Included Tools
RF Swift Tool Collection
RF Swift provides a comprehensive suite of specialized tools for radio frequency and hardware security work. This page catalogs the tools available in each pre-built image.
Installation Status Key:
- â Installed by default - Tool is included when you build/pull the image
- â Install manually - Tool function exists but must be run manually after container creation
- â Limited support - Tool may have architecture-specific issues
Image Hierarchy
Each RF Swift image builds upon a foundation of tools, with specialized images adding domain-specific capabilities. Understanding this hierarchy helps you choose the most appropriate image for your needs:
graph TD;
A[corebuild]-->B[sdrsa_devices];
A-->C[rfid];
A-->D[automotive];
A-->E[reversing];
A-->F[sdrsa_devices_antsdr];
A-->G[sdrsa_devices_rtlsdrv4];
A-->H[network];
B[sdrsa_devices]-->I[sdr_light];
B[sdrsa_devices]-->J[bluetooth];
B[sdrsa_devices]-->K[telecom_utils];
B[sdrsa_devices]-->L[hardware];
H[network]-->M[wifi];
I[sdr_light]-->N[sdr_full];
I[sdr_light]-->O[sdr_deeptempest_beta];
K[telecom_utils]-->P[telecom_2Gto3G];
K[telecom_utils]-->Q[telecom_4G_5GNSA];
K[telecom_utils]-->R[telecom_4Gto5G];
K[telecom_utils]-->S[telecom_5G];
K[telecom_utils]-->T[telecom_5G_bladerf];Tool Categories
Core SDR Devices Support
The sdrsa_devices image serves as the foundation for many RF Swift images, providing essential drivers and utilities for software-defined radio hardware.
| Tool(s) | Description | Available commands | amd64 | aarch64 | riscv64 | Installation function | Installed by default |
|---|---|---|---|---|---|---|---|
| UHD tools and libs | USRP Hardware Driver - Universal driver for Ettus Research USRP devices | uhd_adc_self_cal | uhd_fft | uhd_rx_cfile | uhd_cal_rx_iq_balance | uhd_find_devices | uhd_rx_nogui | uhd_cal_tx_dc_offset | uhd_image_loader | uhd_siggen | uhd_cal_tx_iq_balance | uhd_images_downloader | uhd_siggen_gui | uhd_config_info | uhd_modes.py | uhd_usrp_probe | â | â | â | uhd_devices_install | â |
| RTL-SDR tools and libs | RTL-SDR driver and tools for RTL2832U-based DVB-T receivers | rtl_biast | rtl_fm | rtl_sdr | rtl_test | rtl_adsb | rtl_eeprom | rtl_power | rtl_tcp | â | â | â | rtlsdr_devices_install | â |
| RTL-SDR v4 tools | Enhanced RTL-SDR Blog v4 driver with improved performance | rtl_biast | rtl_fm | rtl_sdr | rtl_test | rtl_adsb | rtl_eeprom | rtl_power | rtl_tcp | â | â | â | rtlsdrv4_devices_install | â (optional alternative) |
| libiio and libad9361 | Industrial I/O and AD9361 library for PlutoSDR and similar devices | iio_adi_xflow_check | iio_attr | iio_genxml | iio_info | iio_readdev | iio_reg | iio_stresstest | iio_writedev | â | â | â | ad_devices_install | â |
| Nuand bladeRF tools | bladeRF SDR tools and libraries built from source | bladeRF-cli | bladeRF-fsk | â | â | â | nuand_devices_fromsource_install | â |
| HackRF tools and lib | HackRF One SDR platform tools and libraries | hackrf_clock | hackrf_debug | hackrf_operacake | hackrf_sweep | hackrf_cpldjtag | hackrf_info | hackrf_spiflash | hackrf_transfer | â | â | â | hackrf_devices_install | â |
| Airspy tools and lib | Airspy R2/Mini and HF+ SDR receivers | airspy_gpio | airspy_rx | airspyhf_info | airspy_gpiodir | airspy_si5351c | airspyhf_lib_version | airspy_info | airspy_spiflash | airspyhf_rx | airspy_lib_version | airspyhf_calibrate | airspy_r820t | airspyhf_gpio | â | â | â | airspy_devices_install | â |
| LimeSDR tools and lib | LimeSDR and LimeSDR Mini SDR platform | LimeQuickTest | LimeSuiteGUI | LimeUtil | â | â | â | limesdr_devices_install | â |
| Funcube tools and lib | Funcube Dongle and Dongle Pro SDR receivers | qthid-fcd-controller | â | â | â | funcube_devices_install | â |
| XTRX tools and lib | XTRX mini-PCIe SDR platform | xtrx_fft | â | â | â | xtrx_devices_install | â |
| OsmoFL2K tools and lib | FL2000-based VGA adapter as SDR transmitter | fl2k_file | fl2k_tcp | fl2k_fm | fl2k_test | â | â | â | osmofl2k_devices_install | â |
| SignalHound Spike | Spectrum analyzer software for SignalHound BB and SM series | Spike | â | â | â | signalhound_spike_sa_device | â |
| SignalHound VSG60 | Signal generator software for VSG60 vector signal generator | vsg60 | â | â | â | signalhound_vsg60_sa_device | â |
| Harogic Devices | SAStudio4 spectrum analyzer software for Harogic HTRA devices | sastudio | â | â | â | harogic_sa_device | â |
| RFNM | RFNM SDR platform library and drivers | librfnm | â | â | â | rfnm_devices_install | â |
| LibreSDR B2x0 | Open-source FPGA images for USRP B2x0 series | libresdr_swapfpga | â | â | â | libresdr_b2x0_devices_install | â |
| pocketVNA | Vector Network Analyzer software for pocketVNA device | pocketVNA | â | â | â | pocketvna_sa_device | â (install manually) |
| LiteX M2SDR | LiteX-based M2SDR platform with SoapySDR drivers | SoapySDR drivers | â | â | â | litexm2sdr_devices_install | â |
| HydraSDR/RFOne tools | HydraSDR RFOne SDR platform tools and libraries | hydrasdr_gpio | hydrasdr_calibrate | hydrasdr_gpiodir | hydrasdr_lib_version | hydrasdr_reset | hydrasdr_set_rf_port | hydrasdr_spiflash | hydrasdr_info | hydrasdr_r82x | hydrasdr_rx | hydrasdr_si5351c | â | â | â | hydrasdr_rfone_install | â |
| kalibrate-hydrasdr | GSM frequency calibration tool for HydraSDR | kal | â | â | â | kalibrate_hydrasdr_device | â |
| USDR Library | waveLab USDR software-defined radio library | libusdr | â | â | â | usdr_lib_install | â |
| ANTSDR UHD | MicroPhase ANTSDR variant of UHD for ANTSDR devices | Same as UHD tools | â | â | â | antsdr_uhd_devices_install | â (optional alternative to UHD) |
| SoapySDR modules | Additional SoapySDR device modules (osmosdr rtlsdr bladerf hackrf uhd mirisdr rfspace) | Various SoapySDR modules | â | â | â | install_soapy_modules | â (install manually) |
| SoapyPlutoSDR | SoapySDR module for PlutoSDR devices | SoapySDR PlutoSDR support | â | â | â | install_soapyPlutoSDR_modules | â (install manually) |
Device-Specific Notes:
- UHD vs ANTSDR: Choose either standard UHD or ANTSDR variant during build (mutually exclusive)
- RTL-SDR versions: Standard rtl-sdr or rtlsdrv4 blog version (mutually exclusive)
- Manual installation tools: SoapySDR modules, SoapyPlutoSDR, and pocketVNA require manual installation after container creation
Common Device Troubleshooting
RTL-SDR Kernel Module Conflicts
If your RTL-SDR device is unavailable when using tools like nfc-spy, the DVB-T kernel module may have claimed it. Blacklist the module with:
echo "blacklist dvb_usb_rtl28xxu" | sudo tee /etc/modprobe.d/blacklist-dvb_usb_rtl28xxu.confYou’ll need to restart your host system after adding this blacklist entry.
