INTERCEPT

📟 Pager Mode

• Decodes POCSAG and FLEX pager signals using RTL-SDR
• Set frequency to local pager frequencies (common: 152-158 MHz)
• Messages are displayed in real-time as they're decoded
• Use presets for common pager frequencies

📡 433MHz Sensor Mode

• Decodes wireless sensors on 433.92 MHz ISM band
• Detects temperature, humidity, weather stations, tire pressure monitors
• Supports many common protocols (Acurite, LaCrosse, Oregon Scientific, etc.)
• Device intelligence builds profiles of recurring devices

✈️ Aircraft Mode

• Tracks aircraft via ADS-B using dump1090 or rtl_adsb
• Interactive map with real OpenStreetMap tiles
• Click aircraft markers to see callsign, altitude, speed, heading
• Map auto-fits to show all tracked aircraft
• Emergency squawk codes highlighted in red

🛰️ Satellite Mode

• Track satellites using TLE (Two-Line Element) data
• Add satellites manually or fetch from Celestrak by category
• Categories: Amateur, Weather, ISS, Starlink, GPS, and more
• View next pass predictions with elevation and duration
• Monitor for Iridium satellite bursts

📶 WiFi Mode

• Requires a WiFi adapter capable of monitor mode
• Click "Enable Monitor" to put adapter in monitor mode
• Scans all channels or lock to a specific channel
• Detects drones by SSID patterns and manufacturer OUI
• Rogue AP detection flags same SSID on multiple BSSIDs
• Click network rows to target for deauth or handshake capture

🔵 Bluetooth Mode

• Scans for classic Bluetooth and BLE devices
• Shows device names, addresses, and signal strength
• Manufacturer lookup from MAC address OUI
• Radar visualization shows device proximity

Monitor Mode

• Enable Monitor: Puts WiFi adapter in monitor mode for passive scanning
• Kill Processes: Optional - stops NetworkManager/wpa_supplicant (may drop other connections)
• Some adapters rename when entering monitor mode (e.g., wlan0 → wlan0mon)

Handshake Capture

• Click "Capture" on a network to start targeted handshake capture
• Status panel shows capture progress and file location
• Use deauth to force clients to reconnect (only on authorized networks!)
• Handshake files saved to /tmp/intercept_handshake_*.cap

Drone Detection

• Drones detected by SSID patterns (DJI, Parrot, Autel, etc.)
• Also detected by manufacturer OUI in MAC address
• Distance estimated from signal strength (approximate)
• Click drone count in stats bar to see all detected drones

Rogue AP Detection

• Flags networks where same SSID appears on multiple BSSIDs
• Could indicate evil twin attack or legitimate multi-AP setup
• Click rogue count to see which SSIDs are flagged

Proximity Alerts

• Add MAC addresses to watch list for alerts when detected
• Watch list persists in browser localStorage
• Useful for tracking specific devices

Client Probe Analysis

• Shows what networks client devices are looking for
• Orange highlights indicate sensitive/private network names
• Reveals user location history (home, work, hotels, airports)
• Useful for security awareness and pen test reports

General Tips

• Collapsible sections: Click any section header (▼) to collapse/expand
• Sound alerts: Toggle sound on/off in settings for each mode
• Export data: Use export buttons to save captured data as JSON
• Device Intelligence: Tracks device patterns over time
• Theme toggle: Click 🌙/☀️ button in header to switch dark/light mode

Keyboard Shortcuts

• F1 - Open this help page
• ? - Open help (when not typing in a field)
• Escape - Close help and modal dialogs

Requirements

• Pager/433MHz: RTL-SDR dongle, rtl_fm, multimon-ng, rtl_433
• Aircraft: RTL-SDR dongle, dump1090 or rtl_adsb
• Satellite: Internet connection for Celestrak (optional)
• WiFi: Monitor-mode capable adapter, aircrack-ng suite
• Bluetooth: Bluetooth adapter, hcitool/bluetoothctl
• Run as root/sudo for full functionality

Legal Notice

• Only use on networks and devices you own or have authorization to test
• Passive monitoring may be legal; active attacks require authorization
• Check local laws regarding radio frequency monitoring