Documentation
📖 Guide
Included Tools

Included Tools

RF Swift Tool Collection

RF Swift provides a comprehensive suite of specialized tools for radio frequency and hardware security work. This page catalogs the tools available in each pre-built image.

📈
RF Swift is in active development. The tool collection is regularly expanded and optimized for all supported architectures.

Installation Status Key:

  • ✅ Installed by default - Tool is included when you build/pull the image
  • ❌ Install manually - Tool function exists but must be run manually after container creation
  • ❓ Limited support - Tool may have architecture-specific issues

Image Hierarchy

Each RF Swift image builds upon a foundation of tools, with specialized images adding domain-specific capabilities. Understanding this hierarchy helps you choose the most appropriate image for your needs:

  graph TD;
    A[corebuild]-->B[sdrsa_devices];
    A-->C[rfid];
    A-->D[automotive];
    A-->E[reversing];
    A-->F[sdrsa_devices_antsdr];
    A-->G[sdrsa_devices_rtlsdrv4];
    B[sdrsa_devices]-->I[sdr_light];
    B[sdrsa_devices]-->J[bluetooth];
    B[sdrsa_devices]-->K[telecom_utils];
    B[sdrsa_devices]-->L[hardware];
    B[sdrsa_devices]-->H[network];
    B[sdrsa_devices]-->DT[deeptempest];
    A-->OS[osint];
    A-->AN[android];
    H[network]-->AD[ad];
    H[network]-->WB[wifi_basic];
    WB-->WF[wifi_full];
    I[sdr_light]-->M[wifi];
    I[sdr_light]-->G4[sdr_gnuradio4];
    I[sdr_light]-->N[sdr_full];
    I[sdr_light]-->I2[sdr_light_intelgpu];
    I[sdr_light]-->I3[sdr_light_nvidiagpu];
    I2[sdr_light_intelgpu]-->N2[sdr_full_intelgpu];
    I3[sdr_light_nvidiagpu]-->N3[sdr_full_nvidiagpu];
    K[telecom_utils]-->P[telecom_2Gto3G];
    K[telecom_utils]-->Q[telecom_4G_5GNSA];
    K[telecom_utils]-->R[telecom_4Gto5G];
    Q[telecom_4G_5GNSA]-->R2[telecom_5G_train];
    K[telecom_utils]-->S[telecom_5G];
    K[telecom_utils]-->T[telecom_5G_bladerf];

Tool Categories

Core SDR Devices Support

The sdrsa_devices image serves as the foundation for many RF Swift images, providing essential drivers and utilities for software-defined radio hardware.

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
UHD tools and libs USRP Hardware Driver - Universal driver for Ettus Research USRP devices uhd_adc_self_cal | uhd_fft | uhd_rx_cfile | uhd_cal_rx_iq_balance | uhd_find_devices | uhd_rx_nogui | uhd_cal_tx_dc_offset | uhd_image_loader | uhd_siggen | uhd_cal_tx_iq_balance | uhd_images_downloader | uhd_siggen_gui | uhd_config_info | uhd_modes.py | uhd_usrp_probe ✅ ✅ ✅ uhd_devices_install ✅
RTL-SDR tools and libs RTL-SDR driver and tools for RTL2832U-based DVB-T receivers rtl_biast | rtl_fm | rtl_sdr | rtl_test | rtl_adsb | rtl_eeprom | rtl_power | rtl_tcp ✅ ✅ ✅ rtlsdr_devices_install ✅
RTL-SDR v4 tools Enhanced RTL-SDR Blog v4 driver with improved performance rtl_biast | rtl_fm | rtl_sdr | rtl_test | rtl_adsb | rtl_eeprom | rtl_power | rtl_tcp ✅ ✅ ✅ rtlsdrv4_devices_install ❌ (optional alternative)
libiio and libad9361 Industrial I/O and AD9361 library for PlutoSDR and similar devices iio_adi_xflow_check | iio_attr | iio_genxml | iio_info | iio_readdev | iio_reg | iio_stresstest | iio_writedev ✅ ✅ ✅ ad_devices_install ✅
Nuand bladeRF tools bladeRF SDR tools and libraries built from source bladeRF-cli | bladeRF-fsk ✅ ✅ ✅ nuand_devices_fromsource_install ✅
HackRF tools and lib HackRF One SDR platform tools and libraries hackrf_clock | hackrf_debug | hackrf_operacake | hackrf_sweep | hackrf_cpldjtag | hackrf_info | hackrf_spiflash | hackrf_transfer ✅ ✅ ✅ hackrf_devices_install ✅
Airspy tools and lib Airspy R2/Mini and HF+ SDR receivers airspy_gpio | airspy_rx | airspyhf_info | airspy_gpiodir | airspy_si5351c | airspyhf_lib_version | airspy_info | airspy_spiflash | airspyhf_rx | airspy_lib_version | airspyhf_calibrate | airspy_r820t | airspyhf_gpio ✅ ✅ ✅ airspy_devices_install ✅
LimeSDR tools and lib LimeSDR and LimeSDR Mini SDR platform LimeQuickTest | LimeSuiteGUI | LimeUtil ✅ ✅ ✅ limesdr_devices_install ✅
Funcube tools and lib Funcube Dongle and Dongle Pro SDR receivers qthid-fcd-controller ✅ ✅ ✅ funcube_devices_install ✅
XTRX tools and lib XTRX mini-PCIe SDR platform xtrx_fft ✅ ✅ ✅ xtrx_devices_install ✅
OsmoFL2K tools and lib FL2000-based VGA adapter as SDR transmitter fl2k_file | fl2k_tcp | fl2k_fm | fl2k_test ✅ ✅ ✅ osmofl2k_devices_install ✅
SignalHound Spike Spectrum analyzer software for SignalHound BB and SM series Spike ✅ ❌ ❌ signalhound_spike_sa_device ✅
SignalHound VSG60 Signal generator software for VSG60 vector signal generator vsg60 ✅ ❌ ❌ signalhound_vsg60_sa_device ✅
Harogic Devices SAStudio4 spectrum analyzer software for Harogic HTRA devices sastudio ✅ ✅ ❌ harogic_sa_device ✅
RFNM RFNM SDR platform library and drivers librfnm ✅ ✅ ✅ rfnm_devices_install ✅
LibreSDR B2x0 Open-source FPGA images for USRP B2x0 series libresdr_swapfpga ✅ ✅ ✅ libresdr_b2x0_devices_install ✅
pocketVNA Vector Network Analyzer software for pocketVNA device pocketVNA ✅ ❌ ❌ pocketvna_sa_device ❌ (install manually)
LiteX M2SDR LiteX-based M2SDR platform with SoapySDR drivers SoapySDR drivers ✅ ✅ ✅ litexm2sdr_devices_install ✅
HydraSDR/RFOne tools HydraSDR RFOne SDR platform tools and libraries hydrasdr_gpio | hydrasdr_calibrate | hydrasdr_gpiodir | hydrasdr_lib_version | hydrasdr_reset | hydrasdr_set_rf_port | hydrasdr_spiflash | hydrasdr_info | hydrasdr_r82x | hydrasdr_rx | hydrasdr_si5351c ✅ ✅ ✅ hydrasdr_rfone_install ✅
kalibrate-hydrasdr GSM frequency calibration tool for HydraSDR kal ✅ ✅ ✅ kalibrate_hydrasdr_device ✅
USDR Library waveLab USDR software-defined radio library libusdr ✅ ✅ ✅ usdr_lib_install ✅
ANTSDR UHD MicroPhase ANTSDR variant of UHD for ANTSDR devices Same as UHD tools ✅ ✅ ✅ antsdr_uhd_devices_install ❌ (optional alternative to UHD)
SoapySDR modules Additional SoapySDR device modules (osmosdr rtlsdr bladerf hackrf uhd mirisdr rfspace) Various SoapySDR modules ✅ ✅ ✅ install_soapy_modules ✅
SoapyPlutoSDR SoapySDR module for PlutoSDR devices SoapySDR PlutoSDR support ✅ ✅ ✅ install_soapyPlutoSDR_modules ✅

Device-Specific Notes:

  • UHD vs ANTSDR: Choose either standard UHD or ANTSDR variant during build (mutually exclusive)
  • RTL-SDR versions: Standard rtl-sdr or rtlsdrv4 blog version (mutually exclusive)
  • Manual installation tools: SoapySDR modules, SoapyPlutoSDR, and pocketVNA require manual installation after container creation

Common Device Troubleshooting

RTL-SDR Kernel Module Conflicts

If your RTL-SDR device is unavailable when using tools like nfc-spy, the DVB-T kernel module may have claimed it. Blacklist the module with:

echo "blacklist dvb_usb_rtl28xxu" | sudo tee /etc/modprobe.d/blacklist-dvb_usb_rtl28xxu.conf

You’ll need to restart your host system after adding this blacklist entry.

PlutoSDR Connection Issues

If the PlutoSDR doesn’t appear with iio_info -s and you see errors like:

with backends: local xml ip usb
Unable to create Local IIO context : No such file or directory (2)
ERROR: Unable to create Avahi DNS-SD client :Daemon not running
Scanning for IIO contexts failed: Text file busy (26)

This can be resolved in two ways:

  1. On Linux hosts: Ensure avahi-daemon is running on your host system
  2. Inside the container: Run the Avahi daemon with: 
    avahi-daemon --no-drop-root --no-rlimits

SDR Light Tools

The sdr_light image includes essential software-defined radio tools for signal capture, analysis, and basic decoding.