PlutoSDR Connection Issues
If the PlutoSDR doesn’t appear with iio_info -s and you see errors like:
with backends: local xml ip usb
Unable to create Local IIO context : No such file or directory (2)
ERROR: Unable to create Avahi DNS-SD client :Daemon not running
Scanning for IIO contexts failed: Text file busy (26)This can be resolved in two ways:
- On Linux hosts: Ensure
avahi-daemonis running on your host system - Inside the container: Run the Avahi daemon with:
avahi-daemon --no-drop-root --no-rlimits
SDR Light Tools
The sdr_light image includes essential software-defined radio tools for signal capture, analysis, and basic decoding.
| Tool(s) | Description | Available commands | amd64 | aarch64 | riscv64 | Installation function | Installed by default |
|---|---|---|---|---|---|---|---|
| GNU Radio | Open-source SDR toolkit and signal processing framework | gnuradio-companion | gnuradio-config-info | gr_modtool | gr_plot_* | grcc | â | â | â | gnuradio_soft_install | â |
| gr-osmosdr | Common source/sink blocks for SDR hardware | Part of GNU Radio | â | â | â | common_sources_and_sinks | â |
| SoapySDR modules | Device abstraction layer for SDR hardware | SoapySDRUtil | SoapySDRServer | â | â | â | install_soapy_modules | â |
| SoapyPlutoSDR | PlutoSDR support for SoapySDR | SoapySDR PlutoSDR module | â | â | â | install_soapyPlutoSDR_modules | â |
| KC908 Spectrum Analyzer | DEEPACE KC908 spectrum analyzer software | KC908 | â | â | â | kc908_sa_device | â |
| SoapyRFNM | RFNM device support for SoapySDR | SoapySDR RFNM module | â | â | â | soapyrfnm_grmod_install | â |
| SoapyHydraSDR | HydraSDR RFOne support for SoapySDR | SoapySDR HydraSDR module | â | â | â | hydrasdr_rfone_soapy_install | â |
| SoapyHarogic | Harogic device support for SoapySDR | SoapySDR Harogic module | â | â | â | soapyharogic_grmod_install | â |
| gr-bladerf | bladeRF GNU Radio blocks | GNU Radio bladeRF blocks | â | â | â | grbladerf_grmod_install | â |
| gr-signal-hound | Signal Hound device GNU Radio support | GNU Radio Signal Hound blocks | â | â | â | grsignalhound_Receiver_grmod_install | â |
| gr-htra | Harogic HTRA GNU Radio blocks | GNU Radio HTRA blocks | â | â | â | grhtra_grmod_install | â |
| GQRX | Software-defined radio receiver powered by GNU Radio | gqrx | â | â | â | gqrx_soft_install | â |
| multimon-ng | Digital decoder for multiple radio transmission modes | multimon-ng | â | â | â | multimon_ng_soft_install | â |
| Universal Radio Hacker (URH) | Wireless protocol investigation and reverse engineering | urh | â | â | â | urh_soft_install | â |
| Inspectrum | Offline radio signal analyzer | inspectrum | â | â | â | inspectrum_soft_install | â |
| rtl_433 | Generic data receiver for ISM band devices | rtl_433 | â | â | â | rtl_433_soft_install | â |
| retrogram-rtlsdr | Retro text-mode spectrogram for rtl-sdr | retrogram-rtlsdr | â | â | â | retrogram_soapysdr_soft_install | â |
| LuaRadio | Lightweight real-time SDR framework in Lua | luaradio | â | â | â | luaradio_sdr_soft_install | â |
| dump1090 | Mode S ADS-B decoder for aircraft tracking | dump1090 | â | â | â | dump1090_soft_install | â |
| readsb | Improved Mode S/ADS-B decoder | readsb | â | â | â | readsb_soft_install | â |
| dumpvdl2 | VDL Mode 2 decoder for aircraft ACARS | dumpvdl2 | â | â | â | dumpvdl2_soft_install | â |
| dumphfdl | HFDL decoder for HF aircraft communications | dumphfdl | â | â | â | dumphfdl_soft_install | â |
| SDR++ | Cross-platform SDR software with modern interface | sdrpp | â | â | â | sdrpp_soft_fromsource_install | â |
| SDR++ Extra Modules | Additional demodulators and sources for SDR++ | SDR++ plugins | â | â | â | sdrpp_extramodules_install | â |
| Jupyter Notebook | Interactive computing environment for SDR experiments | jupyter | jupyter-notebook | â | â | â | jupyter_soft_install | â |
| Leo Bodnar GPSDO v1 | Calibration tool for Leo Bodnar GPS reference v1 | leobodnar-gpsdo-v1 | â | â | â | leobodnarv1_cal_device | â |
| Leo Bodnar GPSDO v2 | Calibration tool for Leo Bodnar GPS reference v2 | leobodnar-gpsdo-v2 | â | â | â | leobodnarv2_cal_device | â |
| KCSDI | Calibration utilities for KC series devices | kcsdi | â | â | â | KCSDI_cal_device | â |
| NanoVNASaver | VNA software for NanoVNA devices | NanoVNASaver | â | â | â | NanoVNASaver_cal_device | â |
| NanoVNA-QT | Qt-based software for NanoVNA | nanovna-qt | â | â | â | NanoVNA_QT_cal_device | â |
| GNSSLogger | GNSS logging and calibration tool | gnsslogger | â | â | â | gnsslogger_cal_device | â |
| LibreVNA | Open-source Vector Network Analyzer software | LibreVNA | â | â | â | librevna_cal_device_buildx | â |
| xnec2c | NEC2 antenna modeling software | xnec2c | â | â | â | xnec2c_cal_device | â (broken - fix source) |
| GNSS-SDR | Global Navigation Satellite Systems software receiver | gnss-sdr | â | â | â | gnss_sdr_soft_install | â |
| Artemis | SDR-based RF spectrum monitoring | artemis | â | â | â | artemis_soft_install | â |
| GQRX Scanner | Frequency scanner plugin for GQRX | gqrx-scanner | â | â | â | gqrxscanner_sdr_soft_install | â |
| Lotus BUDC Tuner | Lotus BUDC tuning device support | lotus-budc | â | â | â | lotus_budc_tune_device | â |
Tool Locations:
Most SDR tools are installed in standard system paths (/usr/bin, /usr/local/bin), with specialized tools in:
/rftools/sdr/- SDR-specific applications/rftools/analysers/- Spectrum analyzer software/rftools/generators/- Signal generator software
SDR Full Environment
The sdr_full image builds on sdr_light to provide a comprehensive SDR development and analysis environment, including GNU Radio and specialized plugins.
