Documentation
📖 Guide
Included Tools

Included Tools

RF Swift Tool Collection

RF Swift provides a comprehensive suite of specialized tools for radio frequency and hardware security work. This page catalogs the tools available in each pre-built image.

📈
RF Swift is in active development. The tool collection is regularly expanded and optimized for all supported architectures.

Installation Status Key:

  • ✅ Installed by default - Tool is included when you build/pull the image
  • ❌ Install manually - Tool function exists but must be run manually after container creation
  • ❓ Limited support - Tool may have architecture-specific issues

Image Hierarchy

Each RF Swift image builds upon a foundation of tools, with specialized images adding domain-specific capabilities. Understanding this hierarchy helps you choose the most appropriate image for your needs:

  graph TD;
    A[corebuild]-->B[sdrsa_devices];
    A-->C[rfid];
    A-->D[automotive];
    A-->E[reversing];
    A-->F[sdrsa_devices_antsdr];
    A-->G[sdrsa_devices_rtlsdrv4];
    B[sdrsa_devices]-->I[sdr_light];
    B[sdrsa_devices]-->J[bluetooth];
    B[sdrsa_devices]-->K[telecom_utils];
    B[sdrsa_devices]-->L[hardware];
    B[sdrsa_devices]-->H[network];
    B[sdrsa_devices]-->DT[deeptempest];
    A-->OS[osint];
    A-->AN[android];
    H[network]-->AD[ad];
    H[network]-->WB[wifi_basic];
    WB-->WF[wifi_full];
    I[sdr_light]-->M[wifi];
    I[sdr_light]-->G4[sdr_gnuradio4];
    I[sdr_light]-->N[sdr_full];
    I[sdr_light]-->I2[sdr_light_intelgpu];
    I[sdr_light]-->I3[sdr_light_nvidiagpu];
    I2[sdr_light_intelgpu]-->N2[sdr_full_intelgpu];
    I3[sdr_light_nvidiagpu]-->N3[sdr_full_nvidiagpu];
    K[telecom_utils]-->P[telecom_2Gto3G];
    K[telecom_utils]-->Q[telecom_4G_5GNSA];
    K[telecom_utils]-->R[telecom_4Gto5G];
    Q[telecom_4G_5GNSA]-->R2[telecom_5G_train];
    K[telecom_utils]-->S[telecom_5G];
    K[telecom_utils]-->T[telecom_5G_bladerf];

Tool Categories

Core SDR Devices Support

The sdrsa_devices image serves as the foundation for many RF Swift images, providing essential drivers and utilities for software-defined radio hardware.

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
UHD tools and libs USRP Hardware Driver - Universal driver for Ettus Research USRP devices uhd_adc_self_cal | uhd_fft | uhd_rx_cfile | uhd_cal_rx_iq_balance | uhd_find_devices | uhd_rx_nogui | uhd_cal_tx_dc_offset | uhd_image_loader | uhd_siggen | uhd_cal_tx_iq_balance | uhd_images_downloader | uhd_siggen_gui | uhd_config_info | uhd_modes.py | uhd_usrp_probe ✅ ✅ ✅ uhd_devices_install ✅
RTL-SDR tools and libs RTL-SDR driver and tools for RTL2832U-based DVB-T receivers rtl_biast | rtl_fm | rtl_sdr | rtl_test | rtl_adsb | rtl_eeprom | rtl_power | rtl_tcp ✅ ✅ ✅ rtlsdr_devices_install ✅
RTL-SDR v4 tools Enhanced RTL-SDR Blog v4 driver with improved performance rtl_biast | rtl_fm | rtl_sdr | rtl_test | rtl_adsb | rtl_eeprom | rtl_power | rtl_tcp ✅ ✅ ✅ rtlsdrv4_devices_install ❌ (optional alternative)
libiio and libad9361 Industrial I/O and AD9361 library for PlutoSDR and similar devices iio_adi_xflow_check | iio_attr | iio_genxml | iio_info | iio_readdev | iio_reg | iio_stresstest | iio_writedev ✅ ✅ ✅ ad_devices_install ✅
Nuand bladeRF tools bladeRF SDR tools and libraries built from source bladeRF-cli | bladeRF-fsk ✅ ✅ ✅ nuand_devices_fromsource_install ✅
HackRF tools and lib HackRF One SDR platform tools and libraries hackrf_clock | hackrf_debug | hackrf_operacake | hackrf_sweep | hackrf_cpldjtag | hackrf_info | hackrf_spiflash | hackrf_transfer ✅ ✅ ✅ hackrf_devices_install ✅
Airspy tools and lib Airspy R2/Mini and HF+ SDR receivers airspy_gpio | airspy_rx | airspyhf_info | airspy_gpiodir | airspy_si5351c | airspyhf_lib_version | airspy_info | airspy_spiflash | airspyhf_rx | airspy_lib_version | airspyhf_calibrate | airspy_r820t | airspyhf_gpio ✅ ✅ ✅ airspy_devices_install ✅
LimeSDR tools and lib LimeSDR and LimeSDR Mini SDR platform LimeQuickTest | LimeSuiteGUI | LimeUtil ✅ ✅ ✅ limesdr_devices_install ✅
Funcube tools and lib Funcube Dongle and Dongle Pro SDR receivers qthid-fcd-controller ✅ ✅ ✅ funcube_devices_install ✅
XTRX tools and lib XTRX mini-PCIe SDR platform xtrx_fft ✅ ✅ ✅ xtrx_devices_install ✅
OsmoFL2K tools and lib FL2000-based VGA adapter as SDR transmitter fl2k_file | fl2k_tcp | fl2k_fm | fl2k_test ✅ ✅ ✅ osmofl2k_devices_install ✅
SignalHound Spike Spectrum analyzer software for SignalHound BB and SM series Spike ✅ ❌ ❌ signalhound_spike_sa_device ✅
SignalHound VSG60 Signal generator software for VSG60 vector signal generator vsg60 ✅ ❌ ❌ signalhound_vsg60_sa_device ✅
Harogic Devices SAStudio4 spectrum analyzer software for Harogic HTRA devices sastudio ✅ ✅ ❌ harogic_sa_device ✅
RFNM RFNM SDR platform library and drivers librfnm ✅ ✅ ✅ rfnm_devices_install ✅
LibreSDR B2x0 Open-source FPGA images for USRP B2x0 series libresdr_swapfpga ✅ ✅ ✅ libresdr_b2x0_devices_install ✅
pocketVNA Vector Network Analyzer software for pocketVNA device pocketVNA ✅ ❌ ❌ pocketvna_sa_device ❌ (install manually)
LiteX M2SDR LiteX-based M2SDR platform with SoapySDR drivers SoapySDR drivers ✅ ✅ ✅ litexm2sdr_devices_install ✅
HydraSDR/RFOne tools HydraSDR RFOne SDR platform tools and libraries hydrasdr_gpio | hydrasdr_calibrate | hydrasdr_gpiodir | hydrasdr_lib_version | hydrasdr_reset | hydrasdr_set_rf_port | hydrasdr_spiflash | hydrasdr_info | hydrasdr_r82x | hydrasdr_rx | hydrasdr_si5351c ✅ ✅ ✅ hydrasdr_rfone_install ✅
kalibrate-hydrasdr GSM frequency calibration tool for HydraSDR kal ✅ ✅ ✅ kalibrate_hydrasdr_device ✅
USDR Library waveLab USDR software-defined radio library libusdr ✅ ✅ ✅ usdr_lib_install ✅
ANTSDR UHD MicroPhase ANTSDR variant of UHD for ANTSDR devices Same as UHD tools ✅ ✅ ✅ antsdr_uhd_devices_install ❌ (optional alternative to UHD)
SoapySDR modules Additional SoapySDR device modules (osmosdr rtlsdr bladerf hackrf uhd mirisdr rfspace) Various SoapySDR modules ✅ ✅ ✅ install_soapy_modules ✅
SoapyPlutoSDR SoapySDR module for PlutoSDR devices SoapySDR PlutoSDR support ✅ ✅ ✅ install_soapyPlutoSDR_modules ✅

Device-Specific Notes:

  • UHD vs ANTSDR: Choose either standard UHD or ANTSDR variant during build (mutually exclusive)
  • RTL-SDR versions: Standard rtl-sdr or rtlsdrv4 blog version (mutually exclusive)
  • Manual installation tools: SoapySDR modules, SoapyPlutoSDR, and pocketVNA require manual installation after container creation

Common Device Troubleshooting

RTL-SDR Kernel Module Conflicts

If your RTL-SDR device is unavailable when using tools like nfc-spy, the DVB-T kernel module may have claimed it. Blacklist the module with:

echo "blacklist dvb_usb_rtl28xxu" | sudo tee /etc/modprobe.d/blacklist-dvb_usb_rtl28xxu.conf

You’ll need to restart your host system after adding this blacklist entry.

PlutoSDR Connection Issues

If the PlutoSDR doesn’t appear with iio_info -s and you see errors like:

with backends: local xml ip usb
Unable to create Local IIO context : No such file or directory (2)
ERROR: Unable to create Avahi DNS-SD client :Daemon not running
Scanning for IIO contexts failed: Text file busy (26)

This can be resolved in two ways:

  1. On Linux hosts: Ensure avahi-daemon is running on your host system
  2. Inside the container: Run the Avahi daemon with: 
    avahi-daemon --no-drop-root --no-rlimits

SDR Light Tools

The sdr_light image includes essential software-defined radio tools for signal capture, analysis, and basic decoding.