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
GNU Radio Open-source SDR toolkit and signal processing framework gnuradio-companion | gnuradio-config-info | gr_modtool | gr_plot_* | grcc ✅ ✅ ✅ gnuradio_soft_install ✅
gr-osmosdr Common source/sink blocks for SDR hardware Part of GNU Radio ✅ ✅ ✅ common_sources_and_sinks ✅
SoapySDR modules Device abstraction layer for SDR hardware SoapySDRUtil | SoapySDRServer ✅ ✅ ✅ install_soapy_modules ✅
SoapyPlutoSDR PlutoSDR support for SoapySDR SoapySDR PlutoSDR module ✅ ✅ ✅ install_soapyPlutoSDR_modules ✅
KC908 Spectrum Analyzer DEEPACE KC908 spectrum analyzer software KC908 ✅ ❌ ❌ kc908_sa_device ✅
SoapyRFNM RFNM device support for SoapySDR SoapySDR RFNM module ✅ ✅ ❌ soapyrfnm_grmod_install ✅
SoapyHydraSDR HydraSDR RFOne support for SoapySDR SoapySDR HydraSDR module ✅ ✅ ✅ hydrasdr_rfone_soapy_install ✅
SoapyHarogic Harogic device support for SoapySDR SoapySDR Harogic module ✅ ✅ ❌ soapyharogic_grmod_install ✅
gr-bladerf bladeRF GNU Radio blocks GNU Radio bladeRF blocks ✅ ✅ ✅ grbladerf_grmod_install ✅
gr-signal-hound Signal Hound device GNU Radio support GNU Radio Signal Hound blocks ✅ ✅ ❌ grsignalhound_Receiver_grmod_install ✅
gr-htra Harogic HTRA GNU Radio blocks GNU Radio HTRA blocks ✅ ❌ ❌ grhtra_grmod_install ✅
GQRX Software-defined radio receiver powered by GNU Radio gqrx ✅ ✅ ✅ gqrx_soft_install ✅
multimon-ng Digital decoder for multiple radio transmission modes multimon-ng ✅ ✅ ✅ multimon_ng_soft_install ✅
Universal Radio Hacker (URH) Wireless protocol investigation and reverse engineering urh ✅ ✅ ✅ urh_soft_install ✅
Inspectrum Offline radio signal analyzer inspectrum ✅ ✅ ✅ inspectrum_soft_install ✅
rtl_433 Generic data receiver for ISM band devices rtl_433 ✅ ✅ ✅ rtl_433_soft_install ✅
retrogram-rtlsdr Retro text-mode spectrogram for rtl-sdr retrogram-rtlsdr ✅ ✅ ✅ retrogram_soapysdr_soft_install ✅
LuaRadio Lightweight real-time SDR framework in Lua luaradio ✅ ✅ ✅ luaradio_sdr_soft_install ✅
dump1090 Mode S ADS-B decoder for aircraft tracking dump1090 ✅ ✅ ✅ dump1090_soft_install ✅
readsb Improved Mode S/ADS-B decoder readsb ✅ ✅ ✅ readsb_soft_install ✅
dumpvdl2 VDL Mode 2 decoder for aircraft ACARS dumpvdl2 ✅ ✅ ✅ dumpvdl2_soft_install ✅
dumphfdl HFDL decoder for HF aircraft communications dumphfdl ✅ ✅ ✅ dumphfdl_soft_install ✅
SDR++ Cross-platform SDR software with modern interface sdrpp ✅ ✅ ✅ sdrpp_soft_fromsource_install ✅
SDR++ Extra Modules Additional demodulators and sources for SDR++ SDR++ plugins ✅ ✅ ✅ sdrpp_extramodules_install ✅
Jupyter Notebook Interactive computing environment for SDR experiments jupyter | jupyter-notebook ✅ ✅ ✅ jupyter_soft_install ✅
Leo Bodnar GPSDO v1 Calibration tool for Leo Bodnar GPS reference v1 leobodnar-gpsdo-v1 ✅ ✅ ✅ leobodnarv1_cal_device ✅
Leo Bodnar GPSDO v2 Calibration tool for Leo Bodnar GPS reference v2 leobodnar-gpsdo-v2 ✅ ✅ ✅ leobodnarv2_cal_device ✅
KCSDI Calibration utilities for KC series devices kcsdi ✅ ✅ ✅ KCSDI_cal_device ✅
NanoVNASaver VNA software for NanoVNA devices NanoVNASaver ✅ ✅ ✅ NanoVNASaver_cal_device ✅
NanoVNA-QT Qt-based software for NanoVNA nanovna-qt ✅ ✅ ✅ NanoVNA_QT_cal_device ✅
GNSSLogger GNSS logging and calibration tool gnsslogger ✅ ✅ ✅ gnsslogger_cal_device ✅
LibreVNA Open-source Vector Network Analyzer software LibreVNA ✅ ✅ ✅ librevna_cal_device_buildx ✅
xnec2c NEC2 antenna modeling software xnec2c ✅ ✅ ✅ xnec2c_cal_device ❌ (broken - fix source)
GNSS-SDR Global Navigation Satellite Systems software receiver gnss-sdr ✅ ✅ ✅ gnss_sdr_soft_install ✅
Artemis SDR-based RF spectrum monitoring artemis ✅ ✅ ✅ artemis_soft_install ✅
GQRX Scanner Frequency scanner plugin for GQRX gqrx-scanner ✅ ✅ ✅ gqrxscanner_sdr_soft_install ✅
Lotus BUDC Tuner Lotus BUDC tuning device support lotus-budc ✅ ✅ ✅ lotus_budc_tune_device ✅
intercept Signal Intelligence Platform /rftools/sdr/intercept ✅ ✅ ✅ intercept_soft_install ❌
gr-hydrasdr GNU Radio OOT source block for HydraSDR (PentHertz fork) GNU Radio hydrasdr source block ✅ ✅ ✅ grhydrasdr_grmod_install ✅
hydrasdr_433 rtl_433-style decoder for HydraSDR receivers hydrasdr_433 ✅ ✅ ✅ hydrasdr433_soft_install ✅
FISSURE RF and reverse-engineering framework (AInfoSec) in an isolated venv reusing the image SDR stack fissure ✅ ✅ ❓ fissure_soft_install ✅

Tool Locations: Most SDR tools are installed in standard system paths (/usr/bin, /usr/local/bin), with specialized tools in:

  • /rftools/sdr/ - SDR-specific applications
  • /rftools/sdr/oot/ - GNU Radio out-of-tree modules
  • /rftools/analysers/ - Spectrum analyzer software
  • /rftools/generators/ - Signal generator software
🆕
New in v3.0.0: FISSURE, the AInfoSec RF framework, is installed in a dedicated virtual environment created with --system-site-packages so it reuses the GNU Radio, SoapySDR and driver stack already present in the image instead of pip-installing its own pinned copies over your system Python. Launch it with fissure. HydraSDR support also lands here, with the gr-hydrasdr GNU Radio source block and the hydrasdr_433 decoder.

SDR Full Environment

The sdr_full image builds on sdr_light to provide a comprehensive SDR development and analysis environment, including GNU Radio and specialized plugins.

GNU Radio Out-Of-Tree Modules

These modules extend GNU Radio’s capabilities for specific protocols and signal types:

Tool(s) Description amd64 aarch64 riscv64 Installation function Installed by default
gr-osmosdr Common source/sink blocks for various SDR hardware ✅ ✅ ✅ common_sources_and_sinks ✅
gr-gsm GSM/GPRS/EDGE baseband processor for GNU Radio ✅ ✅ ✅ grgsm_grmod_install ✅
gr-lora LoRa PHY implementation for GNU Radio ✅ ✅ ✅ grlora_grmod_install ✅
gr-lora_sdr Alternative LoRa SDR implementation with better decoding ✅ ✅ ✅ grlorasdr_grmod_install ✅
gr-iridium Iridium satellite communication decoder ✅ ✅ ✅ griridium_grmod_install ✅
gr-inspector Signal analysis and classification toolkit ✅ ✅ ✅ grinspector_grmod_install ✅
gr-uaslink Unmanned Aerial System datalink decoder ✅ ✅ ✅ gruaslink_grmod_install ✅
gr-X10 X10 home automation protocol decoder ✅ ✅ ✅ grX10_grmod_install ✅
gr-gfdm Generalized Frequency Division Multiplexing implementation ✅ ✅ ✅ grgfdm_grmod_install ✅
gr-aaronia_rtsa Aaronia real-time spectrum analyzer support ✅ ✅ ✅ graaronia_rtsa_grmod_install ✅
gr-ccsds CCSDS (space communications) protocol support ❌ ❌ ❌ grccsds_move_rtsa_grmod_install ❌ (broken - strtod_l issue)
gr-ais Automatic Identification System (AIS) decoder ✅ ✅ ✅ grais_grmod_install ✅
gr-aistx AIS transmitter blocks ✅ ✅ ✅ graistx_grmod_install ✅
gr-air-modes Mode S/ADS-B aircraft transponder decoder ✅ ✅ ✅ grairmodes_grmod_install ✅
gr-dvbs2 DVB-S2 digital video broadcasting decoder ✅ ✅ ✅ grdvbs2_grmod_install ✅
gr-tempest TEMPEST electromagnetic emanations receiver ✅ ✅ ✅ grtempest_grmod_install ✅
deep-tempest Deep learning-based TEMPEST for screen reconstruction ❌ ❌ ❌ deeptempest_grmod_install ❌ (see sdr_deeptemptest_beta image)
gr-dab Digital Audio Broadcasting (DAB/DAB+) decoder ✅ ✅ ✅ grdab_grmod_install ✅
gr-dect2 DECT (cordless phone) protocol decoder ✅ ✅ ✅ grdect2_grmod_install ✅
gr-foo Miscellaneous GNU Radio blocks and utilities ✅ ✅ ✅ grfoo_grmod_install ✅
gr-ieee802-11 WiFi (802.11a/g/p) transceiver implementation ✅ ✅ ✅ grieee802-11_grmod_install ✅
gr-ieee802-11ah WiFi HaLow (802.11ah) sub-1GHz implementation ✅ ✅ ✅ grieee802-11ah_grmod_install ✅
gr-ieee80211 (gr-wifi) Alternative WiFi implementation ✅ ✅ ✅ grieee80211-grwifi_grmod_install ✅
gr-ieee802-15-4 ZigBee and 802.15.4 PHY/MAC implementation ✅ ✅ ✅ grieee802154_grmod_install ✅
gr-rds Radio Data System (RDS) encoder/decoder ✅ ✅ ✅ grrds_grmod_install ✅
gr-droneid DJI DroneID and RemoteID decoder ✅ ✅ ✅ grdroineid_grmod_install ✅
gr-satellites Satellite telemetry decoder (100+ satellites) ✅ ✅ ✅ grsatellites_grmod_install ✅
gr-adsb ADS-B aircraft transponder decoder ✅ ✅ ✅ gradsb_grmod_install ✅
gr-keyfob Car key fob signal analyzer ✅ ✅ ✅ grkeyfob_grmod_install ✅
gr-radar Radar signal processing toolkit ✅ ✅ ✅ grradar_grmod_install ✅
gr-nordic Nordic Semiconductor protocol decoder (nRF24L01+) ✅ ✅ ✅ grnordic_grmod_install ✅
gr-paint Spectrum painting and waterfall annotation ✅ ✅ ✅ grpaint_grmod_install ✅
gr-pdu_utils Protocol Data Unit utilities from Sandia ✅ ✅ ✅ grpdu_utils_grmod_install ✅
gr-sandia_utils Sandia National Labs signal processing blocks ✅ ✅ ✅ grsandia_utils_grmod_install ✅
gr-timing_utils Timing and synchronization utilities from Sandia ✅ ✅ ✅ grtiming_utils_grmod_install ✅
gr-fhss_utils Frequency Hopping Spread Spectrum utilities ✅ ✅ ✅ grfhss_utils_grmod_install ✅
gr-zwave_poore Z-Wave home automation protocol decoder ✅ ✅ ✅ grzwavepoore_grmod_install ✅
gr-mixalot POCSAG pager protocol encoder ✅ ✅ ✅ grmixalot_grmod_install ✅
gr-reveng CRC and checksum reverse engineering ✅ ✅ ✅ grreveng_grmod_install ✅
gr-DCF77_Receiver DCF77 time signal receiver ✅ ✅ ✅ gr_DCF77_Receiver_grmod_install ✅
gr-j2497 MIL-STD-1553 and MIL-STD-1397 decoder ✅ ✅ ✅ grj2497_grmod_install ✅
gr-m17 M17 digital voice protocol implementation ✅ ✅ ✅ grm17_grmod_install ✅
gr-grnet Network socket blocks for GNU Radio ✅ ✅ ❌ grgrnet_grmod_install ✅
gr-aoa Angle of Arrival estimation ✅ ✅ ✅ graoa_grmod_install ✅
gr-correctiq IQ correction algorithms for SDR devices ✅ ✅ ✅ grcorrectiq_grmod_install ✅
gr-dsd Digital Speech Decoder (P25 DMR NXDN) ✅ ✅ ✅ grdsd_grmod_install ✅
gr-nrsc5 HD Radio (NRSC-5) decoder ✅ ✅ ✅ grnrsc5_grmod_install ✅
gr-ntsc-rc NTSC video signal processing ✅ ✅ ✅ grntscrc_grmod_install ✅
gr-nfc NFC (Near Field Communication) PHY ✅ ✅ ✅ grnfc_grmod_install ✅
gr-fosphor GPU-accelerated spectrum analyzer (requires GPU) ✅ ❓ ❓ grfosphor_grmod_install ✅ (GPU images only)
gr-mer Modulation Error Ratio measurement ✅ ✅ ✅ grmer_grmod_install ✅
gr-flarm FLARM aircraft collision avoidance decoder ✅ ✅ ✅ grflarm_grmod_install ✅
gr-guiextra Additional GUI widgets and displays ✅ ✅ ✅ grguiextra_grmod_install ✅
gr-rftap RF tap blocks for protocol analysis ✅ ✅ ✅ grrftap_grmod_install ✅
gr-radio_astro Radio astronomy signal processing ✅ ✅ ✅ grradioastro_grmod_install ✅
gr-cessb Controlled Envelope Single Sideband modulation ✅ ✅ ✅ grcessb_grmod_install

