Description
Marauder has been developed for activities requiring a discreet capture of RF data, typically keypress of keyfobs (alarms, cars, gate openers…).
The Marauder can be set up to automatically listen and record all RF data on pre-configured frequencies. Captured data is automatically demodulated and saved internally in the product’s internal memory. RF data can be replayed when needed using the dedicated Android application.
Once started, the Marauder is entirely autonomous.
Features
Not connected to smartphone
Marauder doesn’t require a smartphone to work. Once configured, it can be placed within the target device range and record RF binary data. RF setup/capture/replay can be done using built-in buttons or using the Android application (preferred method). Device can be set up to automatically record all RF data on pre-configured frequencies. Data is saved internally and can be replayed when needed. Using this option the product becomes entirely autonomous.
Dedicated Android application
The Marauder includes a dedicated Android application with a simple interface, focused on autonomous listening. All you need to do is set the frequency to listen and the Marauder will start capturing.
Export captured data into phone storage
Captured data can be exported to a JSON file in the phone’s internal storage.
Replay from the same Marauder
When you retrieve your Marauder, it synchronizes with the app and captured data is saved on the smartphone. Data can be replayed when needed or exported for analysis.
Timestamps of each capture
Each data includes the date and time of the capture. It allows user to easily distinguish between captures of interest and captures that are out of scope.
Multi frequency
The Marauder can be set up to listen and record data on one or 2 pre-configured frequencies, based on the variant.RF capture Timestamps
For each recorded RF capture, the Marauder Standard also stores a timestamp to precisely identify when the capture was done (1s precision). When synchronized, the application displays the date and time of each RF capture, making it easy to keep track of the stored RF data.
Rolling code support
Marauder Ultimate integrates with Kaiju – Rolling code analyzer & generator, to analyse the captured data and display rolling code information directly from the Android Application.
Captured data can also be viewed directly on Kaiju web application. Marauder Ultimate includes support for garage/gate openers rolling codes.
Optional support for cars can be purchased separately.
Replay captured data on any PandwaRF Rogue
Data can be transferred from a Marauder to another PandwaRF Rogue version (Pro or Gov), where it can be replayed. This allows better teamwork, where one user records the data and sends it to other users for replaying captures.
Model analysis
Marauder Ultimate includes a data processing feature. Using a powerful post-processing algorithm and an integrated device database, it can automatically analyze the captured RF data and find what brand/model the data is being captured from. This allows the attacker to clone and impersonate the target’s remote control faster and effortlessly.
Filter captured data by device model/brand
Captured data can then be organized by time, device model and brand (and several other filters), making it easy to filter out relevant RF captures.
Compatible with the Rogue Gov Model searcher
Marauder Ultimate is fully compatible with the Rogue Gov Model searcher.
After export, the data captured autonomously by the Marauder can be imported into a Rogue Gov. The Rogue Gov will identify the keyfob (ARM/DISARM/OPEN/…) action corresponding to the data and, using its Function Inversion feature, will be able to transform an “Alarm ARM” message into an “Alarm DISARM” message or vice versa.
This way a single RF message captured from the alarm keyfob is enough to impersonate the target’s device.
Scan/connect without Android Location permission
On some Android phones and versions, Bluetooth Low Energy (BLE) scanning will only work if Location services are enabled on the device. This is a requirement from Google. If you don’t grant location permission to the app, the scan may not find any BLE device.
We are aware that this is not convenient for user discretion so the Marauder Android application includes a scanning mode that bypasses completely the need for the user to have GPS enabled.
Customizable device name
To be more discreet and not alert the potential target, the Marauder device name can be changed from the application to a more common Bluetooth Low Energy device name, at user’s choice.
Deactivated LEDs
This option allows a more discreet usage of the product. All the LEDs, signaling the data capture and transmission, the charging and the status of the device, are deactivated.
Stealth BLE advertizing
To be even more discreet, Marauder Ultimate includes the possibility to de-activate the Bluetooth Low Energy advertising. This makes the Marauder Ultimate completely invisible wrt RF transmission.
3-year warranty
This version of Marauder includes a 3-year warranty from the date when the product is shipped (instead of our standard 2-year warranty).
Replacement within 1 week
Should you encounter an issue with PandwaRF Marauder, your defective unit (due to electronic or component problems) will be replaced within one week from reporting the issue and returning the defective product.
Premium technical support
The purchase includes priority technical support to make sure you are getting the most out of PandwaRF Marauder. We’re here to help!
No marking on enclosure
Marauder Ultimate is shipped with an additional cover case with no logo or product name marking on the plastic enclosure. This allows a more discreet usage of the product.
