<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# Performing LoRaWAN Security Assessment — API & Tool Reference

> Quick reference for tools, commands, and APIs used in performing-lora-wan-security-assessment.

## Tools


### `hackrf_transfer`

HackRF SDR data capture tool

**Usage:**
```bash
hackrf_transfer -r <output> -f <freq> -s <sample_rate>
```

**Key Flags:**
  - `-r: receive mode output file`
  - `-f: center frequency in Hz`
  - `-s: sample rate`
  - `-g: RF gain`
  - `-l: IF gain`

---

### `gr-lora`

GNU Radio LoRa transceiver blocks

**Usage:**
```bash
grcc lora_rx.grc
```

**Key Flags:**
  - `--freq: center frequency`
  - `--sf: spreading factor`
  - `--bw: bandwidth`

---

### `nmap`

Network scanner for gateway assessment

**Usage:**
```bash
nmap -sV <target>
```

**Key Flags:**
  - `-sV: service version detection`
  - `-p: port range`

---

### `tshark`

Packet analysis for backhaul traffic

**Usage:**
```bash
tshark -r <capture> -Y <filter>
```

**Key Flags:**
  - `-Y: display filter`
  - `-T fields: field extraction`

---


## Integration Notes

- All tools should be run with least-privilege access appropriate to the task
- Log all tool invocations for audit trail
- Validate tool output before acting on results
- Cross-reference findings with multiple tools where possible

## See Also

- Parent skill: [Wireless Security](../../../SKILL.md)
- Technique SKILL.md: [../SKILL.md](../SKILL.md)