GNU Radio Out-Of-Tree Modules
These modules extend GNU Radio’s capabilities for specific protocols and signal types:
| Tool(s) | Description | amd64 | aarch64 | riscv64 | Installation function | Installed by default |
|---|---|---|---|---|---|---|
| gr-osmosdr | Common source/sink blocks for various SDR hardware | â | â | â | common_sources_and_sinks | â |
| gr-gsm | GSM/GPRS/EDGE baseband processor for GNU Radio | â | â | â | grgsm_grmod_install | â |
| gr-lora | LoRa PHY implementation for GNU Radio | â | â | â | grlora_grmod_install | â |
| gr-lora_sdr | Alternative LoRa SDR implementation with better decoding | â | â | â | grlorasdr_grmod_install | â |
| gr-iridium | Iridium satellite communication decoder | â | â | â | griridium_grmod_install | â |
| gr-inspector | Signal analysis and classification toolkit | â | â | â | grinspector_grmod_install | â |
| gr-uaslink | Unmanned Aerial System datalink decoder | â | â | â | gruaslink_grmod_install | â |
| gr-X10 | X10 home automation protocol decoder | â | â | â | grX10_grmod_install | â |
| gr-gfdm | Generalized Frequency Division Multiplexing implementation | â | â | â | grgfdm_grmod_install | â |
| gr-aaronia_rtsa | Aaronia real-time spectrum analyzer support | â | â | â | graaronia_rtsa_grmod_install | â |
| gr-ccsds | CCSDS (space communications) protocol support | â | â | â | grccsds_move_rtsa_grmod_install | â (broken - strtod_l issue) |
| gr-ais | Automatic Identification System (AIS) decoder | â | â | â | grais_grmod_install | â |
| gr-aistx | AIS transmitter blocks | â | â | â | graistx_grmod_install | â |
| gr-air-modes | Mode S/ADS-B aircraft transponder decoder | â | â | â | grairmodes_grmod_install | â |
| gr-dvbs2 | DVB-S2 digital video broadcasting decoder | â | â | â | grdvbs2_grmod_install | â |
| gr-tempest | TEMPEST electromagnetic emanations receiver | â | â | â | grtempest_grmod_install | â |
| deep-tempest | Deep learning-based TEMPEST for screen reconstruction | â | â | â | deeptempest_grmod_install | â (see sdr_deeptemptest_beta image) |
| gr-dab | Digital Audio Broadcasting (DAB/DAB+) decoder | â | â | â | grdab_grmod_install | â |
| gr-dect2 | DECT (cordless phone) protocol decoder | â | â | â | grdect2_grmod_install | â |
| gr-foo | Miscellaneous GNU Radio blocks and utilities | â | â | â | grfoo_grmod_install | â |
| gr-ieee802-11 | WiFi (802.11a/g/p) transceiver implementation | â | â | â | grieee802-11_grmod_install | â |
| gr-ieee802-11ah | WiFi HaLow (802.11ah) sub-1GHz implementation | â | â | â | grieee802-11ah_grmod_install | â |
| gr-ieee80211 (gr-wifi) | Alternative WiFi implementation | â | â | â | grieee80211-grwifi_grmod_install | â |
| gr-ieee802-15-4 | ZigBee and 802.15.4 PHY/MAC implementation | â | â | â | grieee802154_grmod_install | â |
| gr-rds | Radio Data System (RDS) encoder/decoder | â | â | â | grrds_grmod_install | â |
| gr-droneid | DJI DroneID and RemoteID decoder | â | â | â | grdroineid_grmod_install | â |
| gr-satellites | Satellite telemetry decoder (100+ satellites) | â | â | â | grsatellites_grmod_install | â |
| gr-adsb | ADS-B aircraft transponder decoder | â | â | â | gradsb_grmod_install | â |
| gr-keyfob | Car key fob signal analyzer | â | â | â | grkeyfob_grmod_install | â |
| gr-radar | Radar signal processing toolkit | â | â | â | grradar_grmod_install | â |
| gr-nordic | Nordic Semiconductor protocol decoder (nRF24L01+) | â | â | â | grnordic_grmod_install | â |
| gr-paint | Spectrum painting and waterfall annotation | â | â | â | grpaint_grmod_install | â |
| gr-pdu_utils | Protocol Data Unit utilities from Sandia | â | â | â | grpdu_utils_grmod_install | â |
| gr-sandia_utils | Sandia National Labs signal processing blocks | â | â | â | grsandia_utils_grmod_install | â |
| gr-timing_utils | Timing and synchronization utilities from Sandia | â | â | â | grtiming_utils_grmod_install | â |
| gr-fhss_utils | Frequency Hopping Spread Spectrum utilities | â | â | â | grfhss_utils_grmod_install | â |
| gr-zwave_poore | Z-Wave home automation protocol decoder | â | â | â | grzwavepoore_grmod_install | â |
| gr-mixalot | POCSAG pager protocol encoder | â | â | â | grmixalot_grmod_install | â |
| gr-reveng | CRC and checksum reverse engineering | â | â | â | grreveng_grmod_install | â |
| gr-DCF77_Receiver | DCF77 time signal receiver | â | â | â | gr_DCF77_Receiver_grmod_install | â |
| gr-j2497 | MIL-STD-1553 and MIL-STD-1397 decoder | â | â | â | grj2497_grmod_install | â |
| gr-m17 | M17 digital voice protocol implementation | â | â | â | grm17_grmod_install | â |
| gr-grnet | Network socket blocks for GNU Radio | â | â | â | grgrnet_grmod_install | â |
| gr-aoa | Angle of Arrival estimation | â | â | â | graoa_grmod_install | â |
| gr-correctiq | IQ correction algorithms for SDR devices | â | â | â | grcorrectiq_grmod_install | â |
| gr-dsd | Digital Speech Decoder (P25 DMR NXDN) | â | â | â | grdsd_grmod_install | â |
| gr-nrsc5 | HD Radio (NRSC-5) decoder | â | â | â | grnrsc5_grmod_install | â |
| gr-ntsc-rc | NTSC video signal processing | â | â | â | grntscrc_grmod_install | â |
| gr-nfc | NFC (Near Field Communication) PHY | â | â | â | grnfc_grmod_install | â |
| gr-fosphor | GPU-accelerated spectrum analyzer (requires GPU) | â | â | â | grfosphor_grmod_install | â (GPU images only) |
| gr-mer | Modulation Error Ratio measurement | â | â | â | grmer_grmod_install | â |
| gr-flarm | FLARM aircraft collision avoidance decoder | â | â | â | grflarm_grmod_install | â |
| gr-guiextra | Additional GUI widgets and displays | â | â | â | grguiextra_grmod_install | â |
| gr-rftap | RF tap blocks for protocol analysis | â | â | â | grrftap_grmod_install | â |
| gr-radio_astro | Radio astronomy signal processing | â | â | â | grradioastro_grmod_install | â |
| gr-cessb | Controlled Envelope Single Sideband modulation | â | â | â | grcessb_grmod_install | â |
| gr-signal-hound | Signal Hound device support for GNU Radio | â | â | â | grsignalhound_Receiver_grmod_install | â (install manually) |
| gr-bladerf | bladeRF device support for GNU Radio | â | â | â | grbladerf_grmod_install | â (install manually) |
| gr-htra | Harogic HTRA device support for GNU Radio | â | â | â | grhtra_grmod_install | â (install manually) |
| SoapyRFNM | SoapySDR support for RFNM devices | â | â | â | soapyrfnm_grmod_install | â (install manually) |