Known Issues:

  • gr-ccsds: Currently broken due to strtod_l dependency issues
  • deep-tempest: Available in separate sdr_deeptempest_beta image due to specific dependencies
  • gr-fosphor: Only included in GPU-enabled builds (requires OpenCL/CUDA)
  • gr-signal-hound: Requires manual installation (architecture-specific)

Additional SDR Software

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
CyberEther Real-time SDR signal analyzer with GPU acceleration cyberether ✅ ✅ ✅ cyberther_soft_install ✅
SigDigger Advanced signal analyzer for reverse engineering SigDigger ✅ ✅ ✅ sigdigger_soft_install ✅
QSSTV Slow-scan television (SSTV) transceiver qsstv ✅ ✅ ✅ qsstv_soft_install ✅
nfc-laboratory NFC protocol analyzer and emulator nfc-laboratory ✅ ✅ ✅ nfclaboratory_soft_install ✅
ice9-bluetooth Bluetooth Classic sniffer ice9-bluetooth ✅ ❌ ❌ ice9_bluetooth_soft_install ✅
Meshtastic SDR Meshtastic mesh network SDR tools meshtastic-sdr ✅ ✅ ✅ meshtastic_sdr_soft_install ✅
GPS-SDR-SIM GPS signal simulator gps-sdr-sim ✅ ✅ ✅ gps_sdr_sim_soft_install ✅
Gpredict Real-time satellite tracking and orbit prediction gpredict ✅ ✅ ✅ gpredict_sdr_soft_install ✅
V2Verifier V2X message verification tool v2verifier ✅ ✅ ✅ v2verifier_sdr_soft_install ✅
wavingZ Z-Wave protocol analyzer wavingz ✅ ✅ ✅ wavingz_sdr_soft_install ✅
PySpecSDR Python spectrum analyzer pyspecsdr ✅ ✅ ✅ pyspecsdr_sdr_soft_install ✅
AIS Catcher Automatic Identification System decoder aiscatcher ✅ ✅ ✅ AIScatcher_soft_install ✅
TetraKit TETRA digital radio toolkit tetrakit ✅ ✅ ✅ tetrakit_soft_install ✅
TetraKit Player TETRA voice player tetrakit-player ✅ ✅ ✅ tetrakitplayer_soft_install ✅
TETRA Suite Complete TETRA decoder (osmo-tetra telive) osmo-tetra | telive ✅ ✅ ✅ tetra_suite_install ✅
OP25 APCO Project 25 decoder op25 ✅ ✅ ✅ op25_soft_install ✅
Trunk Recorder Multi-channel trunked radio recorder trunk-recorder ✅ ✅ ✅ trunkrecorder_soft_install ✅
SatDump Universal satellite data processing software satdump | satdump-ui ✅ ✅ ✅ satdump_sdr_soft_install ✅
SDRangel Multi-platform SDR software with extensive plugins sdrangel ✅ ✅ ✅ sdrangel_soft_fromsource_install ✅
ML and DL Libraries Machine learning libraries for signal processing (numpy pandas scikit-learn tensorflow) Python ML/DL modules ✅ ✅ ✅ ml_and_dl_soft_install ✅
GPU Drivers - NVIDIA NVIDIA GPU compute drivers for acceleration nvidia-smi | nvidia-settings ✅ ✅ ✅ install_GPU_nvidia ✅
GPU Drivers - Intel Intel GPU compute drivers intel-gpu-tools ✅ ✅ ✅ install_GPU_Intel ✅
GPU Drivers - Radeon (up to 5000) AMD Radeon GPU drivers for older cards rocm-smi ✅ ✅ ✅ install_GPU_Radeon_until5000 ✅
GPU Drivers - Radeon (latest) AMD Radeon GPU drivers for latest cards rocm-smi ✅ ✅ ✅ install_GPU_latest_Radeon ✅
gr-fosphor GPU-accelerated FFT and display for GNU Radio GNU Radio fosphor blocks ✅ ❓ ❓ grfosphor_grmod_install ✅
ACARSdec ACARS aircraft communication decoder acarsdec ✅ ✅ ✅ acarsdec_soft_install ❌ (need to fix the install)
QRadioLink VoIP and digital radio over IP qradiolink ✅ ✅ ✅ qradiolink_soft_install ❌ (install manually)
HydraSDR 433 HydraSDR 433MHz ISM band toolkit hydrasdr433 ✅ ✅ ✅ hydrasdr433_soft_install ✅
RFQuack IoT-focused RF analysis framework rfquack ✅ ✅ ✅ rfquak_soft_install ❌ (install manually)

Major Software Suites:

  • SDR++: Modern cross-platform SDR software with plugin support
  • SDRAngel: Advanced SDR software with extensive plugin ecosystem
  • GQRX: Popular SDR receiver powered by GNU Radio
  • SigDigger: Signal analysis and reverse engineering tool
  • URH: Universal Radio Hacker for wireless protocol analysis (with HydraSDR fork enhancements)

GNU Radio 4.0 🆕

The sdr_gnuradio4 image builds GNU Radio 4.0 (RC2) from source alongside the GNU Radio 3.10 already present in sdr_light. GR4 is a separate C++23 codebase with its own headers, namespace and prefix, so nothing about your existing 3.10 flowgraphs changes:

rfswift run -i penthertz/rfswift_resolute:sdr_gnuradio4
Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
GNU Radio 4.0 (RC2) Next-generation GNU Radio runtime (C++23) built from source in /opt/gnuradio4 alongside the apt GNU Radio 3.10 GR4 binaries under /opt/gnuradio4/install/bin and /opt/gnuradio4/build/bin (added to PATH by /etc/profile.d/gnuradio4.sh) ✅ ✅ ❌ (not yet) gnuradio4_soft_install ✅
GNU Radio 4 Python env Dedicated Python 3.12 virtual environment for GR4's embedded PythonBlock interpreter /opt/gnuradio4/venv/bin/python ✅ ✅ ❌ (not yet) gnuradio4_soft_install ✅
GNU Radio 3.10 The stock GNU Radio inherited from sdr_light - untouched by the GR4 build gnuradio-companion | gr_modtool | gnuradio-config-info ✅ ✅ ✅ gnuradio_soft_install ✅

How GR4 is isolated:

  • Built into /opt/gnuradio4, exposed through /etc/profile.d/gnuradio4.sh (which prepends /opt/gnuradio4/install/bin and /opt/gnuradio4/build/bin to PATH)
  • Ships its own Python 3.12 virtual environment at /opt/gnuradio4/venv for the embedded PythonBlock interpreter, so it never touches the system Python (3.14 on Resolute) or GNU Radio 3.10’s bindings
  • The apt GNU Radio 3.10 remains the default gnuradio-companion in the image
GNU Radio 4 is a release candidate. It is experimental, its install tooling is still maturing upstream, and the build is heavy and template-intensive. Expect API churn. This image is for evaluating GR4, not for production flowgraphs. Not yet available on RISC-V64.