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
GNU Radio Open-source SDR toolkit and signal processing framework gnuradio-companion | gnuradio-config-info | gr_modtool | gr_plot_* | grcc ✅ ✅ ✅ gnuradio_soft_install ✅
gr-osmosdr Common source/sink blocks for SDR hardware Part of GNU Radio ✅ ✅ ✅ common_sources_and_sinks ✅
SoapySDR modules Device abstraction layer for SDR hardware SoapySDRUtil | SoapySDRServer ✅ ✅ ✅ install_soapy_modules ✅
SoapyPlutoSDR PlutoSDR support for SoapySDR SoapySDR PlutoSDR module ✅ ✅ ✅ install_soapyPlutoSDR_modules ✅
KC908 Spectrum Analyzer DEEPACE KC908 spectrum analyzer software KC908 ✅ ❌ ❌ kc908_sa_device ✅
SoapyRFNM RFNM device support for SoapySDR SoapySDR RFNM module ✅ ✅ ❌ soapyrfnm_grmod_install ✅
SoapyHydraSDR HydraSDR RFOne support for SoapySDR SoapySDR HydraSDR module ✅ ✅ ✅ hydrasdr_rfone_soapy_install ✅
SoapyHarogic Harogic device support for SoapySDR SoapySDR Harogic module ✅ ✅ ❌ soapyharogic_grmod_install ✅
gr-bladerf bladeRF GNU Radio blocks GNU Radio bladeRF blocks ✅ ✅ ✅ grbladerf_grmod_install ✅
gr-signal-hound Signal Hound device GNU Radio support GNU Radio Signal Hound blocks ✅ ✅ ❌ grsignalhound_Receiver_grmod_install ✅
gr-htra Harogic HTRA GNU Radio blocks GNU Radio HTRA blocks ✅ ❌ ❌ grhtra_grmod_install ✅
GQRX Software-defined radio receiver powered by GNU Radio gqrx ✅ ✅ ✅ gqrx_soft_install ✅
multimon-ng Digital decoder for multiple radio transmission modes multimon-ng ✅ ✅ ✅ multimon_ng_soft_install ✅
Universal Radio Hacker (URH) Wireless protocol investigation and reverse engineering urh ✅ ✅ ✅ urh_soft_install ✅
Inspectrum Offline radio signal analyzer inspectrum ✅ ✅ ✅ inspectrum_soft_install ✅
rtl_433 Generic data receiver for ISM band devices rtl_433 ✅ ✅ ✅ rtl_433_soft_install ✅
retrogram-rtlsdr Retro text-mode spectrogram for rtl-sdr retrogram-rtlsdr ✅ ✅ ✅ retrogram_soapysdr_soft_install ✅
LuaRadio Lightweight real-time SDR framework in Lua luaradio ✅ ✅ ✅ luaradio_sdr_soft_install ✅
dump1090 Mode S ADS-B decoder for aircraft tracking dump1090 ✅ ✅ ✅ dump1090_soft_install ✅
readsb Improved Mode S/ADS-B decoder readsb ✅ ✅ ✅ readsb_soft_install ✅
dumpvdl2 VDL Mode 2 decoder for aircraft ACARS dumpvdl2 ✅ ✅ ✅ dumpvdl2_soft_install ✅
dumphfdl HFDL decoder for HF aircraft communications dumphfdl ✅ ✅ ✅ dumphfdl_soft_install ✅
SDR++ Cross-platform SDR software with modern interface sdrpp ✅ ✅ ✅ sdrpp_soft_fromsource_install ✅
SDR++ Extra Modules Additional demodulators and sources for SDR++ SDR++ plugins ✅ ✅ ✅ sdrpp_extramodules_install ✅
Jupyter Notebook Interactive computing environment for SDR experiments jupyter | jupyter-notebook ✅ ✅ ✅ jupyter_soft_install ✅
Leo Bodnar GPSDO v1 Calibration tool for Leo Bodnar GPS reference v1 leobodnar-gpsdo-v1 ✅ ✅ ✅ leobodnarv1_cal_device ✅
Leo Bodnar GPSDO v2 Calibration tool for Leo Bodnar GPS reference v2 leobodnar-gpsdo-v2 ✅ ✅ ✅ leobodnarv2_cal_device ✅
KCSDI Calibration utilities for KC series devices kcsdi ✅ ✅ ✅ KCSDI_cal_device ✅
NanoVNASaver VNA software for NanoVNA devices NanoVNASaver ✅ ✅ ✅ NanoVNASaver_cal_device ✅
NanoVNA-QT Qt-based software for NanoVNA nanovna-qt ✅ ✅ ✅ NanoVNA_QT_cal_device ✅
GNSSLogger GNSS logging and calibration tool gnsslogger ✅ ✅ ✅ gnsslogger_cal_device ✅
LibreVNA Open-source Vector Network Analyzer software LibreVNA ✅ ✅ ✅ librevna_cal_device_buildx ✅
xnec2c NEC2 antenna modeling software xnec2c ✅ ✅ ✅ xnec2c_cal_device ❌ (broken - fix source)
GNSS-SDR Global Navigation Satellite Systems software receiver gnss-sdr ✅ ✅ ✅ gnss_sdr_soft_install ✅
Artemis SDR-based RF spectrum monitoring artemis ✅ ✅ ✅ artemis_soft_install ✅
GQRX Scanner Frequency scanner plugin for GQRX gqrx-scanner ✅ ✅ ✅ gqrxscanner_sdr_soft_install ✅
Lotus BUDC Tuner Lotus BUDC tuning device support lotus-budc ✅ ✅ ✅ lotus_budc_tune_device ✅
intercept Signal Intelligence Platform /rftools/sdr/intercept ✅ ✅ ✅ intercept_soft_install ❌
gr-hydrasdr GNU Radio OOT source block for HydraSDR (PentHertz fork) GNU Radio hydrasdr source block ✅ ✅ ✅ grhydrasdr_grmod_install ✅
hydrasdr_433 rtl_433-style decoder for HydraSDR receivers hydrasdr_433 ✅ ✅ ✅ hydrasdr433_soft_install ✅
FISSURE RF and reverse-engineering framework (AInfoSec) in an isolated venv reusing the image SDR stack fissure ✅ ✅ ❓ fissure_soft_install ✅

Tool Locations: Most SDR tools are installed in standard system paths (/usr/bin, /usr/local/bin), with specialized tools in:

  • /rftools/sdr/ - SDR-specific applications
  • /rftools/sdr/oot/ - GNU Radio out-of-tree modules
  • /rftools/analysers/ - Spectrum analyzer software
  • /rftools/generators/ - Signal generator software
🆕
New in v3.0.0: FISSURE, the AInfoSec RF framework, is installed in a dedicated virtual environment created with --system-site-packages so it reuses the GNU Radio, SoapySDR and driver stack already present in the image instead of pip-installing its own pinned copies over your system Python. Launch it with fissure. HydraSDR support also lands here, with the gr-hydrasdr GNU Radio source block and the hydrasdr_433 decoder.

SDR Full Environment

The sdr_full image builds on sdr_light to provide a comprehensive SDR development and analysis environment, including GNU Radio and specialized plugins.

GNU Radio Out-Of-Tree Modules

These modules extend GNU Radio’s capabilities for specific protocols and signal types:

