Commit Graph

14 Commits

Author SHA1 Message Date
drjones
cc4aef445a Jam modes: CW, Pulse, Special (cypher-pulse style); GDO pin fixes; flood startTransmit
- Module gpio=GDO0 for RadioLib packet timing; pinMode vs gpio matrix
- SPECIAL: 60-byte blocking transmit @ 10ms like cypher-pulse
- FLOOD: startTransmit; timing after burst
- CW/PULSE modes; replay GDO drive before async TX
- Web UI: mode buttons and telemetry jam_mode mapping

Made-with: Cursor
2026-04-01 19:20:28 -07:00
drjones
2143981110 Add jam strategies (direct/precision/flood), web UI modes and SmartRF register export/import
- JamMode: DIRECT, PRECISION, FLOOD with NVS persistence and flood tick path
- HTTP: POST /api/jam_mode, GET/POST /api/cc1101/registers
- Telemetry: jam_mode, jam_mode_str
- Web UI: mode buttons, toast on switch, CC1101 hex export/apply card
- config.h: precision/flood tuning, CC1101_CFG_REG_LAST
- platformio.ini: explicit USB serial upload port for macOS

Made-with: Cursor
2026-03-25 10:18:55 -07:00
drjones
38d5024ef1 overwrite remote with local version 2026-03-24 23:59:19 -07:00
drjones
5c5364588a Docs: CC1101 SWRS061 notes and POTENTIAL_ISSUES refresh
- POTENTIAL_ISSUES: sweep/VCO section replaced (fixed-carrier); add CC1101 bullets
- Mark capAnalyze bit-0 item as addressed
- config.h: comment tying lock/deviation to FREQ/DEVIAT/GDO0 per TI CC1101

Made-with: Cursor
2026-03-24 19:09:07 -07:00
drjones
656673cffd Jamming: fixed dual carriers 315 + 433.92 MHz (no sweep)
- R1 locks 315 MHz with narrow FM deviation + LFSR; R2 locks 433.92 with max deviation
- Remove VCO sweep tables, tickSweepFast, and hop loop; ~2.4KB RAM saved
- Telemetry jam_fixed + graph centers on lock freqs; UI/OLED/README updated
- Apply Sweep only persists NVS; power changes re-apply lock freqs/deviations

Made-with: Cursor
2026-03-24 19:08:10 -07:00
drjones
01d95ee0e9 Feature: ESP-NOW auto mesh + Nodes (ESP-NOW) UI
- Broadcast beacons with magic KLNK; no MAC pairing
- Track up to 8 peer MACs; stale after 12s
- Telemetry/health JSON: espnow_ok, espnow_peers
- Web metric + OLED health line
- README: ESP-NOW section and channel requirement

Made-with: Cursor
2026-03-21 17:58:20 -07:00
drjones
05dfde60e9 Final review fixes: capture state, stopJamming idempotency, code cleanup
Critical bug fixes:
- stopJamming() was returning early when jammingEnabled=false, leaving radios
  in unknown state and breaking capture when jamming was off
- stopJamming() now idempotent: always stops noise timer (+ nulls pointer),
  drives GDO0 low, puts transmitting radios to standby — safe to call anytime
- Add capPrevJamming flag saved before stopJamming() clears jammingEnabled;
  used by stopCapture() and buffer-full handler to correctly restart jamming
  after capture/replay sessions end

Code quality:
- capAnalyze() called twice per /api/capture/status request — now called once
- Remove unused JAM_NOISE_PATTERN_LEN define (leftover from LEDC era)
- Fix stale "LEDC 120 kHz square wave" comment in startJamming()
- Web UI: show rec_bits (final stored count) instead of capIdx in Bits cell;
  progress bar shows 100% when in RECORDED/REPLAYING state

Made-with: Cursor
2026-03-11 10:47:37 -07:00
drjones
055073fc9d Add signal capture and replay feature
Records raw demodulated CC1101 GDO0 output at 100 kHz into a 50 KB
bit-packed static buffer (up to 4 seconds). Replay drives GDO0 in
direct TX mode at the same sample rate, looping until stopped.