RFID Tools

The rfid image focuses on radio-frequency identification analysis and exploitation:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
proxmark3 RRG/Iceman Proxmark3 firmware and client proxmark3 | pm3 ✅ ✅ ✅ proxmark3_soft_install ✅
libnfc Near Field Communication library and tools nfc-list | nfc-scan-device | nfc-poll | nfc-dep-initiator | nfc-dep-target ✅ ✅ ✅ libnfc_soft_install ✅
nfc-tools Utilities for libnfc nfc-barcode | nfc-read-forum-tag3 | nfc-emulate-forum-tag4 | nfc-mfclassic | nfc-relay-picc | nfc-jewel | nfc-mfultralight ✅ ✅ ✅ libnfc_soft_install ✅
mfoc MIFARE Classic Offline Cracker mfoc ✅ ✅ ✅ mfoc_soft_install ✅
mfcuk MIFARE Classic Universal toolKit mfcuk ✅ ✅ ✅ mfcuk_soft_install ✅
mfdread MIFARE dump reader and parser /rftools/rfid/mfdread/mfdread.py ✅ ✅ ✅ mfread_soft_install ✅
RFIDler Open-source RFID emulator and reader /root/thirdparty/RFIDler/ ✅ ❌ ❌ rfidler_soft_install ✅
miLazyCracker Automated MIFARE Classic cracking with DarkSide attack /rftools/rfid/miLazyCracker/ ✅ ✅ ✅ miLazyCracker_soft_install ✅
libfreefare MIFARE tag manipulation library and tools mifare-classic-format | mifare-desfire-info ✅ ✅ ✅ libfreeware_soft_install ✅
nfcpy Python NFC library for contactless communication Python nfcpy module ✅ ✅ ✅ nfcpy_soft_install ✅
ChameleonUltra ChameleonUltra NFC emulator CLI /rftools/nfc/ChameleonUltra/ ✅ ✅ ✅ chameleon_ultra_soft_install ✅

RFID Device Requirements: When using RFID tools, you need to ensure that your RFID reader device (typically appearing as /dev/ttyACM0) is properly bound to the container:

# When creating a new container
rfswift run -i rfid -n rfid_tools -s /dev/ttyACM0:/dev/ttyACM0

# Or with an existing container
rfswift bindings add -c rfid_tools -d -t /dev/ttyACM0 # or without -d if you want to unplug and replug it when container is running

Bluetooth Analysis

The bluetooth image contains specialized tools for Bluetooth protocol analysis and security testing:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
hcitools Bluetooth HCI layer tools for device configuration and management hciattach | hciconfig | hcidump | hcitool ✅ ✅ ✅ blueztools_soft_install ✅
bluez tools BlueZ Bluetooth protocol stack utilities bluetoothctl | bluetoothd | btmon ✅ ✅ ✅ blueztools_soft_install ✅
mirage Modular framework for BLE security auditing with Python 3.10 venv mirage ✅ ✅ ✅ mirage_soft_install ✅
Sniffle TI CC13x2/CC26x2 BLE sniffer with OpenDroneID support /rftools/bluetooth/Sniffle/ ✅ ✅ ✅ sniffle_soft_install ✅
bluing Python-based Bluetooth Low Energy scanner and analyzer /rftools/bluetooth/bluing/bluing/bin/ ✅ ✅ ✅ bluing_soft_install ✅
bdaddr Tool to change Bluetooth device address /rftools/bluetooth/bdaddr/bdaddr ✅ ✅ ✅ bdaddr_soft_install ✅
WHAD Wireless Hacking Devices protocol framework whadup | wplay | wsniff | wfilter | wextract | wdump | wshark | wanalyze | winject | wserver | wble-central | wble-periph | wble-proxy | wble-spawn | wble-connect | wuni-scan | wuni-mouse | wuni-keyboard ✅ ✅ ✅ whad_soft_install ✅
esp32_bluetooth_classic_sniffer ESP32-based Bluetooth Classic sniffer with Python CLI BTSnifferBREDR ✅ ✅ ✅ esp32_bluetooth_classic_sniffer_soft_install ✅
BlueKit Bluetooth security assessment toolkit bluekit ✅ ✅ ✅ bluekit_soft_install ❌ (install manually)
WhisperPair (CVE-2025-36911) Bluetooth pairing exploit PoC /rftools/bluetooth/exploits/CVE-2025-36911-exploit/ ✅ ✅ ✅ CVE_2025_36911_whisperpair_install ✅
RACE Toolkit Bluetooth RACE exploit (CVE-2025-20700/01/02) /rftools/bluetooth/exploits/race-toolkit/ ✅ ✅ ✅ race_toolkit_exploit_install ✅
PyBluez Python Bluetooth library and bindings Python pybluez module ✅ ✅ ✅ pybluez_soft_install ✅
BlueDucky Bluetooth HID emulation and exploitation tool /rftools/bluetooth/exploits/BlueDucky/ ✅ ✅ ✅ blueducky_soft_install ✅
Breaktooth Bluetooth Classic exploitation framework /rftools/bluetooth/exploits/breaktooth-unofficial/ ✅ ✅ ✅ breaktooth_soft_install ✅
BLERP BLE Re-Pairing attacks PoC (NDSS 26') /rftools/bluetooth/exploits/blerp/ ✅ ✅ ✅ blerp_soft_install ✅
Caeruleus Single-binary BLE assessment workflow (scan GATT enumerate read/write/notify fuzz assess) with JSON/JSONL output caeruleus ✅ ✅ ✅ caeruleus_soft_install ✅
BlueSploit Bluetooth exploitation framework bluesploit ✅ ✅ ✅ bluesploit_soft_install ✅

Required Capability: Bluetooth tools require the NET_ADMIN capability to function properly. Always include this capability when running the container:

rfswift run -i bluetooth -n bt_tools -a NET_ADMIN

Without this capability, many Bluetooth tools will fail with permission errors when attempting to configure network interfaces.

Python Virtual Environments: Some Bluetooth tools run in isolated Python environments:

  • Mirage: Uses Python 3.10 venv at /opt/mirage-env/, accessed via wrapper script at /usr/sbin/mirage
  • Bluing: Uses Python 3.10 venv at /rftools/bluetooth/bluing/, run with bluing_run script

New in v3.0.0: Caeruleus, a single Go binary covering the whole BLE assessment workflow on BlueZ (scan, GATT enumeration, read/write/notify, fuzzing and structured assessment with JSON/JSONL output), and BlueSploit, a Bluetooth exploitation framework. Both sit next to the existing WhisperPair exploit for CVE-2025-36911.

Tool Locations:

  • /rftools/bluetooth/ - Main Bluetooth tools directory
  • /rftools/bluetooth/firmwares/ - Firmware for various BLE sniffers (Btlejack, Injectable NRF52840, Sniffle)

Wi-Fi Security

The wifi image provides tools for Wi-Fi network analysis, packet capture, and security assessment:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
iproute2 Modern network configuration utilities ip | ss | bridge | rtmon ✅ ✅ ✅ common_nettools ✅
hostapd IEEE 802.11 AP and authentication server hostapd ✅ ✅ ✅ common_nettools ✅
dnsmasq Lightweight DNS/DHCP server for rogue AP dnsmasq ✅ ✅ ✅ common_nettools ✅
macchanger MAC address spoofing utility macchanger ✅ ✅ ✅ common_nettools ✅
tshark Command-line network protocol analyzer tshark ✅ ✅ ✅ common_nettools ✅
aircrack-ng Complete WiFi security auditing suite airbase-ng | aircrack-ng | airdecap-ng | airdecloak-ng | aireplay-ng | airmon-ng | airodump-ng | airodump-ng-oui-update | airolib-ng | airmon-zc | airtun-ng | besside-ng | easside-ng | tkiptun-ng | wesside-ng ✅ ✅ ✅ aircrack_soft_install ✅
hcxdumptool Modern WiFi capture tool for hashcat hcxdumptool ✅ ✅ ✅ hcxdumptool_soft_install ✅
hcxtools Convert captures to hashcat format hcxpcapngtool | hcxhashtool | hcxpsktool | hcxpmktool ✅ ✅ ✅ hcxtools_soft_install ✅
reaver WPS brute-force attack tool reaver | wash ✅ ✅ ✅ reaver_soft_install ✅
bully Alternative WPS brute-force tool bully ✅ ✅ ✅ bully_soft_install ✅
pixiewps WPS Pixie Dust attack implementation pixiewps ✅ ✅ ✅ pixiewps_soft_install ✅
eaphammer Targeted evil twin and credential harvesting /rftools/wifi/eaphammer/ ✅ ✅ ✅ eaphammer_soft_install ✅
airgeddon Multi-tool WiFi security auditing framework /rftools/wifi/airgeddon/airgeddon.sh ✅ ✅ ✅ airgeddon_soft_install ✅
wifite2 Automated WiFi attack tool wifite ✅ ✅ ✅ wifite2_soft_install ✅
sparrow-wifi WiFi and Bluetooth analyzer with SDR support /rftools/wifi/sparrow-wifi/ ✅ ✅ ✅ sparrowwifi_sdr_soft_install ✅
krackattacks-scripts KRACK attack proof-of-concept /rftools/wifi/krackattacks-scripts/ ✅ ✅ ✅ krackattacks_script_soft_install ✅
BeEF Browser Exploitation Framework for phishing beef | /opt/network/beef/beef ✅ ✅ ✅ beef_soft_install ✅
asleap LEAP/PPTP password cracker asleap ✅ ✅ ✅ asleap_soft_install ✅
roguehostapd Modified hostapd for advanced attacks hostapd-mana ✅ ✅ ✅ roguehostapd_soft_install ✅
wifiphisher Automated phishing attack framework wifiphisher ✅ ✅ ✅ wifiphisher_soft_install ✅
hostapd-mana Evil twin AP with credential harvesting hostapd-mana ✅ ✅ ✅ hostapdmana_soft_install ✅
dragonslayer WPA3 dragonfly vulnerability testing /rftools/wifi/wpa3/dragonslayer/ ✅ ✅ ✅ wpa3_dragonslayer_soft_install ✅
dragonforce WPA3 downgrade and DoS attacks /rftools/wifi/wpa3/dragonforce/ ✅ ✅ ✅ wpa3_dragonforce_soft_install ✅
dragondrain-and-time WPA3 resource exhaustion attacks /rftools/wifi/wpa3/dragondrain-and-time/ ✅ ✅ ✅ wpa3_dragondrain_and_time_soft_install ✅
wacker WPA3 SAE timing attacks /rftools/wifi/wpa3/wacker/ ✅ ✅ ✅ wpa3_wacker_soft_install ✅
Pyrit GPU-accelerated WPA/WPA2 cracker pyrit ✅ ❓ ❓ Pyrit_soft_install ❌ (commented out - Python3 issues)
mdk3 Wireless denial-of-service testing mdk3 ✅ ✅ ✅ mdk3_soft_install ❌ (install manually)
wifipumpkin3 Rogue AP framework wifipumpkin3 ✅ ✅ ✅ wifipumpkin3_soft_install ❌ (install manually)
fernwifi-cracker GUI-based WiFi security testing Fern-Wifi-Cracker ✅ ✅ ✅ fernwificracker_soft_install ❌ (install manually)
Kismet Wireless and Bluetooth packet capture sniffing and IDS kismet | kismet_cap_linux_wifi | kismetdb_dump_devices ✅ ✅ ✅ kismet_soft_install ✅
bettercap Network and wireless attack framework (Wi-Fi BLE and Ethernet) bettercap ✅ ✅ ✅ bettercap_soft_install ✅