Tool(s) Description amd64 aarch64 riscv64 Installation function Installed by default
gr-osmosdr Common source/sink blocks for various SDR hardware ✅ ✅ ✅ common_sources_and_sinks ✅
gr-gsm GSM/GPRS/EDGE baseband processor for GNU Radio ✅ ✅ ✅ grgsm_grmod_install ✅
gr-lora LoRa PHY implementation for GNU Radio ✅ ✅ ✅ grlora_grmod_install ✅
gr-lora_sdr Alternative LoRa SDR implementation with better decoding ✅ ✅ ✅ grlorasdr_grmod_install ✅
gr-iridium Iridium satellite communication decoder ✅ ✅ ✅ griridium_grmod_install ✅
gr-inspector Signal analysis and classification toolkit ✅ ✅ ✅ grinspector_grmod_install ✅
gr-uaslink Unmanned Aerial System datalink decoder ✅ ✅ ✅ gruaslink_grmod_install ✅
gr-X10 X10 home automation protocol decoder ✅ ✅ ✅ grX10_grmod_install ✅
gr-gfdm Generalized Frequency Division Multiplexing implementation ✅ ✅ ✅ grgfdm_grmod_install ✅
gr-aaronia_rtsa Aaronia real-time spectrum analyzer support ✅ ✅ ✅ graaronia_rtsa_grmod_install ✅
gr-ccsds CCSDS (space communications) protocol support ❌ ❌ ❌ grccsds_move_rtsa_grmod_install ❌ (broken - strtod_l issue)
gr-ais Automatic Identification System (AIS) decoder ✅ ✅ ✅ grais_grmod_install ✅
gr-aistx AIS transmitter blocks ✅ ✅ ✅ graistx_grmod_install ✅
gr-air-modes Mode S/ADS-B aircraft transponder decoder ✅ ✅ ✅ grairmodes_grmod_install ✅
gr-dvbs2 DVB-S2 digital video broadcasting decoder ✅ ✅ ✅ grdvbs2_grmod_install ✅
gr-tempest TEMPEST electromagnetic emanations receiver ✅ ✅ ✅ grtempest_grmod_install ✅
deep-tempest Deep learning-based TEMPEST for screen reconstruction ❌ ❌ ❌ deeptempest_grmod_install ❌ (see sdr_deeptemptest_beta image)
gr-dab Digital Audio Broadcasting (DAB/DAB+) decoder ✅ ✅ ✅ grdab_grmod_install ✅
gr-dect2 DECT (cordless phone) protocol decoder ✅ ✅ ✅ grdect2_grmod_install ✅
gr-foo Miscellaneous GNU Radio blocks and utilities ✅ ✅ ✅ grfoo_grmod_install ✅
gr-ieee802-11 WiFi (802.11a/g/p) transceiver implementation ✅ ✅ ✅ grieee802-11_grmod_install ✅
gr-ieee802-11ah WiFi HaLow (802.11ah) sub-1GHz implementation ✅ ✅ ✅ grieee802-11ah_grmod_install ✅
gr-ieee80211 (gr-wifi) Alternative WiFi implementation ✅ ✅ ✅ grieee80211-grwifi_grmod_install ✅
gr-ieee802-15-4 ZigBee and 802.15.4 PHY/MAC implementation ✅ ✅ ✅ grieee802154_grmod_install ✅
gr-rds Radio Data System (RDS) encoder/decoder ✅ ✅ ✅ grrds_grmod_install ✅
gr-droneid DJI DroneID and RemoteID decoder ✅ ✅ ✅ grdroineid_grmod_install ✅
gr-satellites Satellite telemetry decoder (100+ satellites) ✅ ✅ ✅ grsatellites_grmod_install ✅
gr-adsb ADS-B aircraft transponder decoder ✅ ✅ ✅ gradsb_grmod_install ✅
gr-keyfob Car key fob signal analyzer ✅ ✅ ✅ grkeyfob_grmod_install ✅
gr-radar Radar signal processing toolkit ✅ ✅ ✅ grradar_grmod_install ✅
gr-nordic Nordic Semiconductor protocol decoder (nRF24L01+) ✅ ✅ ✅ grnordic_grmod_install ✅
gr-paint Spectrum painting and waterfall annotation ✅ ✅ ✅ grpaint_grmod_install ✅
gr-pdu_utils Protocol Data Unit utilities from Sandia ✅ ✅ ✅ grpdu_utils_grmod_install ✅
gr-sandia_utils Sandia National Labs signal processing blocks ✅ ✅ ✅ grsandia_utils_grmod_install ✅
gr-timing_utils Timing and synchronization utilities from Sandia ✅ ✅ ✅ grtiming_utils_grmod_install ✅
gr-fhss_utils Frequency Hopping Spread Spectrum utilities ✅ ✅ ✅ grfhss_utils_grmod_install ✅
gr-zwave_poore Z-Wave home automation protocol decoder ✅ ✅ ✅ grzwavepoore_grmod_install ✅
gr-mixalot POCSAG pager protocol encoder ✅ ✅ ✅ grmixalot_grmod_install ✅
gr-reveng CRC and checksum reverse engineering ✅ ✅ ✅ grreveng_grmod_install ✅
gr-DCF77_Receiver DCF77 time signal receiver ✅ ✅ ✅ gr_DCF77_Receiver_grmod_install ✅
gr-j2497 MIL-STD-1553 and MIL-STD-1397 decoder ✅ ✅ ✅ grj2497_grmod_install ✅
gr-m17 M17 digital voice protocol implementation ✅ ✅ ✅ grm17_grmod_install ✅
gr-grnet Network socket blocks for GNU Radio ✅ ✅ ❌ grgrnet_grmod_install ✅
gr-aoa Angle of Arrival estimation ✅ ✅ ✅ graoa_grmod_install ✅
gr-correctiq IQ correction algorithms for SDR devices ✅ ✅ ✅ grcorrectiq_grmod_install ✅
gr-dsd Digital Speech Decoder (P25 DMR NXDN) ✅ ✅ ✅ grdsd_grmod_install ✅
gr-nrsc5 HD Radio (NRSC-5) decoder ✅ ✅ ✅ grnrsc5_grmod_install ✅
gr-ntsc-rc NTSC video signal processing ✅ ✅ ✅ grntscrc_grmod_install ✅
gr-nfc NFC (Near Field Communication) PHY ✅ ✅ ✅ grnfc_grmod_install ✅
gr-fosphor GPU-accelerated spectrum analyzer (requires GPU) ✅ ❓ ❓ grfosphor_grmod_install ✅ (GPU images only)
gr-mer Modulation Error Ratio measurement ✅ ✅ ✅ grmer_grmod_install ✅
gr-flarm FLARM aircraft collision avoidance decoder ✅ ✅ ✅ grflarm_grmod_install ✅
gr-guiextra Additional GUI widgets and displays ✅ ✅ ✅ grguiextra_grmod_install ✅
gr-rftap RF tap blocks for protocol analysis ✅ ✅ ✅ grrftap_grmod_install ✅
gr-radio_astro Radio astronomy signal processing ✅ ✅ ✅ grradioastro_grmod_install ✅
gr-cessb Controlled Envelope Single Sideband modulation ✅ ✅ ✅ grcessb_grmod_install

Known Issues:

  • gr-ccsds: Currently broken due to strtod_l dependency issues
  • deep-tempest: Available in separate sdr_deeptempest_beta image due to specific dependencies
  • gr-fosphor: Only included in GPU-enabled builds (requires OpenCL/CUDA)
  • gr-signal-hound: Requires manual installation (architecture-specific)

Additional SDR Software

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
CyberEther Real-time SDR signal analyzer with GPU acceleration cyberether ✅ ✅ ✅ cyberther_soft_install ✅
SigDigger Advanced signal analyzer for reverse engineering SigDigger ✅ ✅ ✅ sigdigger_soft_install ✅
QSSTV Slow-scan television (SSTV) transceiver qsstv ✅ ✅ ✅ qsstv_soft_install ✅
nfc-laboratory NFC protocol analyzer and emulator nfc-laboratory ✅ ✅ ✅ nfclaboratory_soft_install ✅
ice9-bluetooth Bluetooth Classic sniffer ice9-bluetooth ✅ ❌ ❌ ice9_bluetooth_soft_install ✅
Meshtastic SDR Meshtastic mesh network SDR tools meshtastic-sdr ✅ ✅ ✅ meshtastic_sdr_soft_install ✅
GPS-SDR-SIM GPS signal simulator gps-sdr-sim ✅ ✅ ✅ gps_sdr_sim_soft_install ✅
Gpredict Real-time satellite tracking and orbit prediction gpredict ✅ ✅ ✅ gpredict_sdr_soft_install ✅
V2Verifier V2X message verification tool v2verifier ✅ ✅ ✅ v2verifier_sdr_soft_install ✅
wavingZ Z-Wave protocol analyzer wavingz ✅ ✅ ✅ wavingz_sdr_soft_install ✅
PySpecSDR Python spectrum analyzer pyspecsdr ✅ ✅ ✅ pyspecsdr_sdr_soft_install ✅
AIS Catcher Automatic Identification System decoder aiscatcher ✅ ✅ ✅ AIScatcher_soft_install ✅
TetraKit TETRA digital radio toolkit tetrakit ✅ ✅ ✅ tetrakit_soft_install ✅
TetraKit Player TETRA voice player tetrakit-player ✅ ✅ ✅ tetrakitplayer_soft_install ✅
TETRA Suite Complete TETRA decoder (osmo-tetra telive) osmo-tetra | telive ✅ ✅ ✅ tetra_suite_install ✅
OP25 APCO Project 25 decoder op25 ✅ ✅ ✅ op25_soft_install ✅
Trunk Recorder Multi-channel trunked radio recorder trunk-recorder ✅ ✅ ✅ trunkrecorder_soft_install ✅
SatDump Universal satellite data processing software satdump | satdump-ui ✅ ✅ ✅ satdump_sdr_soft_install ✅
SDRangel Multi-platform SDR software with extensive plugins sdrangel ✅ ✅ ✅ sdrangel_soft_fromsource_install ✅
ML and DL Libraries Machine learning libraries for signal processing (numpy pandas scikit-learn tensorflow) Python ML/DL modules ✅ ✅ ✅ ml_and_dl_soft_install ✅
GPU Drivers - NVIDIA NVIDIA GPU compute drivers for acceleration nvidia-smi | nvidia-settings ✅ ✅ ✅ install_GPU_nvidia ✅
GPU Drivers - Intel Intel GPU compute drivers intel-gpu-tools ✅ ✅ ✅ install_GPU_Intel ✅
GPU Drivers - Radeon (up to 5000) AMD Radeon GPU drivers for older cards rocm-smi ✅ ✅ ✅ install_GPU_Radeon_until5000 ✅
GPU Drivers - Radeon (latest) AMD Radeon GPU drivers for latest cards rocm-smi ✅ ✅ ✅ install_GPU_latest_Radeon ✅
gr-fosphor GPU-accelerated FFT and display for GNU Radio GNU Radio fosphor blocks ✅ ❓ ❓ grfosphor_grmod_install ✅
ACARSdec ACARS aircraft communication decoder acarsdec ✅ ✅ ✅ acarsdec_soft_install ❌ (need to fix the install)
QRadioLink VoIP and digital radio over IP qradiolink ✅ ✅ ✅ qradiolink_soft_install ❌ (install manually)
HydraSDR 433 HydraSDR 433MHz ISM band toolkit hydrasdr433 ✅ ✅ ✅ hydrasdr433_soft_install ✅
RFQuack IoT-focused RF analysis framework rfquack ✅ ✅ ✅ rfquak_soft_install ❌ (install manually)