| SoapyHarogic | SoapySDR support for Harogic devices | â | â | â | soapyharogic_grmod_install | â (install manually) |
| SoapyHydraSDR | SoapySDR support for HydraSDR RFOne | â | â | â | hydrasdr_rfone_soapy_install | â (install manually) |
Known Issues:
- gr-ccsds: Currently broken due to strtod_l dependency issues
- deep-tempest: Available in separate
sdr_deeptempest_betaimage due to specific dependencies - gr-fosphor: Only included in GPU-enabled builds (requires OpenCL/CUDA)
- gr-signal-hound: Requires manual installation (architecture-specific)
Additional SDR Software
| Tool(s) | Description | Available commands | amd64 | aarch64 | riscv64 | Installation function | Installed by default |
|---|---|---|---|---|---|---|---|
| CyberEther | Real-time SDR signal analyzer with GPU acceleration | cyberether | â | â | â | cyberther_soft_install | â |
| SigDigger | Advanced signal analyzer for reverse engineering | SigDigger | â | â | â | sigdigger_soft_install | â |
| QSSTV | Slow-scan television (SSTV) transceiver | qsstv | â | â | â | qsstv_soft_install | â |
| nfc-laboratory | NFC protocol analyzer and emulator | nfc-laboratory | â | â | â | nfclaboratory_soft_install | â |
| ice9-bluetooth | Bluetooth Classic sniffer | ice9-bluetooth | â | â | â | ice9_bluetooth_soft_install | â |
| Meshtastic SDR | Meshtastic mesh network SDR tools | meshtastic-sdr | â | â | â | meshtastic_sdr_soft_install | â |
| GPS-SDR-SIM | GPS signal simulator | gps-sdr-sim | â | â | â | gps_sdr_sim_soft_install | â |
| Gpredict | Real-time satellite tracking and orbit prediction | gpredict | â | â | â | gpredict_sdr_soft_install | â |
| V2Verifier | V2X message verification tool | v2verifier | â | â | â | v2verifier_sdr_soft_install | â |
| wavingZ | Z-Wave protocol analyzer | wavingz | â | â | â | wavingz_sdr_soft_install | â |
| PySpecSDR | Python spectrum analyzer | pyspecsdr | â | â | â | pyspecsdr_sdr_soft_install | â |
| AIS Catcher | Automatic Identification System decoder | aiscatcher | â | â | â | AIScatcher_soft_install | â |
| TetraKit | TETRA digital radio toolkit | tetrakit | â | â | â | tetrakit_soft_install | â |
| TetraKit Player | TETRA voice player | tetrakit-player | â | â | â | tetrakitplayer_soft_install | â |
| TETRA Suite | Complete TETRA decoder (osmo-tetra telive) | osmo-tetra | telive | â | â | â | tetra_suite_install | â |
| OP25 | APCO Project 25 decoder | op25 | â | â | â | op25_soft_install | â |
| Trunk Recorder | Multi-channel trunked radio recorder | trunk-recorder | â | â | â | trunkrecorder_soft_install | â |
| SatDump | Universal satellite data processing software | satdump | satdump-ui | â | â | â | satdump_sdr_soft_install | â |
| SDRangel | Multi-platform SDR software with extensive plugins | sdrangel | â | â | â | sdrangel_soft_fromsource_install | â |
| ML and DL Libraries | Machine learning libraries for signal processing (numpy pandas scikit-learn tensorflow) | Python ML/DL modules | â | â | â | ml_and_dl_soft_install | â |
| GPU Drivers - NVIDIA | NVIDIA GPU compute drivers for acceleration | nvidia-smi | nvidia-settings | â | â | â | install_GPU_nvidia | â |
| GPU Drivers - Intel | Intel GPU compute drivers | intel-gpu-tools | â | â | â | install_GPU_Intel | â |
| GPU Drivers - Radeon (up to 5000) | AMD Radeon GPU drivers for older cards | rocm-smi | â | â | â | install_GPU_Radeon_until5000 | â |
| GPU Drivers - Radeon (latest) | AMD Radeon GPU drivers for latest cards | rocm-smi | â | â | â | install_GPU_latest_Radeon | â |
| gr-fosphor | GPU-accelerated FFT and display for GNU Radio | GNU Radio fosphor blocks | â | â | â | grfosphor_grmod_install | â (GPU images only) |
Major Software Suites:
- SDR++: Modern cross-platform SDR software with plugin support
- SDRAngel: Advanced SDR software with extensive plugin ecosystem
- GQRX: Popular SDR receiver powered by GNU Radio
- SigDigger: Signal analysis and reverse engineering tool
- URH: Universal Radio Hacker for wireless protocol analysis (with HydraSDR fork enhancements)
RFID Tools
The rfid image focuses on radio-frequency identification analysis and exploitation:
| Tool(s) | Description | Available commands | amd64 | aarch64 | riscv64 | Installation function | Installed by default |
|---|---|---|---|---|---|---|---|
| proxmark3 | RRG/Iceman Proxmark3 firmware and client | proxmark3 | pm3 | â | â | â | proxmark3_soft_install | â |
| libnfc | Near Field Communication library and tools | nfc-list | nfc-scan-device | nfc-poll | nfc-dep-initiator | nfc-dep-target | â | â | â | libnfc_soft_install | â |
| nfc-tools | Utilities for libnfc | nfc-barcode | nfc-read-forum-tag3 | nfc-emulate-forum-tag4 | nfc-mfclassic | nfc-relay-picc | nfc-jewel | nfc-mfultralight | â | â | â | libnfc_soft_install | â |
| mfoc | MIFARE Classic Offline Cracker | mfoc | â | â | â | mfoc_soft_install | â |
| mfcuk | MIFARE Classic Universal toolKit | mfcuk | â | â | â | mfcuk_soft_install | â |
| mfdread | MIFARE dump reader and parser | /rftools/rfid/mfdread/mfdread.py | â | â | â | mfread_soft_install | â |
| RFIDler | Open-source RFID emulator and reader | /root/thirdparty/RFIDler/ | â | â | â | rfidler_soft_install | â |
| miLazyCracker | Automated MIFARE Classic cracking with DarkSide attack | /rftools/rfid/miLazyCracker/ | â | â | â | miLazyCracker_soft_install | â |
RFID Device Requirements:
When using RFID tools, you need to ensure that your RFID reader device (typically appearing as /dev/ttyACM0) is properly bound to the container:
# When creating a new container
rfswift run -i rfid -n rfid_tools -s /dev/ttyACM0:/dev/ttyACM0
# Or with an existing container
rfswift bindings add -c rfid_tools -d -t /dev/ttyACM0 # or without -d if you want to unplug and replug it when container is runningBluetooth Analysis
The bluetooth image contains specialized tools for Bluetooth protocol analysis and security testing:
| Tool(s) | Description | Available commands | amd64 | aarch64 | riscv64 | Installation function | Installed by default |
|---|---|---|---|---|---|---|---|
| hcitools | Bluetooth HCI layer tools for device configuration and management | hciattach | hciconfig | hcidump | hcitool | â | â | â | blueztools_soft_install | â |
| bluez tools | BlueZ Bluetooth protocol stack utilities | bluetoothctl | bluetoothd | btmon | â | â | â | blueztools_soft_install | â |