Required Capability: Wi-Fi tools require the NET_ADMIN capability to manipulate wireless interfaces. Always include this capability when running the container:

rfswift run -i wifi -n wifi_tools -a NET_ADMIN

If you see errors about insufficient permissions when using Wi-Fi tools, this capability is likely missing.

WPA3 Attack Tools: RF Swift includes a complete suite of WPA3 vulnerability testing tools:

  • dragonslayer - Dragonfly handshake vulnerabilities
  • dragonforce - Downgrade and DoS attacks
  • dragondrain-and-time - Resource exhaustion
  • wacker - SAE timing attacks

All WPA3 tools are located in /rftools/wifi/wpa3/

Telecommunications

The telecommunications images are divided into several categories based on mobile network generations:

Telecom Utilities

Foundation tools for cellular network analysis:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
pycrate Python library for mobile network protocols (2G/3G/4G/5G) Python pycrate module ✅ ✅ ✅ pycrate_soft_install ✅
CryptoMobile Mobile network cryptographic functions (Milenage TUAK Kasumi) Python CryptoMobile module ✅ ✅ ✅ cryptomobile_soft_install ✅
PySIM SIM card management and programming pySim-shell.py | pySim-read.py | pySim-prog.py ✅ ✅ ✅ pysim_soft_install ✅
pySCTP Python bindings for SCTP protocol Python pysctp module ✅ ✅ ✅ pysctp_soft_install ✅
sysmo-usim-tool SIM card programming for Sysmocom cards sysmo-usim-tool ✅ ✅ ✅ sysmoUSIM_soft_install ✅
SCAT Signaling collection and analysis toolkit scat | signalcat ✅ ✅ ✅ SCAT_soft_install ✅
SigPloit Signaling exploitation framework sigploit ✅ ✅ ✅ SigPloit_soft_install ✅
PyHSS Python Home Subscriber Server pyhss ✅ ✅ ✅ pyhss_soft_install ✅
Bromelia Python Diameter protocol stack Python bromelia module ✅ ✅ ✅ bromelia_soft_install ✅
jSS7 Java SS7 protocol stack jSS7 tools ✅ ❌ ❌ jss7_soft_install ✅
Py5sig 5G NAS security tool py5sig ✅ ✅ ✅ py5sig_soft_install ❌ (install manually)
Modmobmap Mobile network mapping tool modmobmap ✅ ✅ ✅ Modmobmap_soft_install ❌ (install manually)

Python Libraries:

  • pycrate: Complete Python cellular protocol stack
  • CryptoMobile: Mobile network cryptography (Milenage, TUAK, Kasumi, etc.)
  • pysctp: Python SCTP bindings for signaling protocols
  • bromelia: Diameter protocol stack for LTE/5G core

2G/3G Analysis Tools

Tools for GSM, UMTS, and related technologies:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
YateBTS Complete 2G/GSM base station with Yate softswitch yate | yatebts | mbts ✅ ✅ ✅ yatebts_blade2_soft_install ✅
OpenBTS Open source GSM base station OpenBTS | transceiver ✅ ❌ ❌ openbts_uhd_soft_install ✅
OpenBTS UMTS Open source 3G UMTS base station OpenBTS-UMTS ✅ ❌ ❌ openbts_umts_soft_install ✅
OsmoCom BTS Suite Complete 2G network infrastructure suite osmo-bts | osmo-bsc | osmo-msc | osmo-hlr | osmo-mgw | osmo-sgsn | osmo-ggsn ✅ ✅ ✅ osmobts_suite_soft_install ✅

Architecture Limitations:

  • YateBTS: Requires Qt5 dependencies, may have limited multi-arch support
  • OpenBTS/OpenBTS-UMTS: x86_64 only due to build dependencies
  • OsmoCom suite: Builds on all architectures but requires significant system resources
🆕

OpenBTS and OpenBTS-UMTS on Resolute. Both are legacy C++ code bases that GCC 15 (the compiler shipping with Ubuntu 26.04) rejects outright. RF Swift installs them from PentHertz forks on dedicated resolute branches, PentHertz/OpenBTS and PentHertz/OpenBTS-UMTS, rather than from the dead upstreams.

Porting is still in progress: some translation units (notably the OpenBTS-UHD Transceiver code, which trips a std::complex ambiguity under GCC 15) may still fail to build. RF Swift records these as build failures instead of aborting the image, so check /var/lib/db/rfswift_build_report.tsv inside a telecom_2Gto3G container to see exactly what landed in your build. YateBTS and the OsmoCom suite are unaffected and remain the recommended 2G/3G path.

Tool Locations:

  • /telecom/2G/ - 2G base stations and tools
  • /telecom/3G/ - 3G/UMTS tools
  • /telecom/SIM/ - SIM card programming tools
  • Configuration files in /root/config/osmobts/

4G/5G Analysis Tools

Tools for LTE and 5G-NSA:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
srsRAN 4G Complete LTE stack (eNB EPC UE) srsenb | srsepc | srsue ✅ ✅ ✅ srsran4G_5GNSA_soft_install ✅
Open5GS Open source 5G Core and EPC open5gs-amfd | open5gs-smfd | open5gs-upfd | open5gs-mmed | open5gs-sgwud | open5gs-hssd | open5gs-pcrfd ✅ ✅ ✅ Open5GS_soft_install ✅
Open5GS Web UI Subscriber management web interface Node.js web UI on port 3000 ✅ ✅ ✅ Open5GS_soft_install ✅

srsRAN 4G: Complete LTE stack including:

  • srsENB: LTE eNodeB (base station)
  • srsEPC: Evolved Packet Core
  • srsUE: UE simulator

5G Analysis Tools

Tools for 5G standalone (SA) and core networks:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
OCUDU 🆕 5G SA CU/DU stack - replaces srsRAN Project as the default gNB in RF Swift v3.0.0 gnb ✅ ✅ ✅ ocudu_soft_install (also aliased as srsran5GSA_soft_install) ✅
srsRAN Project (bladeRF) 5G SA gNB fork with bladeRF support gnb ✅ ✅ ✅ srsran5GSA_bladerf_soft_install ❌ (alternative used by the telecom_5G_bladerf image)
Open5GS Open source 5G Core network open5gs-amfd | open5gs-smfd | open5gs-upfd | open5gs-ausfd | open5gs-udmd | open5gs-pcfd | open5gs-nrfd | open5gs-scpd | open5gs-bsfd | open5gs-udrd ✅ ✅ ✅ Open5GS_soft_install ✅
Open5GS (nohttp2) Open5GS without HTTP/2 support Same as Open5GS ✅ ✅ ✅ Open5GS_nohttp2_soft_install ❌ (alternative)
Open5GS (0caps) Open5GS with null cipher support Same as Open5GS ✅ ✅ ✅ Open5GS_0caps_soft_install ❌ (alternative)
Open5GS Web UI Subscriber management web interface Node.js web UI on port 3000 ✅ ✅ ✅ Open5GS_soft_install ✅
UERANSIM 5G UE and RAN simulator nr-ue | nr-gnb | nr-cli | nr-binder ✅ ✅ ✅ UERANSIM_soft_install ✅
UERANSIM (null cipher) UERANSIM with null cipher support Same as UERANSIM ✅ ✅ ✅ UERANSIM_nullciph_soft_install ❌ (alternative)
5Greplay 5G traffic replay and testing 5greplay ✅ ✅ ✅ 5greplay_soft_install ✅
🆕

5G SA now runs on OCUDU. As of v3.0.0, the CU/DU stack installed in the 5G images is OCUDU instead of srsRAN Project. The srsran5GSA_soft_install function is kept as an alias so existing recipes and scripts keep working, but it now installs OCUDU. It builds into /telecom/5G/ocudu and still provides the gnb binary, so your existing configuration files and workflows carry over.

srsRAN 4G is unaffected and remains the 4G/5G-NSA stack. See the 4G/5G section above.

