开云体育

ctrl + shift + ? for shortcuts
© 2025 开云体育

Re: Scanning for unknown mobile phone


 

开云体育

Diez,

The problem you have is that a mobile phone will be in 'sleep' mode for the duration of the time, it will 'wake' up and transmit to the base station to make sure its not moved and then will go back to 'sleep'. The only time you would be able to direction find the phone is when its in a call, you would also then need to know what it is transmitting on (2 / 3 / 4G or 5G-NSA) and then look at the uplinks for those bands. Even with a phone in a call, if it is using 3, 4 or 5G-NSA it will use minimum power to transmit, so looking on the TinySA you may see a large signal transmitting in the uplink of the band but it may not be the phone / device you are looking for. The best way to find a device would be to use an inhibitor in the suspected room, with the TinySA looking at the full spectrum, when you then turn off the inhibitor, all cellular devices will then try and connect to the mobile network, you may see it then.

Cellular detection is a nightmare without the right equipment.?

Kind Regards,

Lee Johns

Lee Johns
Search Training Consultant



From: [email protected] <[email protected]> on behalf of Diez B. Roggisch via groups.io <deets@...>
Sent: 25 January 2025 11:21
To: [email protected] <[email protected]>
Subject: [tinysa] Scanning for unknown mobile phone
?
Hey folks,

I've bought a TinySA a while ago for some other project, but something
has cropped up that? makes me wonder if it can help here. I'm not an RF
professional, I know enough to know I don't know anything.

A good friend is going through a breakup, and there's credible evedince
their evicted ex has been spying on them. We did find a hidden
smartphone running a baby monitor app already. Wifi/Network are changed,
so any devices relying on that (e.g. ESP32-equipped power bars) are
eliminated.

However we have reason to suspect there's a cellphone hidden in or the
vicinity of the bedroom. My current approach is to inspect the power
outlets one by one to see if a power supply has been connected and the
setup stowed away behind some paneling.

I wonder if there's a way to use the TinySA to home in on such a device
as well. I've done some limited resarch into it, and found e.g. videos
of people using a HackRF to decode some cellular traffic between the
base station and their smartphone. These were quite sophisticated,
seemed to rely both on a lot of protocol knowledge (I don't have) and
even prior information from the smartphone itself about used
channels/modulations, that for obvious reasons also are unknown. I don't
even know which kind of technology is being used. 3G, 4G are most
likely, but these to my knowledge are umbrella-terms that cover a broad
range of frequencies and modulations and other protocol details. So I'm
just overwhelmed where to start.

If somebody has some idea if the TinySA can be used to at least detect
the presence if not precise location of a cell phone so we can be sure
that we have to rip half the room apart, that would be splendid. I know
it's a moonshot and if it is just not working that way, then I'll accept
that as well.

Thanks for your consideration, and I'll be back in the future with my
actual purpose I bought the little bugger for.

Cheers,

Diez







Join [email protected] to automatically receive all group messages.