| mirage | Modular framework for BLE security auditing with Python 3.10 venv | mirage | â | â | â | mirage_soft_install | â |
| Sniffle | TI CC13x2/CC26x2 BLE sniffer with OpenDroneID support | /rftools/bluetooth/Sniffle/ | â | â | â | sniffle_soft_install | â |
| bluing | Python-based Bluetooth Low Energy scanner and analyzer | /rftools/bluetooth/bluing/bluing/bin/ | â | â | â | bluing_soft_install | â |
| bdaddr | Tool to change Bluetooth device address | /rftools/bluetooth/bdaddr/bdaddr | â | â | â | bdaddr_soft_install | â |
| WHAD | Wireless Hacking Devices protocol framework | whadup | wplay | wsniff | wfilter | wextract | wdump | wshark | wanalyze | winject | wserver | wble-central | wble-periph | wble-proxy | wble-spawn | wble-connect | wuni-scan | wuni-mouse | wuni-keyboard | â | â | â | whad_soft_install | â |
| esp32_bluetooth_classic_sniffer | ESP32-based Bluetooth Classic sniffer with Python CLI | BTSnifferBREDR | â | â | â | esp32_bluetooth_classic_sniffer_soft_install | â |
| bettercap | Swiss Army knife for WiFi Bluetooth and network attacks | bettercap | â | â | â | bettercap_soft_install | â (install manually) |
| Kismet | Wireless network detector and packet sniffer with BT support | kismet | â | â | â | kismet_soft_install | â (install manually) |
| BlueKit | Bluetooth security assessment toolkit | bluekit | â | â | â | bluekit_soft_install | â (install manually) |
Required Capability:
Bluetooth tools require the NET_ADMIN capability to function properly. Always include this capability when running the container:
rfswift run -i bluetooth -n bt_tools -a NET_ADMINWithout this capability, many Bluetooth tools will fail with permission errors when attempting to configure network interfaces.
Python Virtual Environments: Some Bluetooth tools run in isolated Python environments:
- Mirage: Uses Python 3.10 venv at
/opt/mirage-env/, accessed via wrapper script at/usr/sbin/mirage - Bluing: Uses Python 3.10 venv at
/rftools/bluetooth/bluing/, run withbluing_runscript
Tool Locations:
/rftools/bluetooth/- Main Bluetooth tools directory/rftools/bluetooth/firmwares/- Firmware for various BLE sniffers (Btlejack, Injectable NRF52840, Sniffle)
Wi-Fi Security
The wifi image provides tools for Wi-Fi network analysis, packet capture, and security assessment:
| Tool(s) | Description | Available commands | amd64 | aarch64 | riscv64 | Installation function | Installed by default |
|---|---|---|---|---|---|---|---|
| iproute2 | Modern network configuration utilities | ip | ss | bridge | rtmon | â | â | â | common_nettools | â |
| hostapd | IEEE 802.11 AP and authentication server | hostapd | â | â | â | common_nettools | â |
| dnsmasq | Lightweight DNS/DHCP server for rogue AP | dnsmasq | â | â | â | common_nettools | â |
| macchanger | MAC address spoofing utility | macchanger | â | â | â | common_nettools | â |
| tshark | Command-line network protocol analyzer | tshark | â | â | â | common_nettools | â |
| aircrack-ng | Complete WiFi security auditing suite | airbase-ng | aircrack-ng | airdecap-ng | airdecloak-ng | aireplay-ng | airmon-ng | airodump-ng | airodump-ng-oui-update | airolib-ng | airmon-zc | airtun-ng | besside-ng | easside-ng | tkiptun-ng | wesside-ng | â | â | â | aircrack_soft_install | â |
| hcxdumptool | Modern WiFi capture tool for hashcat | hcxdumptool | â | â | â | hcxdumptool_soft_install | â |
| hcxtools | Convert captures to hashcat format | hcxpcapngtool | hcxhashtool | hcxpsktool | hcxpmktool | â | â | â | hcxtools_soft_install | â |
| reaver | WPS brute-force attack tool | reaver | wash | â | â | â | reaver_soft_install | â |
| bully | Alternative WPS brute-force tool | bully | â | â | â | bully_soft_install | â |
| pixiewps | WPS Pixie Dust attack implementation | pixiewps | â | â | â | pixiewps_soft_install | â |
| eaphammer | Targeted evil twin and credential harvesting | /rftools/wifi/eaphammer/ | â | â | â | eaphammer_soft_install | â |
| airgeddon | Multi-tool WiFi security auditing framework | /rftools/wifi/airgeddon/airgeddon.sh | â | â | â | airgeddon_soft_install | â |
| wifite2 | Automated WiFi attack tool | wifite | â | â | â | wifite2_soft_install | â |
| sparrow-wifi | WiFi and Bluetooth analyzer with SDR support | /rftools/wifi/sparrow-wifi/ | â | â | â | sparrowwifi_sdr_soft_install | â |
| krackattacks-scripts | KRACK attack proof-of-concept | /rftools/wifi/krackattacks-scripts/ | â | â | â | krackattacks_script_soft_install | â |
| BeEF | Browser Exploitation Framework for phishing | beef | /opt/network/beef/beef | â | â | â | beef_soft_install | â |
| asleap | LEAP/PPTP password cracker | asleap | â | â | â | asleap_soft_install | â |
| roguehostapd | Modified hostapd for advanced attacks | hostapd-mana | â | â | â | roguehostapd_soft_install | â |
| wifiphisher | Automated phishing attack framework | wifiphisher | â | â | â | wifiphisher_soft_install | â |
| hostapd-mana | Evil twin AP with credential harvesting | hostapd-mana | â | â | â | hostapdmana_soft_install | â |
| dragonslayer | WPA3 dragonfly vulnerability testing | /rftools/wifi/wpa3/dragonslayer/ | â | â | â | wpa3_dragonslayer_soft_install | â |
| dragonforce | WPA3 downgrade and DoS attacks | /rftools/wifi/wpa3/dragonforce/ | â | â | â | wpa3_dragonforce_soft_install | â |
| dragondrain-and-time | WPA3 resource exhaustion attacks | /rftools/wifi/wpa3/dragondrain-and-time/ | â | â | â | wpa3_dragondrain_and_time_soft_install | â |
| wacker | WPA3 SAE timing attacks | /rftools/wifi/wpa3/wacker/ | â | â | â | wpa3_wacker_soft_install | â |
| Pyrit | GPU-accelerated WPA/WPA2 cracker | pyrit | â | â | â | Pyrit_soft_install | â (commented out - Python3 issues) |
| mdk3 | Wireless denial-of-service testing | mdk3 | â | â | â | mdk3_soft_install | â (install manually) |
| wifipumpkin3 | Rogue AP framework | wifipumpkin3 | â | â | â | wifipumpkin3_soft_install | â (install manually) |
| fernwifi-cracker | GUI-based WiFi security testing | Fern-Wifi-Cracker | â | â | â | fernwificracker_soft_install | â (install manually) |
Required Capability:
Wi-Fi tools require the NET_ADMIN capability to manipulate wireless interfaces. Always include this capability when running the container:
rfswift run -i wifi -n wifi_tools -a NET_ADMINIf you see errors about insufficient permissions when using Wi-Fi tools, this capability is likely missing.