MongoDB Requirement: Open5GS requires MongoDB for subscriber database. The container includes:

  • MongoDB 6.0 from official repository
  • Web UI for subscriber management (Node.js based)
  • Database directory at /data/db/

To start all Open5GS components: Open5Gs_deployall

Automotive Security

The automotive image contains tools for vehicle network analysis and communication:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
can-utils Linux SocketCAN userspace utilities candump | cansend | canplayer | cangen | cansniffer | cansequence ✅ ✅ ✅ canutils_soft_install ✅
CANtact CANtact hardware support utilities cantact ✅ ✅ ✅ cantact_soft_install ✅
Caring Caribou CAN bus security and penetration testing caringcaribou ✅ ✅ ✅ caringcaribou_soft_install ✅
SavvyCAN Cross-platform CAN bus reverse engineering SavvyCAN ✅ ✅ ✅ savvycan_soft_install ✅
Gallia Extendable automotive penetration testing framework gallia ✅ ✅ ✅ gallia_soft_install ✅
V2GInjector Vehicle-to-Grid (V2G) protocol testing v2ginjector ✅ ✅ ✅ v2ginjector_soft_install ✅

Tool Locations:

  • /automotive/ - Main automotive tools directory
  • CAN/LIN/FlexRay tools
  • Vehicle protocol analyzers

Reverse Engineering & SAST

The reversing image provides tools for firmware analysis, hardware reverse engineering and static application security testing:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
Kaitai Struct Declarative binary format parser kaitai-struct-compiler | ksc ✅ ✅ ✅ kataistruct_soft_install ✅
Unicorn Engine Lightweight multi-architecture CPU emulator Python unicorn module ✅ ❌ ❌ unicorn_soft_install ✅
Keystone Engine Lightweight multi-architecture assembler Python keystone module ✅ ❌ ❌ keystone_soft_install ✅
Radare2 Reverse engineering framework r2 | rabin2 | radare2 | rafind2 | ragg2 | rahash2 | rarun2 | rasm2 | rax2 ✅ ✅ ✅ radare2_soft_install ✅
Ghidra NSA reverse engineering suite ghidra | ghidraRun ✅ ✅ ✅ ghidra_soft_install ✅
Sasquatch Modified unsquashfs for non-standard SquashFS images sasquatch ✅ ✅ ✅ sasquatch_soft_install ✅
Unblob Accurate recursive extraction of firmware unblob ✅ ✅ ✅ unblob_soft_install ✅
Binwalk Firmware analysis and extraction binwalk ✅ ✅ ✅ binwalk_soft_install ✅
Binwalk v3 Rust-based binwalk rewrite binwalk ✅ ✅ ✅ binwalkv3_soft_install ✅
QNX6 Extractor QNX6 filesystem extractor qnx6extractor ✅ ✅ ✅ qnx6extractor_soft_install ✅
LLVM Compiler infrastructure for static analysis clang | clang++ | llvm-* | opt ✅ ✅ ❌ LLVM_install ✅
AFL American Fuzzy Lop fuzzer afl-fuzz | afl-gcc | afl-g++ | afl-clang | afl-clang++ ✅ ✅ ❌ AFL_install ✅
Honggfuzz Security-oriented fuzzer honggfuzz ✅ ✅ ❌ honggfuzz_install ✅
Semgrep Static analysis for finding bugs semgrep ✅ ✅ ✅ semgrep_install ✅
Cppcheck Static analysis for C/C++ code cppcheck ✅ ✅ ✅ cppcheck_install ✅
Clang Static Analyzer C/C++/Objective-C static analyzer scan-build | scan-view ✅ ✅ ✅ clang_static_analyzer_install ✅
Joern Code analysis platform for C/C++ joern | joern-parse | joern-export | joern-flow | joern-lookup ✅ ✅ ✅ joernsast_install ✅
AppleDB Rust Apple device database in Rust appledb ✅ ✅ ✅ appledb_rs_soft_install ❌ (commented out)
Cutter Qt-based reverse engineering platform cutter ✅ ✅ ✅ cutter_soft_install ✅
ImHex Hex editor for reverse engineers imhex ✅ ✅ ✅ imhex_soft_install ✅
Qiling Advanced binary emulation framework Python qiling module ✅ ❌ ❌ qiling_soft_install ❌ (debconf issues)
EMBA Embedded firmware analyzer emba ✅ ✅ ✅ emba_soft_install ❌ (takes long time)
Bytecaster Bytecode analyzer bytecaster ✅ ✅ ✅ bytecaster_soft_install ❌ (install manually)
angr Binary analysis framework with symbolic execution Python angr module ✅ ✅ ✅ angr_soft_install ✅
angrop ROP gadget finder for angr Python angrop module ✅ ✅ ✅ angrop_soft_install ✅
Trivy Vulnerability misconfiguration secret and SBOM scanner for images filesystems and repos trivy ✅ ✅ ❓ (no upstream binary) trivy_install ✅
Sighthound Tree-sitter based static vulnerability scanner with source-to-sink taint flow (Python JS/TS Java PHP C# Go Ruby; text/JSON/CSV/SARIF output) sighthound ✅ ✅ ✅ sighthound_install ✅
🆕
Static analysis alongside the RE tooling. Beyond the disassemblers and unpackers, the image carries a full SAST/fuzzing set you can point at extracted firmware and source trees: Semgrep, Joern, cppcheck, the Clang static analyzer, AFL and honggfuzz. Two of those are new in v3.0.0: Trivy, which scans images, filesystems and repos for vulnerabilities, misconfigurations, secrets and SBOMs, and Sighthound, a tree-sitter based scanner that follows source-to-sink taint flows through Python, JS/TS, Java, PHP, C#, Go and Ruby and reports in text, JSON, CSV or SARIF.

Architecture-Specific Tools:

  • Ghidra: Java-based, works on all architectures
  • Radare2/Cutter: x86_64 only due to Qt dependencies
  • Unicorn/Keystone: x86_64 only (ARM64 builds broken)
  • Binwalk v3: Requires Rust 1.82+, uses cargo for installation

Tool Locations:

  • /reverse/ - Reverse engineering tools and projects
  • Ghidra at /reverse/ghidra_X.X.X_PUBLIC/
  • ImHex: x86_64 uses .deb, ARM64 uses AppImage extraction

Network Analysis

The network image contains general network analysis and security tools:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
Burp Suite Community Web application security testing burpsuite ✅ ✅ ✅ burpsuite_community_install ✅
Nmap Network discovery and security auditing nmap | ncat | nping | ndiff ✅ ✅ ✅ nmap_soft_install ✅
Wireshark Network protocol analyzer wireshark ✅ ✅ ✅ wireshark_soft_install ✅
Metasploit Penetration testing framework msfconsole | msfvenom | msfdb | msfrpc | msfd ✅ ✅ ❌ metasploit_soft_install ✅
Tshark Command-line network protocol analyzer tshark ✅ ✅ ✅ tshark_soft_install ✅
Impacket Python classes for network protocols psexec.py | smbexec.py | wmiexec.py | secretsdump.py | GetNPUsers.py ✅ ✅ ✅ impacket_soft_install ✅
AutoRecon Network reconnaissance automation autorecon ✅ ✅ ✅ autorecon_soft_install ✅
Responder LLMNR NBT-NS and MDNS poisoner responder | Responder.py ✅ ✅ ✅ responder_soft_install ✅
TruffleHog Find secrets in git repositories trufflehog ✅ ✅ ✅ trufflehog_script_install ✅
hping3 Network tool for crafting packets hping3 ✅ ✅ ✅ hping3_soft_install ✅
arping ARP-level ping utility arping ✅ ✅ ✅ arping_soft_install ✅
NetExec Network protocol exploitation (formerly CrackMapExec) nxc | netexec ✅ ✅ ✅ netexec_soft_install ✅
SubEnum Subdomain enumeration tool subenum ✅ ✅ ✅ subenum_soft_install ✅
WebCopilot Web application reconnaissance automation webcopilot ✅ ✅ ✅ webcopilot_soft_install ✅
gowitness Web screenshot and recon tool gowitness ✅ ✅ ✅ gowitnes_soft_install ✅
SIPVicious VoIP security testing suite sipvicious | svmap | svwar | svcrack | svreport | svcrash ✅ ✅ ✅ sipvicious_soft_install ✅
Voipire VoIP attack toolkit voipire ✅ ✅ ✅ voipire_soft_install ✅
SIPpts VoIP penetration testing suite sippts ✅ ✅ ✅ sippts_soft_install ✅
MBTget Modbus security assessment tool mbtget ✅ ✅ ✅ mbtget_soft_install ✅
Kismet Wireless network detector and IDS kismet | kismet_server | kismet_client ✅ ✅ ✅ kismet_soft_install ✅
Bettercap Swiss Army knife for network attacks bettercap ✅ ✅ ✅ bettercap_soft_install ✅
Hashcat Advanced password recovery hashcat ✅ ✅ ✅ hashcat_soft_install ✅
John the Ripper Password cracker john | unshadow | unique ✅ ✅ ✅ john_soft_install ✅
Caido Modern web security proxy caido ✅ ✅ ✅ caido_soft_install ✅
DonPAPI Dump DPAPI secrets remotely donpapi ✅ ✅ ✅ donpapi_soft_install ❌ (install manually)
BeEF Browser Exploitation Framework beef ✅ ✅ ✅ beef_soft_install ❌ (install manually)
Argus The Ultimate Information Gathering Toolkit argus ✅ ✅ ✅ argus_soft_install_fromsource ✅
curlie The power of curl - the ease of use of httpie curlie ✅ ✅ ✅ curlie_soft_install_fromsource ✅
vortix Terminal UI for WireGuard and OpenVPN with real-time telemetry and leak guarding vortix ✅ ✅ ✅ vortix_soft_install_fromsource ✅
snitch a prettier way to inspect network connections snitch ✅ ✅ ✅ snitch_soft_install ✅
sslyze Fast and powerful SSL/TLS scanning library sslyze ✅ ✅ ✅ sslyze_soft_install ✅
netcat (OpenBSD) The network swiss army knife nc ✅ ✅ ✅ netcatopenbsd_soft_install ✅
telnet (client) text based protocol and application telnet ✅ ✅ ✅ telnet_soft_install ✅
SQLMap Automatic SQL injection and database takeover sqlmap ✅ ✅ ✅ sqlmap_soft_install ✅
SSTImap Server-Side Template Injection exploitation tool sstimap ✅ ✅ ✅ sstimap_soft_install ✅
WireTapper Network traffic interception and analysis wiretapper ✅ ✅ ✅ wiretapper_soft_install_fromsource ✅
DonPwner Domain enumeration and exploitation donpwner ✅ ✅ ✅ donpwner_soft_install ❌ (install manually)
Above Network protocol fuzzer above ✅ ✅ ✅ above_soft_install ❌ (install manually)
Titus Penetration testing framework titus ✅ ✅ ✅ titus_soft_install ✅
Brutus Network brute-force tool brutus ✅ ✅ ✅ brutus_soft_install ✅
Nerva Network analysis and reconnaissance nerva ✅ ✅ ✅ nerva_soft_install ✅
Trippy Modern network diagnostic tool (traceroute) trippy ✅ ✅ ✅ trippy_soft_install ✅
MIC Microphone capture utility mic ✅ ✅ ✅ mic_soft_install ✅
CryptoCONdor Cryptography testing toolkit cryptocondor ✅ ✅ ✅ cryptocondor_soft_install ✅
Nmap Automator Automated Nmap scanning wrapper nmapautomator ✅ ✅ ✅ nmapautomator_soft_install ✅
ReconFTW Automated reconnaissance framework reconftw ✅ ✅ ✅ reconftw_soft_install ❌ (install manually)
Tetsuo H3sec Security testing framework tetsuo ✅ ✅ ✅ tetsuo_h3sec_soft_install ❌ (commented out)
SecLists Collection of wordlists for fuzzing discovery and password attacks Wordlists in /opt/fuzzing/SecLists ✅ ✅ ✅ seclist_soft_install ✅
whosthere Identify hosts and services on the local network whosthere ✅ ✅ ✅ whosthere_soft_install ✅
Ettercap Man-in-the-middle attack suite (text-only build) ettercap ✅ ✅ ✅ ettercap_soft_install ✅
ISC DHCP server Rogue/lab DHCP server for network attack setups dhcpd ✅ ✅ ✅ isc_dhcp_server_soft_install ✅
lighttpd Lightweight web server for hosting payloads and captive portals lighttpd ✅ ✅ ✅ lighttpd_soft_install ✅
crunch Wordlist generator crunch ✅ ✅ ✅ crunch_soft_install ✅
NetWatch Terminal UI network monitor netwatch ✅ ✅ ✅ netwatch_soft_install_fromsource ✅
Sniffnet Cross-platform network traffic monitor with a graphical UI sniffnet ✅ ✅ ✅ sniffnet_soft_install_fromsource ✅
betterleaks Search engine and collection tooling for leaked credential datasets betterleaks ✅ ✅ ✅ betterleaks_soft_install ✅
SSRFmap Automatic SSRF fuzzer and exploitation tool ssrfmap ✅ ✅ ✅ ssrfmap_soft_install ✅
GraphQLmap Scripting engine to interact with and attack GraphQL endpoints graphqlmap ✅ ✅ ✅ graphqlmap_soft_install ✅
John the Ripper (jumbo) Password cracker with the community jumbo patch set JohnJumbo ✅ ✅ ✅ johnjumbo_soft_install ✅
Hetty HTTP toolkit for security research (open-source Burp alternative) hetty ✅ ✅ ✅ hetty_soft_install ✅
HExHTTP HTTP header analysis and web cache poisoning testing hexhttp ✅ ✅ ✅ hexhttp_soft_install ✅