Major Software Suites:

  • SDR++: Modern cross-platform SDR software with plugin support
  • SDRAngel: Advanced SDR software with extensive plugin ecosystem
  • GQRX: Popular SDR receiver powered by GNU Radio
  • SigDigger: Signal analysis and reverse engineering tool
  • URH: Universal Radio Hacker for wireless protocol analysis (with HydraSDR fork enhancements)

GNU Radio 4.0 🆕

The sdr_gnuradio4 image builds GNU Radio 4.0 (RC2) from source alongside the GNU Radio 3.10 already present in sdr_light. GR4 is a separate C++23 codebase with its own headers, namespace and prefix, so nothing about your existing 3.10 flowgraphs changes:

rfswift run -i penthertz/rfswift_resolute:sdr_gnuradio4
Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
GNU Radio 4.0 (RC2) Next-generation GNU Radio runtime (C++23) built from source in /opt/gnuradio4 alongside the apt GNU Radio 3.10 GR4 binaries under /opt/gnuradio4/install/bin and /opt/gnuradio4/build/bin (added to PATH by /etc/profile.d/gnuradio4.sh) ✅ ✅ ❌ (not yet) gnuradio4_soft_install ✅
GNU Radio 4 Python env Dedicated Python 3.12 virtual environment for GR4's embedded PythonBlock interpreter /opt/gnuradio4/venv/bin/python ✅ ✅ ❌ (not yet) gnuradio4_soft_install ✅
GNU Radio 3.10 The stock GNU Radio inherited from sdr_light - untouched by the GR4 build gnuradio-companion | gr_modtool | gnuradio-config-info ✅ ✅ ✅ gnuradio_soft_install ✅

How GR4 is isolated:

  • Built into /opt/gnuradio4, exposed through /etc/profile.d/gnuradio4.sh (which prepends /opt/gnuradio4/install/bin and /opt/gnuradio4/build/bin to PATH)
  • Ships its own Python 3.12 virtual environment at /opt/gnuradio4/venv for the embedded PythonBlock interpreter, so it never touches the system Python (3.14 on Resolute) or GNU Radio 3.10’s bindings
  • The apt GNU Radio 3.10 remains the default gnuradio-companion in the image
GNU Radio 4 is a release candidate. It is experimental, its install tooling is still maturing upstream, and the build is heavy and template-intensive. Expect API churn. This image is for evaluating GR4, not for production flowgraphs. Not yet available on RISC-V64.

RFID Tools

The rfid image focuses on radio-frequency identification analysis and exploitation:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
proxmark3 RRG/Iceman Proxmark3 firmware and client proxmark3 | pm3 ✅ ✅ ✅ proxmark3_soft_install ✅
libnfc Near Field Communication library and tools nfc-list | nfc-scan-device | nfc-poll | nfc-dep-initiator | nfc-dep-target ✅ ✅ ✅ libnfc_soft_install ✅
nfc-tools Utilities for libnfc nfc-barcode | nfc-read-forum-tag3 | nfc-emulate-forum-tag4 | nfc-mfclassic | nfc-relay-picc | nfc-jewel | nfc-mfultralight ✅ ✅ ✅ libnfc_soft_install ✅
mfoc MIFARE Classic Offline Cracker mfoc ✅ ✅ ✅ mfoc_soft_install ✅
mfcuk MIFARE Classic Universal toolKit mfcuk ✅ ✅ ✅ mfcuk_soft_install ✅
mfdread MIFARE dump reader and parser /rftools/rfid/mfdread/mfdread.py ✅ ✅ ✅ mfread_soft_install ✅
RFIDler Open-source RFID emulator and reader /root/thirdparty/RFIDler/ ✅ ❌ ❌ rfidler_soft_install ✅
miLazyCracker Automated MIFARE Classic cracking with DarkSide attack /rftools/rfid/miLazyCracker/ ✅ ✅ ✅ miLazyCracker_soft_install ✅
libfreefare MIFARE tag manipulation library and tools mifare-classic-format | mifare-desfire-info ✅ ✅ ✅ libfreeware_soft_install ✅
nfcpy Python NFC library for contactless communication Python nfcpy module ✅ ✅ ✅ nfcpy_soft_install ✅
ChameleonUltra ChameleonUltra NFC emulator CLI /rftools/nfc/ChameleonUltra/ ✅ ✅ ✅ chameleon_ultra_soft_install ✅

RFID Device Requirements: When using RFID tools, you need to ensure that your RFID reader device (typically appearing as /dev/ttyACM0) is properly bound to the container:

# When creating a new container
rfswift run -i rfid -n rfid_tools -s /dev/ttyACM0:/dev/ttyACM0

# Or with an existing container
rfswift bindings add -c rfid_tools -d -t /dev/ttyACM0 # or without -d if you want to unplug and replug it when container is running

Bluetooth Analysis

The bluetooth image contains specialized tools for Bluetooth protocol analysis and security testing:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
hcitools Bluetooth HCI layer tools for device configuration and management hciattach | hciconfig | hcidump | hcitool ✅ ✅ ✅ blueztools_soft_install ✅
bluez tools BlueZ Bluetooth protocol stack utilities bluetoothctl | bluetoothd | btmon ✅ ✅ ✅ blueztools_soft_install ✅
mirage Modular framework for BLE security auditing with Python 3.10 venv mirage ✅ ✅ ✅ mirage_soft_install ✅
Sniffle TI CC13x2/CC26x2 BLE sniffer with OpenDroneID support /rftools/bluetooth/Sniffle/ ✅ ✅ ✅ sniffle_soft_install ✅
bluing Python-based Bluetooth Low Energy scanner and analyzer /rftools/bluetooth/bluing/bluing/bin/ ✅ ✅ ✅ bluing_soft_install ✅
bdaddr Tool to change Bluetooth device address /rftools/bluetooth/bdaddr/bdaddr ✅ ✅ ✅ bdaddr_soft_install ✅
WHAD Wireless Hacking Devices protocol framework whadup | wplay | wsniff | wfilter | wextract | wdump | wshark | wanalyze | winject | wserver | wble-central | wble-periph | wble-proxy | wble-spawn | wble-connect | wuni-scan | wuni-mouse | wuni-keyboard ✅ ✅ ✅ whad_soft_install ✅
esp32_bluetooth_classic_sniffer ESP32-based Bluetooth Classic sniffer with Python CLI BTSnifferBREDR ✅ ✅ ✅ esp32_bluetooth_classic_sniffer_soft_install ✅
BlueKit Bluetooth security assessment toolkit bluekit ✅ ✅ ✅ bluekit_soft_install ❌ (install manually)
WhisperPair (CVE-2025-36911) Bluetooth pairing exploit PoC /rftools/bluetooth/exploits/CVE-2025-36911-exploit/ ✅ ✅ ✅ CVE_2025_36911_whisperpair_install ✅
RACE Toolkit Bluetooth RACE exploit (CVE-2025-20700/01/02) /rftools/bluetooth/exploits/race-toolkit/ ✅ ✅ ✅ race_toolkit_exploit_install ✅
PyBluez Python Bluetooth library and bindings Python pybluez module ✅ ✅ ✅ pybluez_soft_install ✅
BlueDucky Bluetooth HID emulation and exploitation tool /rftools/bluetooth/exploits/BlueDucky/ ✅ ✅ ✅ blueducky_soft_install ✅
Breaktooth Bluetooth Classic exploitation framework /rftools/bluetooth/exploits/breaktooth-unofficial/ ✅ ✅ ✅ breaktooth_soft_install ✅
BLERP BLE Re-Pairing attacks PoC (NDSS 26') /rftools/bluetooth/exploits/blerp/ ✅ ✅ ✅ blerp_soft_install ✅
Caeruleus Single-binary BLE assessment workflow (scan GATT enumerate read/write/notify fuzz assess) with JSON/JSONL output caeruleus ✅ ✅ ✅ caeruleus_soft_install ✅
BlueSploit Bluetooth exploitation framework bluesploit ✅ ✅ ✅ bluesploit_soft_install ✅

Required Capability: Bluetooth tools require the NET_ADMIN capability to function properly. Always include this capability when running the container:

rfswift run -i bluetooth -n bt_tools -a NET_ADMIN

Without this capability, many Bluetooth tools will fail with permission errors when attempting to configure network interfaces.

Python Virtual Environments: Some Bluetooth tools run in isolated Python environments:

  • Mirage: Uses Python 3.10 venv at /opt/mirage-env/, accessed via wrapper script at /usr/sbin/mirage
  • Bluing: Uses Python 3.10 venv at /rftools/bluetooth/bluing/, run with bluing_run script

New in v3.0.0: Caeruleus, a single Go binary covering the whole BLE assessment workflow on BlueZ (scan, GATT enumeration, read/write/notify, fuzzing and structured assessment with JSON/JSONL output), and BlueSploit, a Bluetooth exploitation framework. Both sit next to the existing WhisperPair exploit for CVE-2025-36911.