WPA3 Attack Tools: RF Swift includes a complete suite of WPA3 vulnerability testing tools:
- dragonslayer - Dragonfly handshake vulnerabilities
- dragonforce - Downgrade and DoS attacks
- dragondrain-and-time - Resource exhaustion
- wacker - SAE timing attacks
All WPA3 tools are located in /rftools/wifi/wpa3/
Telecommunications
The telecommunications images are divided into several categories based on mobile network generations:
Telecom Utilities
Foundation tools for cellular network analysis:
| Tool(s) | Description | Available commands | amd64 | aarch64 | riscv64 | Installation function | Installed by default |
|---|---|---|---|---|---|---|---|
| pycrate | Python library for mobile network protocols (2G/3G/4G/5G) | Python pycrate module | â | â | â | pycrate_soft_install | â |
| CryptoMobile | Mobile network cryptographic functions (Milenage TUAK Kasumi) | Python CryptoMobile module | â | â | â | cryptomobile_soft_install | â |
| PySIM | SIM card management and programming | pySim-shell.py | pySim-read.py | pySim-prog.py | â | â | â | pysim_soft_install | â |
| pySCTP | Python bindings for SCTP protocol | Python pysctp module | â | â | â | pysctp_soft_install | â |
| sysmo-usim-tool | SIM card programming for Sysmocom cards | sysmo-usim-tool | â | â | â | sysmoUSIM_soft_install | â |
| SCAT | Signaling collection and analysis toolkit | scat | signalcat | â | â | â | SCAT_soft_install | â |
| SigPloit | Signaling exploitation framework | sigploit | â | â | â | SigPloit_soft_install | â |
| PyHSS | Python Home Subscriber Server | pyhss | â | â | â | pyhss_soft_install | â |
| Bromelia | Python Diameter protocol stack | Python bromelia module | â | â | â | bromelia_soft_install | â |
| jSS7 | Java SS7 protocol stack | jSS7 tools | â | â | â | jss7_soft_install | â |
| Py5sig | 5G NAS security tool | py5sig | â | â | â | py5sig_soft_install | â (install manually) |
| Modmobmap | Mobile network mapping tool | modmobmap | â | â | â | Modmobmap_soft_install | â (install manually) |
Python Libraries:
- pycrate: Complete Python cellular protocol stack
- CryptoMobile: Mobile network cryptography (Milenage, TUAK, Kasumi, etc.)
- pysctp: Python SCTP bindings for signaling protocols
- bromelia: Diameter protocol stack for LTE/5G core
2G/3G Analysis Tools
Tools for GSM, UMTS, and related technologies:
| Tool(s) | Description | Available commands | amd64 | aarch64 | riscv64 | Installation function | Installed by default |
|---|---|---|---|---|---|---|---|
| YateBTS | Complete 2G/GSM base station with Yate softswitch | yate | yatebts | mbts | â | â | â | yatebts_blade2_soft_install | â |
| OpenBTS | Open source GSM base station | OpenBTS | transceiver | â | â | â | openbts_uhd_soft_install | â |
| OpenBTS UMTS | Open source 3G UMTS base station | OpenBTS-UMTS | â | â | â | openbts_umts_soft_install | â |
| OsmoCom BTS Suite | Complete 2G network infrastructure suite | osmo-bts | osmo-bsc | osmo-msc | osmo-hlr | osmo-mgw | osmo-sgsn | osmo-ggsn | â | â | â | osmobts_suite_soft_install | â |
Architecture Limitations:
- YateBTS: Requires Qt5 dependencies, may have limited multi-arch support
- OpenBTS/OpenBTS-UMTS: x86_64 only due to build dependencies
- OsmoCom suite: Builds on all architectures but requires significant system resources
Tool Locations:
/telecom/2G/- 2G base stations and tools/telecom/3G/- 3G/UMTS tools/telecom/SIM/- SIM card programming tools- Configuration files in
/root/config/osmobts/
4G/5G Analysis Tools
Tools for LTE and 5G-NSA:
| Tool(s) | Description | Available commands | amd64 | aarch64 | riscv64 | Installation function | Installed by default |
|---|---|---|---|---|---|---|---|
| srsRAN 4G | Complete LTE stack (eNB EPC UE) | srsenb | srsepc | srsue | â | â | â | srsran4G_5GNSA_soft_install | â |
| Open5GS | Open source 5G Core and EPC | open5gs-amfd | open5gs-smfd | open5gs-upfd | open5gs-mmed | open5gs-sgwud | open5gs-hssd | open5gs-pcrfd | â | â | â | Open5GS_soft_install | â |
| Open5GS Web UI | Subscriber management web interface | Node.js web UI on port 3000 | â | â | â | Open5GS_soft_install | â |
srsRAN 4G: Complete LTE stack including:
- srsENB: LTE eNodeB (base station)
- srsEPC: Evolved Packet Core
- srsUE: UE simulator
5G Analysis Tools
Tools for 5G standalone (SA) and core networks:
| Tool(s) | Description | Available commands | amd64 | aarch64 | riscv64 | Installation function | Installed by default |
|---|---|---|---|---|---|---|---|
| srsRAN Project | 5G SA gNB implementation | gnb | â | â | â | srsran5GSA_soft_install | â |
| srsRAN Project (bladeRF) | 5G SA gNB with bladeRF support | gnb | â | â | â | srsran5GSA_bladerf_soft_install | â (alternative) |
| Open5GS | Open source 5G Core network | open5gs-amfd | open5gs-smfd | open5gs-upfd | open5gs-ausfd | open5gs-udmd | open5gs-pcfd | open5gs-nrfd | open5gs-scpd | open5gs-bsfd | open5gs-udrd | â | â | â | Open5GS_soft_install | â |
| Open5GS (nohttp2) | Open5GS without HTTP/2 support | Same as Open5GS | â | â | â | Open5GS_nohttp2_soft_install | â (alternative) |
| Open5GS (0caps) | Open5GS with null cipher support | Same as Open5GS | â | â | â | Open5GS_0caps_soft_install | â (alternative) |
| Open5GS Web UI | Subscriber management web interface | Node.js web UI on port 3000 | â | â | â | Open5GS_soft_install | â |
| UERANSIM | 5G UE and RAN simulator | nr-ue | nr-gnb | nr-cli | nr-binder | â | â | â | UERANSIM_soft_install | â |
| UERANSIM (null cipher) | UERANSIM with null cipher support | Same as UERANSIM | â | â | â | UERANSIM_nullciph_soft_install | â (alternative) |
| 5Greplay | 5G traffic replay and testing | 5greplay | â | â | â | 5greplay_soft_install | â |
MongoDB Requirement: Open5GS requires MongoDB for subscriber database. The container includes:
- MongoDB 6.0 from official repository
- Web UI for subscriber management (Node.js based)
- Database directory at
/data/db/
To start all Open5GS components: Open5Gs_deployall
Automotive Security
The automotive image contains tools for vehicle network analysis and communication:
| Tool(s) | Description | Available commands | amd64 | aarch64 | riscv64 | Installation function | Installed by default |
|---|---|---|---|---|---|---|---|
| can-utils | Linux SocketCAN userspace utilities | candump | cansend | canplayer | cangen | cansniffer | cansequence | â | â | â | canutils_soft_install | â |
| CANtact | CANtact hardware support utilities | cantact | â | â | â | cantact_soft_install | â |
| Caring Caribou | CAN bus security and penetration testing | caringcaribou | â | â | â | caringcaribou_soft_install | â |