Major Frameworks:

  • Metasploit: Full penetration testing framework (x86_64/aarch64)
  • NetExec: Network protocol exploitation
  • Kismet: Wireless/Bluetooth packet capture and analysis
  • Caido: Modern web security testing platform
  • Burp Suite Community: Multi-architecture support (JAR fallback for non-x86_64)

Active Directory 🆕

The ad image builds on network and packs the tooling needed for Windows domain engagements, the part of an assessment that starts once you are past the radio layer:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
AD apt toolchain Base AD client tooling (SMB LDAP Kerberos) smbclient | ldapsearch | kinit | klist | samdump2 | onesixtyone | nbtscan | dig | nslookup ✅ ✅ ✅ ad_apt_tools_install ✅
Impacket Python classes for Windows network protocols psexec.py | smbexec.py | wmiexec.py | secretsdump.py | GetNPUsers.py | GetUserSPNs.py | ntlmrelayx.py ✅ ✅ ✅ impacket_soft_install ✅
Responder LLMNR NBT-NS and MDNS poisoner Responder.py in /opt/network/Responder ✅ ✅ ✅ responder_soft_install ✅
NetExec Network protocol exploitation and AD enumeration (CrackMapExec successor) netexec | nxc ✅ ✅ ✅ netexec_soft_install ✅
DonPAPI Remote DPAPI secret dumping DonPAPI ✅ ✅ ✅ donpapi_soft_install ✅
DonPwner AD exploitation automation on top of DonPAPI Python scripts in /opt/network/DonPwner ✅ ✅ ✅ donpwner_soft_install ✅
ldapdomaindump LDAP-based domain information dumper ldapdomaindump ✅ ✅ ✅ ldapdomaindump_soft_install ✅
BloodHound.py Python ingestor for BloodHound AD graphs bloodhound-python ✅ ✅ ✅ bloodhound_py_soft_install ✅
Certipy AD Certificate Services (ADCS) enumeration and abuse certipy ✅ ✅ ✅ certipy_soft_install ✅
bloodyAD AD privilege escalation framework bloodyAD ✅ ✅ ✅ bloodyad_soft_install ✅
certsync Dump NTDS hashes through ADCS certificates certsync ✅ ✅ ✅ certsync_soft_install ✅
mitm6 IPv6 DNS takeover for NTLM relaying mitm6 ✅ ✅ ✅ mitm6_soft_install ✅
lsassy Remote LSASS credential extraction lsassy ✅ ✅ ✅ lsassy_soft_install ✅
sprayhound AD password spraying with BloodHound integration sprayhound ✅ ✅ ✅ sprayhound_soft_install ✅
kerbrute Kerberos user enumeration and password spraying kerbrute ✅ ✅ ✅ kerbrute_soft_install ✅
SharpLAPS Retrieve LAPS passwords from LDAP (staged as source for the target) SharpLAPS.exe (if a prebuilt binary ships upstream) ✅ ✅ ✅ sharplaps_soft_install ✅ (staged in /opt/ad)
pyGoldenGMSA Golden gMSA attack against Group Managed Service Accounts pygoldengmsa ✅ ✅ ✅ install_pyGoldenGMSA ✅
skewrun Wrap a process with a DC-synchronised clock to survive KRB_AP_ERR_SKEW skewrun ✅ ✅ ✅ (built with cargo) skewrun_soft_install ✅

Tool Locations:

  • /opt/ad/ - Staged AD tooling (SharpLAPS and other target-side payloads)
  • /opt/network/ - Shared network tooling inherited from the network image (Responder, DonPAPI, DonPwner, pyGoldenGMSA)
  • pipx-installed tools are symlinked into /usr/sbin/
Kerberos clock skew: domain controllers reject tickets when your clock drifts more than a few minutes, and inside a container you usually cannot (and should not) change the system clock. skewrun resolves the DC’s time over AD protocols and fakes it via LD_PRELOAD/libfaketime for the wrapped process only, so Impacket, NetExec and friends survive KRB_AP_ERR_SKEW without root and without touching the host clock. Run skewrun --help for the exact invocation.
SharpLAPS is a C#/.NET tool meant to run against Windows targets. RF Swift stages the repository under /opt/ad/SharpLAPS rather than compiling it on Linux. Build it on or against your Windows target.

Mobile / Android 🆕

The android image covers Android application and device assessment, from pulling an APK off a handset to running it through a full static analysis pipeline:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
Android platform tools Device communication flashing and screen mirroring adb | fastboot | scrcpy ✅ ✅ ✅ mobile_apt_tools_install ✅
Apktool APK decompiler and rebuilder apktool ✅ ✅ ✅ mobile_apt_tools_install ✅
apksigner / zipalign APK signing and alignment apksigner | zipalign ✅ ✅ ✅ mobile_apt_tools_install ✅
smali / baksmali Dalvik bytecode assembler and disassembler smali | baksmali | dexdump ✅ ✅ ✅ mobile_apt_tools_install ✅
dex2jar Convert Android DEX to Java JAR for decompilation d2j-dex2jar | d2j-jar2dex | d2j-apk-sign (in /mobile/dex-tools-v2.4) ✅ ✅ ✅ dex2jar_soft_install ✅
Frida Dynamic instrumentation toolkit frida | frida-ps | frida-trace | frida-discover ✅ ✅ ❓ frida_soft_install ✅
objection Runtime mobile exploration built on Frida objection ✅ ✅ ❓ objection_soft_install ✅
androguard Android APK static analysis framework androguard ✅ ✅ ✅ androguard_soft_install ✅
drozer Android security assessment framework (ReversecLabs) drozer ✅ ✅ ✅ drozer_soft_install ✅
MobSF Mobile Security Framework - automated static and dynamic analysis mobsf (web UI on port 8000) ✅ ✅ ❓ mobsf_soft_install ✅

USB device access: adb and fastboot need the handset bound into the container. Pass the device (or the whole USB bus) at creation time:

rfswift run -i android -n mobile_lab -s /dev/bus/usb:/dev/bus/usb

On macOS, use rfswift macusb to attach the device through the Lima VM first.

Tool Locations and Notes:

  • /mobile/ - dex2jar (/mobile/dex-tools-v2.4) and the MobSF checkout
  • MobSF only supports Python 3.12-3.13, so RF Swift provisions a dedicated interpreter with uv at /mobile/.mobsf-python and drives MobSF through it. Start it with mobsf and browse to http://localhost:8000 (expose the port with -p 8000:8000)
  • PDF report export in MobSF relies on wkhtmltopdf, which Ubuntu removed. The upstream static build is installed best-effort on amd64/arm64; MobSF runs fine without it

