-HELP- Rf Hacking Roadmap/Guide

[Zurga]

Hey everyone,

I'm an embedded software engineer getting into RF hacking/security, and I'd love some guidance from this community.
What I'm struggling with online resources for RF Hacking feel very scattered compared to web/network security. There's no clear path like there is for CTFs in traditional cybersecurity. I've found PySDR, HackRf Youtube videos, rtl-sdr.com and a few DEFCON talks but that's about it.

Any pointers would be greatly appreciated. Thanks in advance.

[opmast1243]

Coming from embedded, you're already ahead of most beginners. I'd suggest focusing on SDR fundamentals first (signals, modulation, spectrum analysis) through PySDR, then pick a platform like RTL-SDR or HackRF and start reversing simple real-world protocols (weather stations, TPMS, garage remotes, etc.).

The closest thing to a roadmap is probably: RF basics → SDR tooling (GNU Radio, Inspectrum, Universal Radio Hacker) → protocol reverse engineering → replay/spoofing → custom transceivers and firmware.

Snow Rider

Also, don't overlook old DEFCON/ToorCon RF talks and Great Scott Gadgets content. RF security is definitely more "learn by doing" than following a structured CTF path.