| SavvyCAN | Cross-platform CAN bus reverse engineering | SavvyCAN | â | â | â | savvycan_soft_install | â |
| Gallia | Extendable automotive penetration testing framework | gallia | â | â | â | gallia_soft_install | â |
| V2GInjector | Vehicle-to-Grid (V2G) protocol testing | v2ginjector | â | â | â | v2ginjector_soft_install | â |
Tool Locations:
/automotive/- Main automotive tools directory- CAN/LIN/FlexRay tools
- Vehicle protocol analyzers
Hardware Reverse Engineering
The reversing image provides tools for firmware analysis and hardware reverse engineering:
| Tool(s) | Description | Available commands | amd64 | aarch64 | riscv64 | Installation function | Installed by default |
|---|---|---|---|---|---|---|---|
| Kaitai Struct | Declarative binary format parser | kaitai-struct-compiler | ksc | â | â | â | kataistruct_soft_install | â |
| Unicorn Engine | Lightweight multi-architecture CPU emulator | Python unicorn module | â | â | â | unicorn_soft_install | â |
| Keystone Engine | Lightweight multi-architecture assembler | Python keystone module | â | â | â | keystone_soft_install | â |
| Radare2 | Reverse engineering framework | r2 | rabin2 | radare2 | rafind2 | ragg2 | rahash2 | rarun2 | rasm2 | rax2 | â | â | â | radare2_soft_install | â |
| Ghidra | NSA reverse engineering suite | ghidra | ghidraRun | â | â | â | ghidra_soft_install | â |
| Sasquatch | Modified unsquashfs for non-standard SquashFS images | sasquatch | â | â | â | sasquatch_soft_install | â |
| Unblob | Accurate recursive extraction of firmware | unblob | â | â | â | unblob_soft_install | â |
| Binwalk | Firmware analysis and extraction | binwalk | â | â | â | binwalk_soft_install | â |
| Binwalk v3 | Rust-based binwalk rewrite | binwalk | â | â | â | binwalkv3_soft_install | â |
| QNX6 Extractor | QNX6 filesystem extractor | qnx6extractor | â | â | â | qnx6extractor_soft_install | â |
| LLVM | Compiler infrastructure for static analysis | clang | clang++ | llvm-* | opt | â | â | â | LLVM_install | â |
| AFL | American Fuzzy Lop fuzzer | afl-fuzz | afl-gcc | afl-g++ | afl-clang | afl-clang++ | â | â | â | AFL_install | â |
| Honggfuzz | Security-oriented fuzzer | honggfuzz | â | â | â | honggfuzz_install | â |
| Semgrep | Static analysis for finding bugs | semgrep | â | â | â | semgrep_install | â |
| Cppcheck | Static analysis for C/C++ code | cppcheck | â | â | â | cppcheck_install | â |
| Clang Static Analyzer | C/C++/Objective-C static analyzer | scan-build | scan-view | â | â | â | clang_static_analyzer_install | â |
| Joern | Code analysis platform for C/C++ | joern | joern-parse | joern-export | joern-flow | joern-lookup | â | â | â | joernsast_install | â |
| AppleDB Rust | Apple device database in Rust | appledb | â | â | â | appledb_rs_soft_install | â (commented out) |
| Cutter | Qt-based reverse engineering platform | cutter | â | â | â | cutter_soft_install | â |
| ImHex | Hex editor for reverse engineers | imhex | â | â | â | imhex_soft_install | â |
| Qiling | Advanced binary emulation framework | Python qiling module | â | â | â | qiling_soft_install | â (debconf issues) |
| EMBA | Embedded firmware analyzer | emba | â | â | â | emba_soft_install | â (takes long time) |
| Bytecaster | Bytecode analyzer | bytecaster | â | â | â | bytecaster_soft_install | â (install manually) |
Architecture-Specific Tools:
- Ghidra: Java-based, works on all architectures
- Radare2/Cutter: x86_64 only due to Qt dependencies
- Unicorn/Keystone: x86_64 only (ARM64 builds broken)
- Binwalk v3: Requires Rust 1.82+, uses cargo for installation
Tool Locations:
/reverse/- Reverse engineering tools and projects- Ghidra at
/reverse/ghidra_X.X.X_PUBLIC/ - ImHex: x86_64 uses .deb, ARM64 uses AppImage extraction
Network Analysis
The network image contains general network analysis and security tools:
| Tool(s) | Description | Available commands | amd64 | aarch64 | riscv64 | Installation function | Installed by default |
|---|---|---|---|---|---|---|---|
| Burp Suite Community | Web application security testing | burpsuite | â | â | â | burpsuite_community_install | â |
| Nmap | Network discovery and security auditing | nmap | ncat | nping | ndiff | â | â | â | nmap_soft_install | â |
| Wireshark | Network protocol analyzer | wireshark | â | â | â | wireshark_soft_install | â |
| Metasploit | Penetration testing framework | msfconsole | msfvenom | msfdb | msfrpc | msfd | â | â | â | metasploit_soft_install | â |
| Tshark | Command-line network protocol analyzer | tshark | â | â | â | tshark_soft_install | â |
| Impacket | Python classes for network protocols | psexec.py | smbexec.py | wmiexec.py | secretsdump.py | GetNPUsers.py | â | â | â | impacket_soft_install | â |
| AutoRecon | Network reconnaissance automation | autorecon | â | â | â | autorecon_soft_install | â |
| Responder | LLMNR NBT-NS and MDNS poisoner | responder | Responder.py | â | â | â | responder_soft_install | â |
| TruffleHog | Find secrets in git repositories | trufflehog | â | â | â | trufflehog_script_install | â |
| hping3 | Network tool for crafting packets | hping3 | â | â | â | hping3_soft_install | â |
| arping | ARP-level ping utility | arping | â | â | â | arping_soft_install | â |
| NetExec | Network protocol exploitation (formerly CrackMapExec) | nxc | netexec | â | â | â | netexec_soft_install | â |
| SubEnum | Subdomain enumeration tool | subenum | â | â | â | subenum_soft_install | â |
| WebCopilot | Web application reconnaissance automation | webcopilot | â | â | â | webcopilot_soft_install | â |
| gowitness | Web screenshot and recon tool | gowitness | â | â | â | gowitnes_soft_install | â |
| SIPVicious | VoIP security testing suite | sipvicious | svmap | svwar | svcrack | svreport | svcrash | â | â | â | sipvicious_soft_install | â |
| Voipire | VoIP attack toolkit | voipire | â | â | â | voipire_soft_install | â |
| SIPpts | VoIP penetration testing suite | sippts | â | â | â | sippts_soft_install | â |
| MBTget | Modbus security assessment tool | mbtget | â | â | â | mbtget_soft_install | â |
| Kismet | Wireless network detector and IDS | kismet | kismet_server | kismet_client | â | â | â | kismet_soft_install | â |
| Bettercap | Swiss Army knife for network attacks | bettercap | â | â | â | bettercap_soft_install | â |
| Hashcat | Advanced password recovery | hashcat | â | â | â | hashcat_soft_install | â |
| John the Ripper | Password cracker | john | unshadow | unique | â | â | â | john_soft_install | â |