OSINT 🆕

The osint image collects open-source intelligence and reconnaissance tooling on top of corebuild:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
OSINT apt toolchain Metadata DNS and WHOIS utilities exiftool | exiftran | dnsenum | tor | whois | dig | nslookup ✅ ✅ ✅ osint_apt_tools_install ✅
theHarvester E-mail subdomain and name harvesting from public sources theHarvester ✅ ✅ ✅ osint_pipx_tools_install ✅
Sherlock Hunt usernames across social networks sherlock ✅ ✅ ✅ osint_pipx_tools_install ✅
maigret Profile collection from thousands of sites by username maigret ✅ ✅ ✅ osint_pipx_tools_install ✅
holehe Check which sites an e-mail address is registered on holehe ✅ ✅ ✅ osint_pipx_tools_install ✅
Sublist3r Subdomain enumeration via search engines sublist3r ✅ ✅ ✅ osint_pipx_tools_install ✅
h8mail E-mail breach and password hunting h8mail ✅ ✅ ✅ osint_pipx_tools_install ✅
GHunt Google account investigation ghunt ✅ ✅ ✅ osint_pipx_tools_install ✅
instaloader Instagram profile and media collection instaloader ✅ ✅ ✅ osint_pipx_tools_install ✅
toutatis Extract information from Instagram accounts toutatis ✅ ✅ ✅ osint_pipx_tools_install ✅
censys Censys search CLI for host and certificate data censys ✅ ✅ ✅ osint_pipx_tools_install ✅
subfinder Passive subdomain discovery (ProjectDiscovery) subfinder ✅ ✅ ✅ osint_go_tools_install ✅
assetfinder Find domains and subdomains related to a target assetfinder ✅ ✅ ✅ osint_go_tools_install ✅
waybackurls Fetch known URLs from the Wayback Machine waybackurls ✅ ✅ ✅ osint_go_tools_install ✅
SpiderFoot Automated OSINT collection and correlation platform spiderfoot (web UI) ✅ ✅ ✅ spiderfoot_soft_install ✅
recon-ng Modular web reconnaissance framework recon-ng ✅ ✅ ✅ reconng_soft_install ✅
FinalRecon All-in-one web reconnaissance tool finalrecon ✅ ✅ ✅ finalrecon_soft_install ✅

Tool Locations:

  • /opt/osint/ - SpiderFoot, recon-ng and FinalRecon, each in its own Python virtual environment with a wrapper script in /usr/local/bin
  • pipx-installed tools are symlinked into /usr/sbin/
  • Go tools (subfinder, assetfinder, waybackurls) land in /usr/local/bin
API keys: many OSINT tools (Censys, GHunt, SpiderFoot modules, subfinder sources) need credentials to return useful results. Configure them inside the container and commit the result with rfswift commit, or bind a configuration directory from the host so your keys survive container recreation.

Hardware Security

The hardware image focuses on general hardware security testing and analysis:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
AVRDUDE AVR microcontroller programmer avrdude ✅ ✅ ✅ avrdude_install ✅
DSView Logic analyzer software for DSLogic DSView ✅ ✅ ✅ dsview_install ✅
PulseView Sigrok logic analyzer frontend pulseview ✅ ✅ ✅ pulseview_install ✅
Arduino IDE Integrated development environment for Arduino arduino | arduino-cli ✅ ✅ ✅ arduino_ide_install ✅
Logic 2 (Saleae) Logic analyzer software for Saleae devices logic2 | Logic ✅ ❌ ❌ logic2_saleae_install ✅
Flashrom Flash chip programmer flashrom ✅ ✅ ✅ flashrom_install ✅
dsl2sigrok Convert DSLogic VCD to Sigrok format dsl2sigrok ✅ ✅ ✅ dsl2sigrok_install ✅
SeerGDB Lightweight GUI frontend to GDB seergdb ✅ ✅ ✅ seergdb_install ✅
OpenOCD On-Chip Debugger for embedded devices openocd ✅ ✅ ✅ openocd_install ✅
dfu-util Device Firmware Upgrade utilities dfu-util | dfu-prefix | dfu-suffix ✅ ✅ ✅ dfu_util_install ✅
openFPGALoader Universal FPGA programming utility openFPGALoader ✅ ✅ ✅ openFPGALoader_install ✅
MTKClient MediaTek bootloader client mtkclient | mtk ✅ ✅ ✅ mtkclient_install ✅
esptool ESP8266/ESP32 ROM bootloader utility esptool.py | espefuse.py | espsecure.py ✅ ✅ ✅ esptool_install ✅
ngscopeclient Next-generation oscilloscope software ngscopeclient ✅ ✅ ✅ ngscopeclient_install ✅
GPU Drivers - NVIDIA NVIDIA GPU compute drivers nvidia-smi | nvidia-settings ✅ ✅ ✅ install_GPU_nvidia ✅
GPU Drivers - Intel Intel GPU compute drivers intel-gpu-tools ✅ ✅ ✅ install_GPU_Intel ✅
GPU Drivers - Radeon (up to 5000) AMD Radeon GPU drivers for older cards rocm-smi ✅ ✅ ✅ install_GPU_Radeon_until5000 ✅
GPU Drivers - Radeon (latest) AMD Radeon GPU drivers for latest cards rocm-smi ✅ ✅ ✅ install_GPU_latest_Radeon ✅
HydraNFC Trace Plugin Sigrok plugin for HydraNFC traces Sigrok HydraNFC decoder ✅ ✅ ✅ hydranfc_trace_plugin_install ✅
SPI-TPM Trace Plugin Sigrok plugin for SPI-TPM trace analysis Sigrok SPI-TPM decoder ✅ ✅ ✅ spitpm_trace_plugin_install ✅
SPITkey SPI programming and key extraction tool spitkey ✅ ✅ ✅ spitkey_install ✅
PyHydraBus Python interface for HydraBus hardware pyhydrabus ✅ ✅ ✅ pyhydrabus_install ✅
findus Python module driving the PicoGlitcher fault-injection board Python findus module ✅ ✅ ✅ pythonfindus_install ✅
rd6006 Python module for RD6006 programmable power supplies Python rd6006 module ✅ ✅ ✅ pythonrd6006_install ✅
SLogic PulseView Sipeed SLogic build of PulseView/sigrok isolated in /opt/slogic /opt/slogic/bin/pulseview ✅ ✅ ✅ slogic_pulseview_install_fromsources ✅

Logic Analyzer Software:

  • Logic 2 (Saleae): x86_64 only, uses --no-sandbox flag automatically
  • PulseView/Sigrok: Built from source with ARM64 libsigrokdecode patch
  • DSView: Built from source for DSLogic devices

Tool Locations:

  • /hardware/ - Logic analyzers, programmers, and debugging tools
  • Arduino IDE wrapper at /usr/sbin/arduino
  • OpenOCD with extensive debug probe support

Tool Usage Tips

Tool Directory Organization

RF Swift organizes tools in specialized directories for easier discovery:

  • /rftools/ - Radio frequency analysis tools
    • /rftools/sdr/ - SDR software and utilities
    • /rftools/bluetooth/ - Bluetooth tools and firmwares
    • /rftools/wifi/ - WiFi security tools
    • /rftools/rfid/ - RFID readers and utilities
    • /rftools/calibration/ - VNA and calibration tools
    • /rftools/analysers/ - Spectrum analyzer software
    • /rftools/generators/ - Signal generator software
  • /hardware/ - Hardware security and testing tools
  • /automotive/ - Vehicle communication and analysis tools
  • /reverse/ - Reverse engineering and firmware analysis tools
  • /telecom/ - Telecommunications tools
    • /telecom/2G/ - GSM/2G base stations
    • /telecom/3G/ - UMTS/3G tools
    • /telecom/4G/ - LTE/4G tools
    • /telecom/5G/ - 5G SA/NSA tools
    • /telecom/SIM/ - SIM card tools
  • /security/ - Security testing tools (Caido, etc.)
  • /opt/network/ - Network security tools
  • /opt/ad/ - Active Directory tooling (ad image) 🆕
  • /opt/osint/ - OSINT frameworks in their own venvs (osint image) 🆕
  • /mobile/ - Android and mobile tooling (android image) 🆕
  • /opt/gnuradio4/ - GNU Radio 4.0 tree and its Python venv (sdr_gnuradio4 image) 🆕
  • /opt/fuzzing/ - Wordlists and fuzzing resources (SecLists)
  • /nettools/ - Network monitoring tools built from source
  • /opt/crack/ - Password cracking tools
  • /sast/ - Static analysis security testing

These directories complement the standard system paths (/usr/bin, /usr/local/bin) and contain specialized tools, scripts, and resources.

Finding Available Tools

To discover which tools are available in your current container:

# List all executable commands in standard paths
find /usr/bin /usr/local/bin -type f -executable | sort

# List RF tools in the dedicated directory
ls -la /rftools

# List tools in other specialized directories
ls -la /hardware
ls -la /automotive
ls -la /reverse
ls -la /telecom

# Search for a specific tool across all locations
find /usr/bin /usr/local/bin /rftools /hardware /automotive /reverse /telecom -name "*sdr*" -type f -executable

Manual Tool Installation

Some tools are not installed by default but can be added after container creation. To install these tools:

rfswift install -c container_name -i <installation_function_name>

Common manually-installed tools:

  • mdk3_soft_install - WiFi DoS testing
  • wifipumpkin3_soft_install - Rogue AP framework
  • install_soapy_modules - Additional SoapySDR device support
  • pocketvna_sa_device - PocketVNA software (x86_64 only)
  • srsran5GSA_bladerf_soft_install - 5G SA gNB fork with bladeRF support

To find out what is available in a given image, check the Installation function column of the tables above. Every entry marked ❌ can be installed this way.

Check what actually built. RF Swift images record install failures instead of aborting the whole build, so a tool listed as installed by default may still be missing if its build broke on your architecture. Every image carries its build report at /var/lib/db/rfswift_build_report.tsv. Inspect it from inside a running container:

cat /var/lib/db/rfswift_build_report.tsv

An empty or missing file means nothing failed. Failures are recorded as CATEGORY / STAGE / ITEM / DETAIL, so you can see exactly which tool broke and why, then reinstall it manually with rfswift install once the upstream issue is fixed.

Tool Documentation

Most tools include built-in help available through the -h or --help flags:

tool_name --help

For more detailed documentation, many tools include man pages:

man tool_name

Creating Tool Aliases

For frequently used tools with complex options, consider creating aliases in your container:

echo 'alias rtlpower-optimized="rtl_power -f 88M:108M:25k -g 50 -i 10 -e 1h power.csv"' >> ~/.zshrc
source ~/.zshrc

Architecture-Specific Notes

x86_64 / AMD64

  • Broadest tool support
  • All GPU-accelerated tools available
  • SignalHound and specialized SA software supported

ARM64 / aarch64

  • Most tools fully supported
  • Some GUI applications require AppImage extraction
  • Limited SA software support (no SignalHound Spike/VSG60)
  • Python tools may need building from source

RISC-V64

  • Growing support, most core SDR tools work
  • Some tools installed from source due to package availability
  • Limited pre-built binary support
  • Python packages may require longer build times

Next Steps

Continue to the Configurations page to learn how to customize your RF Swift environment:

Configuration Options
Customize your RF Swift environment for optimal performance.
Last updated on
Container ImagesConfigurations