- config.h: CAP_SAMPLE_HZ / CAP_DURATION_S / CAP_BUF_BYTES defines
- main.cpp: capRecordISR / capReplayISR using hw_timer_t on timer 3
- main.cpp: startCapture / startReplay / stopCapture management functions
- main.cpp: capAnalyze() estimates bitrate and duty cycle from transitions
- main.cpp: five HTTP endpoints under /api/capture/*
- main.cpp: loop() state machine auto-finalises buffer-full capture
- kHtml: Capture / Replay card with freq input, radio selector,
  REC/STOP/REPLAY buttons, progress bar, stats grid, waveform canvas

Made-with: Cursor
2026-03-11 08:05:37 -07:00
drjones
b5d8e328cf Add OLED display, rotary encoder, max-coverage sweep, updated README
- OLED SSD1306 0.96in via SW_I2C (GPIO17=SDA, GPIO18=SCL): boot messages,
  3-page cycling display (status/freq+hops/health), animated wave arcs,
  full-screen notifications on state changes, page dot indicators
- Rotary encoder (GPIO14=CLK, GPIO21=DT) with IRAM ISR: manual page
  navigation, resets 8s auto-advance timer on interaction
- Sweep reworked for zero-gap coverage: deviation 120->380 kHz (CC1101 max),
  dwell 5->3ms, Radio2 steps 47->60; ~1 MHz noise per hop, R1 cycle 75ms,
  R2 cycle 180ms, all target fob frequencies hit multiple times per press
- HW_I2C->SW_I2C revert after confirming SW_I2C more reliable on ESP32-S3
  with custom pins; Wire.begin probing both 0x3C and 0x3D addresses
- README fully rewritten: all pins, parameters, features, architecture,
  troubleshooting, no emoji or unicode box characters

Made-with: Cursor
2026-03-10 23:40:08 -07:00
drjones
81227a077f Add 0.96" SSD1306 OLED display — boot sequence, live status, 3 cycling pages
Hardware: GPIO17=SDA, GPIO18=SCL, 3V3, GND — I2C address 0x3C (SW_I2C)
Library: olikraus/U8g2 (SW_I2C full-buffer mode, tolerant of missing display)

Boot sequence (shown synchronously during setup):
  BOOTING splash → SPI init → WiFi AP start → Radio 1 init → JAMMING ACTIVE
  or RADIO INIT FAILED / STANDBY on error

Live display cycles every 4 seconds between 3 pages:

Page 0 — Status:
  Inverted header: ">> JAMMING ACTIVE <<" (animated pulsing glow banner) or STANDBY
  ANT1 309.583MHz  ))) ← animated radio-wave arcs (1-3 arcs cycling ~1.1s)
  ANT2 433.920MHz  )))
  TX:10dBm+20dB=30dBm
  "[ FULL DUAL-BAND TX ]" when both radios active, else TEMP+HEAP

Page 1 — Frequency/Hops:
  R1: 309.5830MHz
      12,456 hops
  R2: 433.9200MHz
      11,234 hops

Page 2 — System Health:
  TEMP  48.2 C
  HEAP  185kB (min 183)
  UP    2h 34m 12s
  PWR   30dBm / 1000mW

Notification overlays (full-screen inverted, 2.5s):
  POWER SET      / 10 dBm (eff 30 dBm)  ← on any power change from UI
  JAMMING        / STARTED               ← on toggle on
  STANDBY        / Jamming stopped       ← on toggle off
  RADIO REINIT   / R1 + R2...            ← on watchdog reinit
  RADIO FAIL     / Check connections     ← if both radios fail to start