Tool Locations:

  • /rftools/bluetooth/ - Main Bluetooth tools directory
  • /rftools/bluetooth/firmwares/ - Firmware for various BLE sniffers (Btlejack, Injectable NRF52840, Sniffle)

Wi-Fi Security

The wifi image provides tools for Wi-Fi network analysis, packet capture, and security assessment:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
iproute2 Modern network configuration utilities ip | ss | bridge | rtmon ✅ ✅ ✅ common_nettools ✅
hostapd IEEE 802.11 AP and authentication server hostapd ✅ ✅ ✅ common_nettools ✅
dnsmasq Lightweight DNS/DHCP server for rogue AP dnsmasq ✅ ✅ ✅ common_nettools ✅
macchanger MAC address spoofing utility macchanger ✅ ✅ ✅ common_nettools ✅
tshark Command-line network protocol analyzer tshark ✅ ✅ ✅ common_nettools ✅
aircrack-ng Complete WiFi security auditing suite airbase-ng | aircrack-ng | airdecap-ng | airdecloak-ng | aireplay-ng | airmon-ng | airodump-ng | airodump-ng-oui-update | airolib-ng | airmon-zc | airtun-ng | besside-ng | easside-ng | tkiptun-ng | wesside-ng ✅ ✅ ✅ aircrack_soft_install ✅
hcxdumptool Modern WiFi capture tool for hashcat hcxdumptool ✅ ✅ ✅ hcxdumptool_soft_install ✅
hcxtools Convert captures to hashcat format hcxpcapngtool | hcxhashtool | hcxpsktool | hcxpmktool ✅ ✅ ✅ hcxtools_soft_install ✅
reaver WPS brute-force attack tool reaver | wash ✅ ✅ ✅ reaver_soft_install ✅
bully Alternative WPS brute-force tool bully ✅ ✅ ✅ bully_soft_install ✅
pixiewps WPS Pixie Dust attack implementation pixiewps ✅ ✅ ✅ pixiewps_soft_install ✅
eaphammer Targeted evil twin and credential harvesting /rftools/wifi/eaphammer/ ✅ ✅ ✅ eaphammer_soft_install ✅
airgeddon Multi-tool WiFi security auditing framework /rftools/wifi/airgeddon/airgeddon.sh ✅ ✅ ✅ airgeddon_soft_install ✅
wifite2 Automated WiFi attack tool wifite ✅ ✅ ✅ wifite2_soft_install ✅
sparrow-wifi WiFi and Bluetooth analyzer with SDR support /rftools/wifi/sparrow-wifi/ ✅ ✅ ✅ sparrowwifi_sdr_soft_install ✅
krackattacks-scripts KRACK attack proof-of-concept /rftools/wifi/krackattacks-scripts/ ✅ ✅ ✅ krackattacks_script_soft_install ✅
BeEF Browser Exploitation Framework for phishing beef | /opt/network/beef/beef ✅ ✅ ✅ beef_soft_install ✅
asleap LEAP/PPTP password cracker asleap ✅ ✅ ✅ asleap_soft_install ✅
roguehostapd Modified hostapd for advanced attacks hostapd-mana ✅ ✅ ✅ roguehostapd_soft_install ✅
wifiphisher Automated phishing attack framework wifiphisher ✅ ✅ ✅ wifiphisher_soft_install ✅
hostapd-mana Evil twin AP with credential harvesting hostapd-mana ✅ ✅ ✅ hostapdmana_soft_install ✅
dragonslayer WPA3 dragonfly vulnerability testing /rftools/wifi/wpa3/dragonslayer/ ✅ ✅ ✅ wpa3_dragonslayer_soft_install ✅
dragonforce WPA3 downgrade and DoS attacks /rftools/wifi/wpa3/dragonforce/ ✅ ✅ ✅ wpa3_dragonforce_soft_install ✅
dragondrain-and-time WPA3 resource exhaustion attacks /rftools/wifi/wpa3/dragondrain-and-time/ ✅ ✅ ✅ wpa3_dragondrain_and_time_soft_install ✅
wacker WPA3 SAE timing attacks /rftools/wifi/wpa3/wacker/ ✅ ✅ ✅ wpa3_wacker_soft_install ✅
Pyrit GPU-accelerated WPA/WPA2 cracker pyrit ✅ ❓ ❓ Pyrit_soft_install ❌ (commented out - Python3 issues)
mdk3 Wireless denial-of-service testing mdk3 ✅ ✅ ✅ mdk3_soft_install ❌ (install manually)
wifipumpkin3 Rogue AP framework wifipumpkin3 ✅ ✅ ✅ wifipumpkin3_soft_install ❌ (install manually)
fernwifi-cracker GUI-based WiFi security testing Fern-Wifi-Cracker ✅ ✅ ✅ fernwificracker_soft_install ❌ (install manually)
Kismet Wireless and Bluetooth packet capture sniffing and IDS kismet | kismet_cap_linux_wifi | kismetdb_dump_devices ✅ ✅ ✅ kismet_soft_install ✅
bettercap Network and wireless attack framework (Wi-Fi BLE and Ethernet) bettercap ✅ ✅ ✅ bettercap_soft_install ✅

Required Capability: Wi-Fi tools require the NET_ADMIN capability to manipulate wireless interfaces. Always include this capability when running the container:

rfswift run -i wifi -n wifi_tools -a NET_ADMIN

If you see errors about insufficient permissions when using Wi-Fi tools, this capability is likely missing.

WPA3 Attack Tools: RF Swift includes a complete suite of WPA3 vulnerability testing tools:

  • dragonslayer - Dragonfly handshake vulnerabilities
  • dragonforce - Downgrade and DoS attacks
  • dragondrain-and-time - Resource exhaustion
  • wacker - SAE timing attacks

All WPA3 tools are located in /rftools/wifi/wpa3/

Telecommunications

The telecommunications images are divided into several categories based on mobile network generations:

Telecom Utilities

Foundation tools for cellular network analysis:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
pycrate Python library for mobile network protocols (2G/3G/4G/5G) Python pycrate module ✅ ✅ ✅ pycrate_soft_install ✅
CryptoMobile Mobile network cryptographic functions (Milenage TUAK Kasumi) Python CryptoMobile module ✅ ✅ ✅ cryptomobile_soft_install ✅
PySIM SIM card management and programming pySim-shell.py | pySim-read.py | pySim-prog.py ✅ ✅ ✅ pysim_soft_install ✅
pySCTP Python bindings for SCTP protocol Python pysctp module ✅ ✅ ✅ pysctp_soft_install ✅
sysmo-usim-tool SIM card programming for Sysmocom cards sysmo-usim-tool ✅ ✅ ✅ sysmoUSIM_soft_install ✅
SCAT Signaling collection and analysis toolkit scat | signalcat ✅ ✅ ✅ SCAT_soft_install ✅
SigPloit Signaling exploitation framework sigploit ✅ ✅ ✅ SigPloit_soft_install ✅
PyHSS Python Home Subscriber Server pyhss ✅ ✅ ✅ pyhss_soft_install ✅
Bromelia Python Diameter protocol stack Python bromelia module ✅ ✅ ✅ bromelia_soft_install ✅
jSS7 Java SS7 protocol stack jSS7 tools ✅ ❌ ❌ jss7_soft_install ✅
Py5sig 5G NAS security tool py5sig ✅ ✅ ✅ py5sig_soft_install ❌ (install manually)
Modmobmap Mobile network mapping tool modmobmap ✅ ✅ ✅ Modmobmap_soft_install ❌ (install manually)

Python Libraries:

  • pycrate: Complete Python cellular protocol stack
  • CryptoMobile: Mobile network cryptography (Milenage, TUAK, Kasumi, etc.)
  • pysctp: Python SCTP bindings for signaling protocols
  • bromelia: Diameter protocol stack for LTE/5G core

2G/3G Analysis Tools

Tools for GSM, UMTS, and related technologies:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
YateBTS Complete 2G/GSM base station with Yate softswitch yate | yatebts | mbts ✅ ✅ ✅ yatebts_blade2_soft_install ✅
OpenBTS Open source GSM base station OpenBTS | transceiver ✅ ❌ ❌ openbts_uhd_soft_install ✅
OpenBTS UMTS Open source 3G UMTS base station OpenBTS-UMTS ✅ ❌ ❌ openbts_umts_soft_install ✅
OsmoCom BTS Suite Complete 2G network infrastructure suite osmo-bts | osmo-bsc | osmo-msc | osmo-hlr | osmo-mgw | osmo-sgsn | osmo-ggsn ✅ ✅ ✅ osmobts_suite_soft_install ✅

Architecture Limitations:

  • YateBTS: Requires Qt5 dependencies, may have limited multi-arch support
  • OpenBTS/OpenBTS-UMTS: x86_64 only due to build dependencies
  • OsmoCom suite: Builds on all architectures but requires significant system resources
🆕

OpenBTS and OpenBTS-UMTS on Resolute. Both are legacy C++ code bases that GCC 15 (the compiler shipping with Ubuntu 26.04) rejects outright. RF Swift installs them from PentHertz forks on dedicated resolute branches, PentHertz/OpenBTS and PentHertz/OpenBTS-UMTS, rather than from the dead upstreams.