| Caido | Modern web security proxy | caido | â | â | â | caido_soft_install | â |
| DonPAPI | Dump DPAPI secrets remotely | donpapi | â | â | â | donpapi_soft_install | â (install manually) |
| BeEF | Browser Exploitation Framework | beef | â | â | â | beef_soft_install | â (install manually) |
Major Frameworks:
- Metasploit: Full penetration testing framework (x86_64/aarch64)
- NetExec: Network protocol exploitation
- Kismet: Wireless/Bluetooth packet capture and analysis
- Caido: Modern web security testing platform
- Burp Suite Community: Multi-architecture support (JAR fallback for non-x86_64)
Hardware Security
The hardware image focuses on general hardware security testing and analysis:
| Tool(s) | Description | Available commands | amd64 | aarch64 | riscv64 | Installation function | Installed by default |
|---|---|---|---|---|---|---|---|
| AVRDUDE | AVR microcontroller programmer | avrdude | â | â | â | avrdude_install | â |
| DSView | Logic analyzer software for DSLogic | DSView | â | â | â | dsview_install | â |
| PulseView | Sigrok logic analyzer frontend | pulseview | â | â | â | pulseview_install | â |
| Arduino IDE | Integrated development environment for Arduino | arduino | arduino-cli | â | â | â | arduino_ide_install | â |
| Logic 2 (Saleae) | Logic analyzer software for Saleae devices | logic2 | Logic | â | â | â | logic2_saleae_install | â |
| Flashrom | Flash chip programmer | flashrom | â | â | â | flashrom_install | â |
| dsl2sigrok | Convert DSLogic VCD to Sigrok format | dsl2sigrok | â | â | â | dsl2sigrok_install | â |
| SeerGDB | Lightweight GUI frontend to GDB | seergdb | â | â | â | seergdb_install | â |
| OpenOCD | On-Chip Debugger for embedded devices | openocd | â | â | â | openocd_install | â |
| dfu-util | Device Firmware Upgrade utilities | dfu-util | dfu-prefix | dfu-suffix | â | â | â | dfu_util_install | â |
| openFPGALoader | Universal FPGA programming utility | openFPGALoader | â | â | â | openFPGALoader_install | â |
| MTKClient | MediaTek bootloader client | mtkclient | mtk | â | â | â | mtkclient_install | â |
| esptool | ESP8266/ESP32 ROM bootloader utility | esptool.py | espefuse.py | espsecure.py | â | â | â | esptool_install | â |
| ngscopeclient | Next-generation oscilloscope software | ngscopeclient | â | â | â | ngscopeclient_install | â |
| GPU Drivers - NVIDIA | NVIDIA GPU compute drivers | nvidia-smi | nvidia-settings | â | â | â | install_GPU_nvidia | â |
| GPU Drivers - Intel | Intel GPU compute drivers | intel-gpu-tools | â | â | â | install_GPU_Intel | â |
| GPU Drivers - Radeon (up to 5000) | AMD Radeon GPU drivers for older cards | rocm-smi | â | â | â | install_GPU_Radeon_until5000 | â |
| GPU Drivers - Radeon (latest) | AMD Radeon GPU drivers for latest cards | rocm-smi | â | â | â | install_GPU_latest_Radeon | â |
| HydraNFC Trace Plugin | Sigrok plugin for HydraNFC traces | Sigrok HydraNFC decoder | â | â | â | hydranfc_trace_plugin_install | â |
Logic Analyzer Software:
- Logic 2 (Saleae): x86_64 only, uses
--no-sandboxflag automatically - PulseView/Sigrok: Built from source with ARM64 libsigrokdecode patch
- DSView: Built from source for DSLogic devices
Tool Locations:
/hardware/- Logic analyzers, programmers, and debugging tools- Arduino IDE wrapper at
/usr/sbin/arduino - OpenOCD with extensive debug probe support
Tool Usage Tips
Tool Directory Organization
RF Swift organizes tools in specialized directories for easier discovery:
/rftools/- Radio frequency analysis tools/rftools/sdr/- SDR software and utilities/rftools/bluetooth/- Bluetooth tools and firmwares/rftools/wifi/- WiFi security tools/rftools/rfid/- RFID readers and utilities/rftools/calibration/- VNA and calibration tools/rftools/analysers/- Spectrum analyzer software/rftools/generators/- Signal generator software
/hardware/- Hardware security and testing tools/automotive/- Vehicle communication and analysis tools/reverse/- Reverse engineering and firmware analysis tools/telecom/- Telecommunications tools/telecom/2G/- GSM/2G base stations/telecom/3G/- UMTS/3G tools/telecom/4G/- LTE/4G tools/telecom/5G/- 5G SA/NSA tools/telecom/SIM/- SIM card tools
/security/- Security testing tools (Caido, etc.)/opt/network/- Network security tools/opt/crack/- Password cracking tools/sast/- Static analysis security testing
These directories complement the standard system paths (/usr/bin, /usr/local/bin) and contain specialized tools, scripts, and resources.
Finding Available Tools
To discover which tools are available in your current container:
# List all executable commands in standard paths
find /usr/bin /usr/local/bin -type f -executable | sort
# List RF tools in the dedicated directory
ls -la /rftools
# List tools in other specialized directories
ls -la /hardware
ls -la /automotive
ls -la /reverse
ls -la /telecom
# Search for a specific tool across all locations
find /usr/bin /usr/local/bin /rftools /hardware /automotive /reverse /telecom -name "*sdr*" -type f -executableManual Tool Installation
Some tools are not installed by default but can be added after container creation. To install these tools:
rfswift install -c container_name -i <installation_function_name>Common manually-installed tools:
kismet_soft_install- Kismet wireless snifferbettercap_soft_install- Network attack frameworkmdk3_soft_install- WiFi DoS testingwifipumpkin3_soft_install- Rogue AP frameworkinstall_soapy_modules- Additional SoapySDR device supportpocketvna_sa_device- PocketVNA software (x86_64 only)
Tool Documentation
Most tools include built-in help available through the -h or --help flags:
tool_name --helpFor more detailed documentation, many tools include man pages:
man tool_nameCreating Tool Aliases
For frequently used tools with complex options, consider creating aliases in your container:
echo 'alias rtlpower-optimized="rtl_power -f 88M:108M:25k -g 50 -i 10 -e 1h power.csv"' >> ~/.zshrc
source ~/.zshrcArchitecture-Specific Notes
x86_64 / AMD64
- Broadest tool support
- All GPU-accelerated tools available
- SignalHound and specialized SA software supported
ARM64 / aarch64
- Most tools fully supported
- Some GUI applications require AppImage extraction
- Limited SA software support (no SignalHound Spike/VSG60)
- Python tools may need building from source
RISC-V64
- Growing support, most core SDR tools work
- Some tools installed from source due to package availability
- Limited pre-built binary support
- Python packages may require longer build times
Next Steps
Continue to the Configurations page to learn how to customize your RF Swift environment: