SineFM

by tulip
🚩 CTFs IrisCTF 2025 radio
SineFM / IrisCTF 2025

Description

While browsing the radio spectrum, I found this interesting radio channel on 434.677 MHz with some intermittent activity. I'm having some trouble making sense of it, but I'm fairly certain that this is being used as some sort of communications channel. Can you find out what's being transmitted?
nc sinefm-f94347f3.radio.2025.irisc.tf 6531

Note: This writeup uses software and terms from the RFoIP writeup, recommended you read that first if you are new to radio.

Following from the same principle as before, we connect to the TCP source and listen in, analysing the incoming signal. The signal here is compressing and rarefacting very rapidly, which is a telltale sign of an FM encoded signal. FM stands for frequency modulation and is a common technique used to transmit data over radio.

What this means is that the encoded message will have a constant amplitude, with varying frequency. This is exactly what we see here and GRC has a decoder for this built into it. We’ll use the NBFM Receive blocks and the Multiply Const blocks are to increase the ampliude of the signal so we can actually hear. Finally connect it to an Audio Sink to be able to actually hear the decoded signal.

fm flow chart

The NBFM receive blocks take in complex FM encoded signals and spit out float data, so we can plug this float data into an amplifier and to our audio sink.

From this flow chart, we can hear the flag on the radio.

Flag: irisctf{grc_is_great_for_simple_narrowband_modulation}

Share this writeup

Contribute

Found an issue or want to improve this writeup?

Edit on GitHub