Porting is still in progress: some translation units (notably the OpenBTS-UHD Transceiver code, which trips a std::complex ambiguity under GCC 15) may still fail to build. RF Swift records these as build failures instead of aborting the image, so check /var/lib/db/rfswift_build_report.tsv inside a telecom_2Gto3G container to see exactly what landed in your build. YateBTS and the OsmoCom suite are unaffected and remain the recommended 2G/3G path.

Tool Locations:

  • /telecom/2G/ - 2G base stations and tools
  • /telecom/3G/ - 3G/UMTS tools
  • /telecom/SIM/ - SIM card programming tools
  • Configuration files in /root/config/osmobts/

4G/5G Analysis Tools

Tools for LTE and 5G-NSA:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
srsRAN 4G Complete LTE stack (eNB EPC UE) srsenb | srsepc | srsue ✅ ✅ ✅ srsran4G_5GNSA_soft_install ✅
Open5GS Open source 5G Core and EPC open5gs-amfd | open5gs-smfd | open5gs-upfd | open5gs-mmed | open5gs-sgwud | open5gs-hssd | open5gs-pcrfd ✅ ✅ ✅ Open5GS_soft_install ✅
Open5GS Web UI Subscriber management web interface Node.js web UI on port 3000 ✅ ✅ ✅ Open5GS_soft_install ✅

srsRAN 4G: Complete LTE stack including:

  • srsENB: LTE eNodeB (base station)
  • srsEPC: Evolved Packet Core
  • srsUE: UE simulator

5G Analysis Tools

Tools for 5G standalone (SA) and core networks:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
OCUDU 🆕 5G SA CU/DU stack - replaces srsRAN Project as the default gNB in RF Swift v3.0.0 gnb ✅ ✅ ✅ ocudu_soft_install (also aliased as srsran5GSA_soft_install) ✅
srsRAN Project (bladeRF) 5G SA gNB fork with bladeRF support gnb ✅ ✅ ✅ srsran5GSA_bladerf_soft_install ❌ (alternative used by the telecom_5G_bladerf image)
Open5GS Open source 5G Core network open5gs-amfd | open5gs-smfd | open5gs-upfd | open5gs-ausfd | open5gs-udmd | open5gs-pcfd | open5gs-nrfd | open5gs-scpd | open5gs-bsfd | open5gs-udrd ✅ ✅ ✅ Open5GS_soft_install ✅
Open5GS (nohttp2) Open5GS without HTTP/2 support Same as Open5GS ✅ ✅ ✅ Open5GS_nohttp2_soft_install ❌ (alternative)
Open5GS (0caps) Open5GS with null cipher support Same as Open5GS ✅ ✅ ✅ Open5GS_0caps_soft_install ❌ (alternative)
Open5GS Web UI Subscriber management web interface Node.js web UI on port 3000 ✅ ✅ ✅ Open5GS_soft_install ✅
UERANSIM 5G UE and RAN simulator nr-ue | nr-gnb | nr-cli | nr-binder ✅ ✅ ✅ UERANSIM_soft_install ✅
UERANSIM (null cipher) UERANSIM with null cipher support Same as UERANSIM ✅ ✅ ✅ UERANSIM_nullciph_soft_install ❌ (alternative)
5Greplay 5G traffic replay and testing 5greplay ✅ ✅ ✅ 5greplay_soft_install ✅
🆕

5G SA now runs on OCUDU. As of v3.0.0, the CU/DU stack installed in the 5G images is OCUDU instead of srsRAN Project. The srsran5GSA_soft_install function is kept as an alias so existing recipes and scripts keep working, but it now installs OCUDU. It builds into /telecom/5G/ocudu and still provides the gnb binary, so your existing configuration files and workflows carry over.

srsRAN 4G is unaffected and remains the 4G/5G-NSA stack. See the 4G/5G section above.

MongoDB Requirement: Open5GS requires MongoDB for subscriber database. The container includes:

  • MongoDB 6.0 from official repository
  • Web UI for subscriber management (Node.js based)
  • Database directory at /data/db/

To start all Open5GS components: Open5Gs_deployall

Automotive Security

The automotive image contains tools for vehicle network analysis and communication:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
can-utils Linux SocketCAN userspace utilities candump | cansend | canplayer | cangen | cansniffer | cansequence ✅ ✅ ✅ canutils_soft_install ✅
CANtact CANtact hardware support utilities cantact ✅ ✅ ✅ cantact_soft_install ✅
Caring Caribou CAN bus security and penetration testing caringcaribou ✅ ✅ ✅ caringcaribou_soft_install ✅
SavvyCAN Cross-platform CAN bus reverse engineering SavvyCAN ✅ ✅ ✅ savvycan_soft_install ✅
Gallia Extendable automotive penetration testing framework gallia ✅ ✅ ✅ gallia_soft_install ✅
V2GInjector Vehicle-to-Grid (V2G) protocol testing v2ginjector ✅ ✅ ✅ v2ginjector_soft_install ✅

Tool Locations:

  • /automotive/ - Main automotive tools directory
  • CAN/LIN/FlexRay tools
  • Vehicle protocol analyzers

Reverse Engineering & SAST

The reversing image provides tools for firmware analysis, hardware reverse engineering and static application security testing:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
Kaitai Struct Declarative binary format parser kaitai-struct-compiler | ksc ✅ ✅ ✅ kataistruct_soft_install ✅
Unicorn Engine Lightweight multi-architecture CPU emulator Python unicorn module ✅ ❌ ❌ unicorn_soft_install ✅
Keystone Engine Lightweight multi-architecture assembler Python keystone module ✅ ❌ ❌ keystone_soft_install ✅
Radare2 Reverse engineering framework r2 | rabin2 | radare2 | rafind2 | ragg2 | rahash2 | rarun2 | rasm2 | rax2 ✅ ✅ ✅ radare2_soft_install ✅
Ghidra NSA reverse engineering suite ghidra | ghidraRun ✅ ✅ ✅ ghidra_soft_install ✅
Sasquatch Modified unsquashfs for non-standard SquashFS images sasquatch ✅ ✅ ✅ sasquatch_soft_install ✅
Unblob Accurate recursive extraction of firmware unblob ✅ ✅ ✅ unblob_soft_install ✅
Binwalk Firmware analysis and extraction binwalk ✅ ✅ ✅ binwalk_soft_install ✅
Binwalk v3 Rust-based binwalk rewrite binwalk ✅ ✅ ✅ binwalkv3_soft_install ✅
QNX6 Extractor QNX6 filesystem extractor qnx6extractor ✅ ✅ ✅ qnx6extractor_soft_install ✅
LLVM Compiler infrastructure for static analysis clang | clang++ | llvm-* | opt ✅ ✅ ❌ LLVM_install ✅
AFL American Fuzzy Lop fuzzer afl-fuzz | afl-gcc | afl-g++ | afl-clang | afl-clang++ ✅ ✅ ❌ AFL_install ✅
Honggfuzz Security-oriented fuzzer honggfuzz ✅ ✅ ❌ honggfuzz_install ✅
Semgrep Static analysis for finding bugs semgrep ✅ ✅ ✅ semgrep_install ✅
Cppcheck Static analysis for C/C++ code cppcheck ✅ ✅ ✅ cppcheck_install ✅
Clang Static Analyzer C/C++/Objective-C static analyzer scan-build | scan-view ✅ ✅ ✅ clang_static_analyzer_install ✅
Joern Code analysis platform for C/C++ joern | joern-parse | joern-export | joern-flow | joern-lookup ✅ ✅ ✅ joernsast_install ✅
AppleDB Rust Apple device database in Rust appledb ✅ ✅ ✅ appledb_rs_soft_install ❌ (commented out)
Cutter Qt-based reverse engineering platform cutter ✅ ✅ ✅ cutter_soft_install ✅
ImHex Hex editor for reverse engineers imhex ✅ ✅ ✅ imhex_soft_install ✅
Qiling Advanced binary emulation framework Python qiling module ✅ ❌ ❌ qiling_soft_install ❌ (debconf issues)
EMBA Embedded firmware analyzer emba ✅ ✅ ✅ emba_soft_install ❌ (takes long time)
Bytecaster Bytecode analyzer bytecaster ✅ ✅ ✅ bytecaster_soft_install ❌ (install manually)
angr Binary analysis framework with symbolic execution Python angr module ✅ ✅ ✅ angr_soft_install ✅
angrop ROP gadget finder for angr Python angrop module ✅ ✅ ✅ angrop_soft_install ✅
Trivy Vulnerability misconfiguration secret and SBOM scanner for images filesystems and repos trivy ✅ ✅ ❓ (no upstream binary) trivy_install ✅
Sighthound Tree-sitter based static vulnerability scanner with source-to-sink taint flow (Python JS/TS Java PHP C# Go Ruby; text/JSON/CSV/SARIF output) sighthound ✅ ✅ ✅ sighthound_install ✅
🆕
Static analysis alongside the RE tooling. Beyond the disassemblers and unpackers, the image carries a full SAST/fuzzing set you can point at extracted firmware and source trees: Semgrep, Joern, cppcheck, the Clang static analyzer, AFL and honggfuzz. Two of those are new in v3.0.0: Trivy, which scans images, filesystems and repos for vulnerabilities, misconfigurations, secrets and SBOMs, and Sighthound, a tree-sitter based scanner that follows source-to-sink taint flows through Python, JS/TS, Java, PHP, C#, Go and Ruby and reports in text, JSON, CSV or SARIF.