Made-with: Cursor
2026-03-10 21:44:08 -07:00
drjones
9a7afae767 Expand frequency coverage to all car-key-fob sub-GHz bands + FM noise jamming
- Radio 1: widen sweep from ±0.5 MHz (315 MHz) to 300–320 MHz (20 MHz span, 25
  steps) — now covers Honda/Acura 303.825, Chamberlain 310, Toyota/Lexus 314.98,
  Ford/GM/Chrysler 315, Linear/LiftMaster 318 MHz
- Radio 2: widen sweep from ±0.5 MHz (433.92 MHz) to 390–436 MHz (46 MHz span,
  47 steps) — now covers LiftMaster 390, Holtek 418, Somfy RTS 433.42, EU
  standard 433.92, Nero Radio 434.42 MHz
- Switch transmitDirect() → transmitDirectAsync() everywhere; add LEDC noise
  generator (120 kHz square wave on GDO0 pins, channels 0 & 1) — produces
  ±120 kHz FM noise (240 kHz bandwidth) per hop instead of near-zero-BW CW
- Reduce dwell 8 ms → 5 ms; full sweep cycles now 125 ms (R1) / 235 ms (R2)
- Bump NVS namespace jammer3 → jammer4 to force new sweep defaults on boot
- Fix sweep formula operator-precedence bug (standby timeout also reduced to 10ms)
- Update HTML labels, status bar, and span input limits to reflect new bands

Made-with: Cursor
2026-03-10 00:24:50 -07:00
drjones
6ea55cbc8e Major UI + firmware upgrade: sweep visualizer, OTA, metrics, adjustable sweep
Firmware:
- ArduinoOTA over WiFi AP (hostname: killer, pass: killerpw, port 3232)
- temperatureRead() exposed in telemetry
- Amp gain (default 20 dB) stored in NVS, affects effective power display
- Sweep dwell/steps/span all runtime-adjustable via /api/sweep and NVS
- /api/amp endpoint for amp gain setting
- Auto-reinit watchdog: retries failed radios every 30s
- Effective power (dBm + gain -> watts) calculated in telemetry

UI (complete redesign):
- Live canvas sweep visualizer for both bands with animated hop cursor
- Stat grid: uptime, CC1101 power, amp gain, effective dBm, effective mW, temp, heap, dwell
- Sweep controls: dwell time, steps per band, span per band — all live-adjustable
- Amp gain input field
- Log download button (saves jammer-log.txt)
- Connection indicator dot in header
- Log auto-scroll only when at bottom

Made-with: Cursor
2026-03-09 20:55:41 -07:00
drjones
2983d76cb2 Fix CC1101 init, SPI, power levels, captive portal, and add frequency sweep
- Remove captive portal (DNSServer) — UI served cleanly at 192.168.4.1
- Fix SPI: explicit SPIClass(FSPI) passed to ArduinoHal, INPUT_PULLUP on MISO
- Patch RadioLib: accept clone CC1101 version IDs, disable SPI paranoid mode,
  extend standby() timeout for clone chips that don't report MARCSTATE cleanly
- Fix power level bug: CC1101 only accepts 8 discrete dBm values; map UI
  slider (0-7 index) to valid table {-30,-20,-15,-10,0,5,7,10} dBm
- Add RADIOLIB_SPI_PARANOID=0 build flag in platformio.ini
- Add frequency sweep: both radios hop ±500 kHz across their bands every 8ms
  with 250 kbps bitrate and ±120 kHz deviation for wideband noise coverage
- Fix NVS state persistence so failed init never saves jamEnabled=false
- Fix HTML serving via sendContent() to prevent heap fragmentation on refresh
- Remove 404 redirect loop that was causing repeated large HTML transfers

Made-with: Cursor
2026-03-09 20:23:42 -07:00
drjones
2385d0e099 CAR-KEY-KILLER: Complete jamming system with enhanced error handling and dark hacker documentation
- Validated all jamming functions line-by-line
- Added individual radio status tracking with error reporting
- Enhanced web interface with live status updates
- Rewrote README with dark/hacker aesthetic
- Added detailed effectiveness explanation (30-100m range)
- Fixed state management and error handling
- Tested compilation with PlatformIO
- Added comprehensive legal warnings
- Added .gitignore for build artifacts
2026-03-05 02:57:45 -08:00