← Back to TelcoSec Arsenal

Universal Radio Hacker (URH)

RF / Wireless Signaling / SDR

Complete wireless protocol reverse-engineering suite for recording, demodulating, decoding, and fuzzing custom RF signals and cellular bursts.

Domain / CategorySignal Reverse-Engineering & Protocol Decoder
Required HardwareHackRF / RTL-SDR / USRP / BladeRF / LimeSDR
Primary Binaryurh
⚡ Quick Telecom Protocol BriefRF / Wireless Signaling / SDR

Universal Radio Hacker (URH) is an open-source Signal Reverse-Engineering & Protocol Decoder component included in TelcoChisel for telecommunications security auditing. It targets RF / Wireless Signaling / SDR infrastructure for compliance with 3GPP and GSMA telecom security standards.

Primary Binary: urhHardware: HackRF / RTL-SDR / USRP / BladeRF / LimeSDR

Universal Radio Hacker (URH) — RF Protocol Analysis Suite

Universal Radio Hacker (URH) is a complete software suite for wireless protocol analysis with direct SDR transceiver support. In TelcoChisel, URH includes pre-loaded modulation decoders (FSK, ASK, PSK, QAM), cellular burst decoders, and integrated signal replay engines.

Key Features

  • Raw I/Q Signal Demodulation: Visually inspect analog I/Q spectrum waterfalls, detect symbol rates, and calculate carrier offsets.
  • Bit-Level Protocol Analysis: Automatically detect preamble patterns, synchronization words, and packet lengths in captured cellular and wireless transmissions.
  • RF Packet Injection & Fuzzing: Transmit crafted packets and altered frames directly through supported full-duplex SDR hardware (HackRF, USRP, BladeRF).

Pre-installed TelcoChisel Cheatsheet

1. Launch URH Graphical Interface

# Launch URH with native Qt hardware acceleration
urh

2. Capture Wireless Signal from CLI

# Record 10 seconds of raw I/Q data on 868 MHz using HackRF
urh_cli --device HackRF --frequency 868M --sample-rate 2M --gain 20 --duration 10s --output /tmp/capture.complex

Practice in TelcoSec Cloud Academy

To practice RF signal demodulation and protocol fuzzing in hands-on cloud labs: 👉 Access the RF & Signal Analysis Lab at App.TelcoSec.Net

Cloudflare D1 Verified

Community Test Notes & Field Feedback

No community field notes posted yet. Be the first telecom engineer to leave feedback!