Architecture-Specific Tools:

  • Ghidra: Java-based, works on all architectures
  • Radare2/Cutter: x86_64 only due to Qt dependencies
  • Unicorn/Keystone: x86_64 only (ARM64 builds broken)
  • Binwalk v3: Requires Rust 1.82+, uses cargo for installation

Tool Locations:

  • /reverse/ - Reverse engineering tools and projects
  • Ghidra at /reverse/ghidra_X.X.X_PUBLIC/
  • ImHex: x86_64 uses .deb, ARM64 uses AppImage extraction

Network Analysis

The network image contains general network analysis and security tools:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
Burp Suite Community Web application security testing burpsuite ✅ ✅ ✅ burpsuite_community_install ✅
Nmap Network discovery and security auditing nmap | ncat | nping | ndiff ✅ ✅ ✅ nmap_soft_install ✅
Wireshark Network protocol analyzer wireshark ✅ ✅ ✅ wireshark_soft_install ✅
Metasploit Penetration testing framework msfconsole | msfvenom | msfdb | msfrpc | msfd ✅ ✅ ❌ metasploit_soft_install ✅
Tshark Command-line network protocol analyzer tshark ✅ ✅ ✅ tshark_soft_install ✅
Impacket Python classes for network protocols psexec.py | smbexec.py | wmiexec.py | secretsdump.py | GetNPUsers.py ✅ ✅ ✅ impacket_soft_install ✅
AutoRecon Network reconnaissance automation autorecon ✅ ✅ ✅ autorecon_soft_install ✅
Responder LLMNR NBT-NS and MDNS poisoner responder | Responder.py ✅ ✅ ✅ responder_soft_install ✅
TruffleHog Find secrets in git repositories trufflehog ✅ ✅ ✅ trufflehog_script_install ✅
hping3 Network tool for crafting packets hping3 ✅ ✅ ✅ hping3_soft_install ✅
arping ARP-level ping utility arping ✅ ✅ ✅ arping_soft_install ✅
NetExec Network protocol exploitation (formerly CrackMapExec) nxc | netexec ✅ ✅ ✅ netexec_soft_install ✅
SubEnum Subdomain enumeration tool subenum ✅ ✅ ✅ subenum_soft_install ✅
WebCopilot Web application reconnaissance automation webcopilot ✅ ✅ ✅ webcopilot_soft_install ✅
gowitness Web screenshot and recon tool gowitness ✅ ✅ ✅ gowitnes_soft_install ✅
SIPVicious VoIP security testing suite sipvicious | svmap | svwar | svcrack | svreport | svcrash ✅ ✅ ✅ sipvicious_soft_install ✅
Voipire VoIP attack toolkit voipire ✅ ✅ ✅ voipire_soft_install ✅
SIPpts VoIP penetration testing suite sippts ✅ ✅ ✅ sippts_soft_install ✅
MBTget Modbus security assessment tool mbtget ✅ ✅ ✅ mbtget_soft_install ✅
Kismet Wireless network detector and IDS kismet | kismet_server | kismet_client ✅ ✅ ✅ kismet_soft_install ✅
Bettercap Swiss Army knife for network attacks bettercap ✅ ✅ ✅ bettercap_soft_install ✅
Hashcat Advanced password recovery hashcat ✅ ✅ ✅ hashcat_soft_install ✅
John the Ripper Password cracker john | unshadow | unique ✅ ✅ ✅ john_soft_install ✅
Caido Modern web security proxy caido ✅ ✅ ✅ caido_soft_install ✅
DonPAPI Dump DPAPI secrets remotely donpapi ✅ ✅ ✅ donpapi_soft_install ❌ (install manually)
BeEF Browser Exploitation Framework beef ✅ ✅ ✅ beef_soft_install ❌ (install manually)
Argus The Ultimate Information Gathering Toolkit argus ✅ ✅ ✅ argus_soft_install_fromsource ✅
curlie The power of curl - the ease of use of httpie curlie ✅ ✅ ✅ curlie_soft_install_fromsource ✅
vortix Terminal UI for WireGuard and OpenVPN with real-time telemetry and leak guarding vortix ✅ ✅ ✅ vortix_soft_install_fromsource ✅
snitch a prettier way to inspect network connections snitch ✅ ✅ ✅ snitch_soft_install ✅
sslyze Fast and powerful SSL/TLS scanning library sslyze ✅ ✅ ✅ sslyze_soft_install ✅
netcat (OpenBSD) The network swiss army knife nc ✅ ✅ ✅ netcatopenbsd_soft_install ✅
telnet (client) text based protocol and application telnet ✅ ✅ ✅ telnet_soft_install ✅
SQLMap Automatic SQL injection and database takeover sqlmap ✅ ✅ ✅ sqlmap_soft_install ✅
SSTImap Server-Side Template Injection exploitation tool sstimap ✅ ✅ ✅ sstimap_soft_install ✅
WireTapper Network traffic interception and analysis wiretapper ✅ ✅ ✅ wiretapper_soft_install_fromsource ✅
DonPwner Domain enumeration and exploitation donpwner ✅ ✅ ✅ donpwner_soft_install ❌ (install manually)
Above Network protocol fuzzer above ✅ ✅ ✅ above_soft_install ❌ (install manually)
Titus Penetration testing framework titus ✅ ✅ ✅ titus_soft_install ✅
Brutus Network brute-force tool brutus ✅ ✅ ✅ brutus_soft_install ✅
Nerva Network analysis and reconnaissance nerva ✅ ✅ ✅ nerva_soft_install ✅
Trippy Modern network diagnostic tool (traceroute) trippy ✅ ✅ ✅ trippy_soft_install ✅
MIC Microphone capture utility mic ✅ ✅ ✅ mic_soft_install ✅
CryptoCONdor Cryptography testing toolkit cryptocondor ✅ ✅ ✅ cryptocondor_soft_install ✅
Nmap Automator Automated Nmap scanning wrapper nmapautomator ✅ ✅ ✅ nmapautomator_soft_install ✅
ReconFTW Automated reconnaissance framework reconftw ✅ ✅ ✅ reconftw_soft_install ❌ (install manually)
Tetsuo H3sec Security testing framework tetsuo ✅ ✅ ✅ tetsuo_h3sec_soft_install ❌ (commented out)
SecLists Collection of wordlists for fuzzing discovery and password attacks Wordlists in /opt/fuzzing/SecLists ✅ ✅ ✅ seclist_soft_install ✅
whosthere Identify hosts and services on the local network whosthere ✅ ✅ ✅ whosthere_soft_install ✅
Ettercap Man-in-the-middle attack suite (text-only build) ettercap ✅ ✅ ✅ ettercap_soft_install ✅
ISC DHCP server Rogue/lab DHCP server for network attack setups dhcpd ✅ ✅ ✅ isc_dhcp_server_soft_install ✅
lighttpd Lightweight web server for hosting payloads and captive portals lighttpd ✅ ✅ ✅ lighttpd_soft_install ✅
crunch Wordlist generator crunch ✅ ✅ ✅ crunch_soft_install ✅
NetWatch Terminal UI network monitor netwatch ✅ ✅ ✅ netwatch_soft_install_fromsource ✅
Sniffnet Cross-platform network traffic monitor with a graphical UI sniffnet ✅ ✅ ✅ sniffnet_soft_install_fromsource ✅
betterleaks Search engine and collection tooling for leaked credential datasets betterleaks ✅ ✅ ✅ betterleaks_soft_install ✅
SSRFmap Automatic SSRF fuzzer and exploitation tool ssrfmap ✅ ✅ ✅ ssrfmap_soft_install ✅
GraphQLmap Scripting engine to interact with and attack GraphQL endpoints graphqlmap ✅ ✅ ✅ graphqlmap_soft_install ✅
John the Ripper (jumbo) Password cracker with the community jumbo patch set JohnJumbo ✅ ✅ ✅ johnjumbo_soft_install ✅
Hetty HTTP toolkit for security research (open-source Burp alternative) hetty ✅ ✅ ✅ hetty_soft_install ✅
HExHTTP HTTP header analysis and web cache poisoning testing hexhttp ✅ ✅ ✅ hexhttp_soft_install ✅

Major Frameworks:

  • Metasploit: Full penetration testing framework (x86_64/aarch64)
  • NetExec: Network protocol exploitation
  • Kismet: Wireless/Bluetooth packet capture and analysis
  • Caido: Modern web security testing platform
  • Burp Suite Community: Multi-architecture support (JAR fallback for non-x86_64)

