Radio Side Channel Attack Utilization (TempestSdr): monitor the content displayed on the monitor

Category: Tag:

The first time I came into contact with tempestsdr was at the end of 2017. Someone used a hackrf and a directional antenna to sniff the electromagnetic leakage of the display. It was really cool, and I always wanted to reproduce it.

Files to download
The compiled tempstsdr tool:
sdrsharp download:
zadig download:



hackrf(It can also be RTL-SDR, or AIRSPY, etc.), Lenovo desktop comes with a monitor

Environment configuration

windwos10(Here use zadig to install the driver of hackrf one to ensure that you can use sdrsharp to call hackrf one to listen to the radio)

Determine the parameters of the monitor to be monitored

It can be seen that the screen resolution is 1600*900, and the screen refresh rate is 60Hz

Use sdrshrap to identify the radiation frequency of the display

After opening the tempest Test for Windows.exe on the tested computer to play the corresponding test video, here I adjusted the frequency to 409.987.500Mhz and then I can listen to the corresponding “To Alice” electronic broadcast sound, indicating that I have a Lenovo monitor The radiation frequency of sdrshrp is 409.987.500Mhz. (Everyone who uses sdrshrp here should pay attention to adjusting the gain of sdrsharp and other parameters, and use NFW to listen)

Video presentation:


Use compiled tempestsdr to sniff screen information

First select the corresponding hardware. It is recommended to increase the two parameters of RX LNA and RX VGA.

Start sniffing the contents of the display



There are no reviews yet.

Be the first to review “Radio Side Channel Attack Utilization (TempestSdr): monitor the content displayed on the monitor”

Your email address will not be published. Required fields are marked *