← 返回日报
精读 预计 4 分钟

QuadRF can spot drones and see WiFi through my wall

摘要

QuadRF 是一款围绕 Raspberry Pi 5 和 FPGA 板构建的相控阵无线电,具备皮秒级时间精度,内置软件可流式解码 RF 信号,并可将输出传输到更强大计算机进行 WiFi 流量分析。它能穿墙看到 5 GHz WiFi,并能跟踪无人机。作者通过 Hackaday 发现后联系开发者 Martin McCormick(曾参与 SpaceX Dishy 项目),该项目最初为月球尺度天线阵列(支持 EME 实验和射电天文学)开发,但已缩小到手持尺寸(4.9-6 GHz),可通过开源社区扩展至 1.15 MW EIRP 功率。测试过程显示:连接 WiFi 热点后访问 http://quadrf/ 可运行 GNU Radio 等工具和 AR RF 可视化器,后者将 4.9-6 GHz 频率以彩色 blob 形式展示,5.5 GHz WiFi 网络显示为浅蓝相邻网络为红绿。搭配 Mobile Expansion Pack(电池与手持支架)可实时移动 C 频段分析。作者用 DJI Mini Pro 4 无人机测试,QuadRF 能成功定位并追踪飞行轨迹。关键技术包括利用 Raspberry Pi 5 MIPI 接口实现 >5 Gbps 低延迟 I/Q 流式传输(无需额外硬件成本),支持多模块级联计算相位移位。文章强调此为预生产原型,UI 略显粗糙但功能可用,并提醒政府已有类似工具,鼓励开源与合法应用。

荐读理由

QuadRF 利用 Raspberry Pi 5 MIPI 接口 >5Gbps I/Q 流,低延迟全双工,无 USB 成本,daisy-chain 多个模块可相移计算;通过 WiFi 热点连 http://quadrf/ 访问 VNC GNU Radio 视觉化 4.9-6GHz 频段,能实时在工作室看到 5GHz WiFi 网络(蓝色),并用手持电池版携带 DJI Mini Pro 4 无人机实飞追踪。

原文

QuadRF can spot drones and see WiFi through my wall

Jul 10, 2026

QuadRF antenna array from front

The QuadRF (pictured above) a phased-array radio built around a Raspberry Pi 5 and an FPGA board with picosecond-level timing. It does advanced signal processing and beamforming.

It can see WiFi through walls and track drones in flight.

If the open source community can come up with something like this, just imagine what governments are capable of.

When you plug a computer into a network, tools like Wireshark can show all the hidden traffic you might not even know is there. WiFi packets are the same, but those travel through the air, allowing snooping without physical access.

The QuadRF has built-in software that can stream and decode RF, and you can pipe it out to a more powerful computer for things like WiFi traffic analysis.

I mention this not to scare you—governments have had tools like these for years. It's just better to know what's possible and expose bad security practices than to ban useful tools like these. So if you're in the CIA, don't get any ideas.

To the Moon

ScaleRF Moon Array with large apeture

After spotting QuadRF on Hackaday, I reached out to Martin McCormick, who's been working on QuadRF as part of a bigger project: a Moon-scale antenna array, capable of EME (Earth-Moon-Earth) radio experiments and radio astronomy.

I think Martin took inspiration from Dishy, SpaceX's original Starlink terminal. (Makes sense, since Martin worked at SpaceX on the team that built Dishy!)

Instead of locking this phased array antenna system into a proprietary satellite system, licensed operators will ideally be able to chain multiple QuadRF modules together for interesting radio experiments, with up to 1.15 MW EIRP—basically, a massive amount of directional antenna gain, for high power RF fun.

But QuadRF is scaled down to handheld-size, and while it isn't powerful enough to send a signal to the moon, it's still quite useful in local SDR applications and visualizing the RF environment—at least in it's frequency range of 4.9-6 GHz.

Testing QuadRF

But I specifically asked Martin if he'd be willing to send over a prototype QuadRF for my Dad (a retired broadcast radio engineer) and I to test.

I had already placed a pre-order on Crowd Supply (where a basic kit is $499), but I wanted to see if QuadRF was really as useful or intuitive as it seemed from the videos ScaleRF posted.

Spoilers: it's still a little rough in the UI department, but I was blown away by how well it works. Especially considering everything's running on a Raspberry Pi 5.

When you turn it on, the Pi boots up and creates a WiFi hotspot. You connect to that, and visit http://quadrf/. That page runs a VNC session in your browser, where you can launch apps from GNU Radio to SDR software, and even their custom AR (Augmented Reality) RF visualizer.

The AR visualizer is the most interesting included software, despite being less useful for real-world SDR applications.

QuadRF showing augmented reality WiFi signal overlay on laptop

The UI is a little rough, but you can adjust the alignment between your camera and the phased array, and the gain of the receiver.

Then it will visualize frequencies from 4.9-6 GHz as colorful 'blobs'. The scale is not shown on the display in this early version, but from my testing around the studio, my 5 GHz WiFi network (which was running on Channel 100, or around 5.5 GHz) showed up light blue. Neighboring WiFi networks were showing up red or green.

If you order the Mobile Expansion Pack, it incorporates a battery power pack, and a handheld phone mount, so you can walk around analyzing part of the C-band in real-time.

QuadRF showing 5 GHz signal over drone in augmented reality mode

My Dad and I flew his DJI Mini Pro 4 behind the studio, and the QuadRF had no trouble picking it out of the sky. As it flew away, I had to increase the gain to keep seeing it; it would be nice to have AGC or an easier gain control as the UI was a little clunky when carrying around the contraption.

It sounds like the crowdfunding campaign is already beyond expectations, and they'll be switching the enclosure to an injection mold (the version I have is 3D printed).

Raspberry Pi 5 MIPI for high-bandwidth RF

QuadRF open showing Raspberry Pi 5 and MIPI connection to FPGA antenna board inside

One aspect that intrigued me was the use of the Raspberry Pi's MIPI lanes for low latency SDR streaming I/Q (In-phase/Quadrature) at data rates over 5 Gbps. From the QuadRF Documentation:

The novel approach of streaming I/Q over the Pi’s camera and display FFC MIPI connectors has many benefits. MIPI can handle >5 Gbps, low-latency, full-duplex data transfer through the Pi’s RP1 chip. It is simpler and more reliable than USB, adds almost zero hardware cost to the RF board, and can sustain hundreds of MSPS of I/Q with no hiccups or sample loss. Considering cameras and displays are the ultimate form of high-bandwidth signal streaming, it makes sense their standard digital interface is a great match for SDR! We think the industry should adopt it more widely!

It sounds like they had to reverse-engineer the MIPI protocol used on the Pi 5 to do this (since it goes through the RP1 chip), and the way it's architected, you can daisy-chain multiple QuadRF modules together, letting each module calculate it's own phase shift.

I'm not sure how that will work in practice, but it sounds pretty neat. PCIe could probably work in a pinch, too, but this implementation frees up the PCIe connector in case you want high speed storage or even higher speed networking than the Pi offers.

Conclusion

As with all pre-production gear I test, take everything I've shown with a grain of salt. And with any crowdfunding campaign, if you back it, don't expect the QuadRF to show up on your doorstep overnight.

I was initially skeptical about how useful and fun this little handheld phased array could be, but after using it for a week, I can't wait until the one I pre-ordered ships!

Hacker News · 145 赞 · 49 评 讨论 → 阅读原文 →

这条对你有帮助吗?