]() Tags: [drone](), [fmcw-radar](), [fpga](), [gps](), [hardware](), [interferometry](), [radar](), [radio-hacks](), [radio-interferometry](), [rtk](), [rtk-gps](), [software](), [synthetic-aperture-radar]() ### AI overview The article describes improvements to a synthetic-aperture radar imaging drone, including autofocus, more accurate positioning, hardware changes, and a compression algorithm for recording data. It also explains how interferometric imaging uses flights at different altitudes to produce an elevation map. ### Source excerpt It's been more than a year since [Henrik Forstén] built the first iteration of his synthetic-aperture radar (SAR) imaging drone, and he's certainly been productive in the meantime. Not only ...read more ## Handheld Scanner is a Radio Multi-tool DevFeed: [Handheld Scanner is a Radio Multi-tool]() Original publisher: [Read original article]() Author: Zoe Skyforest Published: 2026-09-24T18:30:05Z Content type: article Language: en Sources: [Hackaday]() Topics: [ESP32-P4](), [ESP32](), [lora](), [Microcontroller](), [touchscreen]() Tags: [device](), [display](), [esp32](), [esp32-p4](), [gps](), [handheld](), [lora](), [microcontroller](), [radio](), [radio-hacks](), [rtl](), [scanner](), [sdr](), [touchscreen]() ### AI overview The LakeShark is a pocket-sized radio scanner built around the LilyGO T-Display P4, an ESP32-P4 microcontroller board with a touchscreen, LoRa radio, GPS, and an inertial measurement unit. It also connects to an RTL-SDR device to support scanning P25, ADS-B, POCSAG, FM, and other radio activity. ### Source excerpt These days, it's possible to cram a whole lot of radio functionality into a very compact device. A great example of that is the LakeShark scanner from [SAMS0N1TE]. The LakeShark ...read more ## Reviving TEMPEST Attacks with an Injected Signal DevFeed: [Reviving TEMPEST Attacks with an Injected Signal]() Original publisher: [Read original article]() Author: Aaron Beckendorf Published: 2026-09-20T23:00:06Z Content type: article Language: en Sources: [Hackaday]() Topics: [TEMPEST](), [Security](), [circuit]() Tags: [attacks](), [circuit](), [computer](), [eavesdropping](), [emissions](), [mixing](), [radio](), [radio-hacks](), [rf-modulation](), [sdr](), [security](), [security-hacks](), [side-channel-attacks](), [tempest]() ### AI overview The article describes InjectEave, a technique that irradiates modern electronics with a tuned radio-frequency signal to induce emissions from internal antennas. Nonlinear components mix the injected and internal signals, allowing attackers to recover audio and detect device states over short distances, including through walls. ### Source excerpt TEMPEST attacks are often the most effective way to break air-gapped security: rather than directly accessing a computer, the attacker records the system's unintended radio emissions and uses them to ...read more