search

RUB-SysSec / DroneSecurity

DroneSecurity (NDSS 2023)
GNU Affero General Public License v3.0
925 stars 169 forks source link

Unable to Lock into Mavic 2 (Ocusync 2) Drone Frequency #30

Open BryanCastorius opened 1 week ago

BryanCastorius commented 1 week ago

Dear @mrlnc,

My current setup uses USRP B-205 mini connected to a 2.4/5.8 GHz antenna for the RX2 to decode DJI Mavic 2 which uses Ocusync 2.0 protocol. I tried running the code both in indoor and outdoor environment and encounter the same issue, which it still stuck at the endless loop of trying to find the center frequency. Screenshot from 2024-07-03 16-19-57 As I read through the code, I noticed that the list of frequencies are hard coded, is there a way to obtain the drone's actual frequency that it is communicating so that it can lock to it.

Furthermore, I have tried setting the 'Legacy = True' and still obtain the same problem.

Anirudhx234 commented 1 week ago

Hi, sorry that this is a bit unrelated, but were you able to get decoded payloads using the offline receiver? I'm currently trying to do it with a different SDR but have had no luck

BryanCastorius commented 1 week ago

@Anirudhx234

Yup, the offline receiver works perfectly fine for mine.

Anirudhx234 commented 1 week ago

@BryanCastorius Ok, good to know. I assume you ran the offline receiver in legacy mode since you're using the Mavic 2 Pro? I get the following error when I run it in legacy mode, so I was wondering if you made any changes to the original code. It seems to be locating the packet correctly based on the spectrum but I'm stuck here... image