Active Directory 🆕

The ad image builds on network and packs the tooling needed for Windows domain engagements, the part of an assessment that starts once you are past the radio layer:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
AD apt toolchain Base AD client tooling (SMB LDAP Kerberos) smbclient | ldapsearch | kinit | klist | samdump2 | onesixtyone | nbtscan | dig | nslookup ✅ ✅ ✅ ad_apt_tools_install ✅
Impacket Python classes for Windows network protocols psexec.py | smbexec.py | wmiexec.py | secretsdump.py | GetNPUsers.py | GetUserSPNs.py | ntlmrelayx.py ✅ ✅ ✅ impacket_soft_install ✅
Responder LLMNR NBT-NS and MDNS poisoner Responder.py in /opt/network/Responder ✅ ✅ ✅ responder_soft_install ✅
NetExec Network protocol exploitation and AD enumeration (CrackMapExec successor) netexec | nxc ✅ ✅ ✅ netexec_soft_install ✅
DonPAPI Remote DPAPI secret dumping DonPAPI ✅ ✅ ✅ donpapi_soft_install ✅
DonPwner AD exploitation automation on top of DonPAPI Python scripts in /opt/network/DonPwner ✅ ✅ ✅ donpwner_soft_install ✅
ldapdomaindump LDAP-based domain information dumper ldapdomaindump ✅ ✅ ✅ ldapdomaindump_soft_install ✅
BloodHound.py Python ingestor for BloodHound AD graphs bloodhound-python ✅ ✅ ✅ bloodhound_py_soft_install ✅
Certipy AD Certificate Services (ADCS) enumeration and abuse certipy ✅ ✅ ✅ certipy_soft_install ✅
bloodyAD AD privilege escalation framework bloodyAD ✅ ✅ ✅ bloodyad_soft_install ✅
certsync Dump NTDS hashes through ADCS certificates certsync ✅ ✅ ✅ certsync_soft_install ✅
mitm6 IPv6 DNS takeover for NTLM relaying mitm6 ✅ ✅ ✅ mitm6_soft_install ✅
lsassy Remote LSASS credential extraction lsassy ✅ ✅ ✅ lsassy_soft_install ✅
sprayhound AD password spraying with BloodHound integration sprayhound ✅ ✅ ✅ sprayhound_soft_install ✅
kerbrute Kerberos user enumeration and password spraying kerbrute ✅ ✅ ✅ kerbrute_soft_install ✅
SharpLAPS Retrieve LAPS passwords from LDAP (staged as source for the target) SharpLAPS.exe (if a prebuilt binary ships upstream) ✅ ✅ ✅ sharplaps_soft_install ✅ (staged in /opt/ad)
pyGoldenGMSA Golden gMSA attack against Group Managed Service Accounts pygoldengmsa ✅ ✅ ✅ install_pyGoldenGMSA ✅
skewrun Wrap a process with a DC-synchronised clock to survive KRB_AP_ERR_SKEW skewrun ✅ ✅ ✅ (built with cargo) skewrun_soft_install ✅

Tool Locations:

  • /opt/ad/ - Staged AD tooling (SharpLAPS and other target-side payloads)
  • /opt/network/ - Shared network tooling inherited from the network image (Responder, DonPAPI, DonPwner, pyGoldenGMSA)
  • pipx-installed tools are symlinked into /usr/sbin/
Kerberos clock skew: domain controllers reject tickets when your clock drifts more than a few minutes, and inside a container you usually cannot (and should not) change the system clock. skewrun resolves the DC’s time over AD protocols and fakes it via LD_PRELOAD/libfaketime for the wrapped process only, so Impacket, NetExec and friends survive KRB_AP_ERR_SKEW without root and without touching the host clock. Run skewrun --help for the exact invocation.
SharpLAPS is a C#/.NET tool meant to run against Windows targets. RF Swift stages the repository under /opt/ad/SharpLAPS rather than compiling it on Linux. Build it on or against your Windows target.

Mobile / Android 🆕

The android image covers Android application and device assessment, from pulling an APK off a handset to running it through a full static analysis pipeline:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
Android platform tools Device communication flashing and screen mirroring adb | fastboot | scrcpy ✅ ✅ ✅ mobile_apt_tools_install ✅
Apktool APK decompiler and rebuilder apktool ✅ ✅ ✅ mobile_apt_tools_install ✅
apksigner / zipalign APK signing and alignment apksigner | zipalign ✅ ✅ ✅ mobile_apt_tools_install ✅
smali / baksmali Dalvik bytecode assembler and disassembler smali | baksmali | dexdump ✅ ✅ ✅ mobile_apt_tools_install ✅
dex2jar Convert Android DEX to Java JAR for decompilation d2j-dex2jar | d2j-jar2dex | d2j-apk-sign (in /mobile/dex-tools-v2.4) ✅ ✅ ✅ dex2jar_soft_install ✅
Frida Dynamic instrumentation toolkit frida | frida-ps | frida-trace | frida-discover ✅ ✅ ❓ frida_soft_install ✅
objection Runtime mobile exploration built on Frida objection ✅ ✅ ❓ objection_soft_install ✅
androguard Android APK static analysis framework androguard ✅ ✅ ✅ androguard_soft_install ✅
drozer Android security assessment framework (ReversecLabs) drozer ✅ ✅ ✅ drozer_soft_install ✅
MobSF Mobile Security Framework - automated static and dynamic analysis mobsf (web UI on port 8000) ✅ ✅ ❓ mobsf_soft_install ✅

USB device access: adb and fastboot need the handset bound into the container. Pass the device (or the whole USB bus) at creation time:

rfswift run -i android -n mobile_lab -s /dev/bus/usb:/dev/bus/usb

On macOS, use rfswift macusb to attach the device through the Lima VM first.

Tool Locations and Notes:

  • /mobile/ - dex2jar (/mobile/dex-tools-v2.4) and the MobSF checkout
  • MobSF only supports Python 3.12-3.13, so RF Swift provisions a dedicated interpreter with uv at /mobile/.mobsf-python and drives MobSF through it. Start it with mobsf and browse to http://localhost:8000 (expose the port with -p 8000:8000)
  • PDF report export in MobSF relies on wkhtmltopdf, which Ubuntu removed. The upstream static build is installed best-effort on amd64/arm64; MobSF runs fine without it

OSINT 🆕

The osint image collects open-source intelligence and reconnaissance tooling on top of corebuild:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
OSINT apt toolchain Metadata DNS and WHOIS utilities exiftool | exiftran | dnsenum | tor | whois | dig | nslookup ✅ ✅ ✅ osint_apt_tools_install ✅
theHarvester E-mail subdomain and name harvesting from public sources theHarvester ✅ ✅ ✅ osint_pipx_tools_install ✅
Sherlock Hunt usernames across social networks sherlock ✅ ✅ ✅ osint_pipx_tools_install ✅
maigret Profile collection from thousands of sites by username maigret ✅ ✅ ✅ osint_pipx_tools_install ✅
holehe Check which sites an e-mail address is registered on holehe ✅ ✅ ✅ osint_pipx_tools_install ✅
Sublist3r Subdomain enumeration via search engines sublist3r ✅ ✅ ✅ osint_pipx_tools_install ✅
h8mail E-mail breach and password hunting h8mail ✅ ✅ ✅ osint_pipx_tools_install ✅
GHunt Google account investigation ghunt ✅ ✅ ✅ osint_pipx_tools_install ✅
instaloader Instagram profile and media collection instaloader ✅ ✅ ✅ osint_pipx_tools_install ✅
toutatis Extract information from Instagram accounts toutatis ✅ ✅ ✅ osint_pipx_tools_install ✅
censys Censys search CLI for host and certificate data censys ✅ ✅ ✅ osint_pipx_tools_install ✅
subfinder Passive subdomain discovery (ProjectDiscovery) subfinder ✅ ✅ ✅ osint_go_tools_install ✅
assetfinder Find domains and subdomains related to a target assetfinder ✅ ✅ ✅ osint_go_tools_install ✅
waybackurls Fetch known URLs from the Wayback Machine waybackurls ✅ ✅ ✅ osint_go_tools_install ✅
SpiderFoot Automated OSINT collection and correlation platform spiderfoot (web UI) ✅ ✅ ✅ spiderfoot_soft_install ✅
recon-ng Modular web reconnaissance framework recon-ng ✅ ✅ ✅ reconng_soft_install ✅
FinalRecon All-in-one web reconnaissance tool finalrecon ✅ ✅ ✅ finalrecon_soft_install ✅

Tool Locations:

  • /opt/osint/ - SpiderFoot, recon-ng and FinalRecon, each in its own Python virtual environment with a wrapper script in /usr/local/bin
  • pipx-installed tools are symlinked into /usr/sbin/
  • Go tools (subfinder, assetfinder, waybackurls) land in /usr/local/bin
API keys: many OSINT tools (Censys, GHunt, SpiderFoot modules, subfinder sources) need credentials to return useful results. Configure them inside the container and commit the result with rfswift commit, or bind a configuration directory from the host so your keys survive container recreation.

Hardware Security

The hardware image focuses on general hardware security testing and analysis:

Tool(s) Description Available commands amd64 aarch64 riscv64 Installation function Installed by default
AVRDUDE AVR microcontroller programmer avrdude ✅ ✅ ✅ avrdude_install ✅
DSView Logic analyzer software for DSLogic DSView ✅ ✅ ✅ dsview_install ✅
PulseView Sigrok logic analyzer frontend pulseview ✅ ✅ ✅ pulseview_install ✅
Arduino IDE Integrated development environment for Arduino arduino | arduino-cli ✅ ✅ ✅ arduino_ide_install ✅
Logic 2 (Saleae) Logic analyzer software for Saleae devices logic2 | Logic ✅ ❌ ❌ logic2_saleae_install ✅
Flashrom Flash chip programmer flashrom ✅ ✅ ✅ flashrom_install ✅
dsl2sigrok Convert DSLogic VCD to Sigrok format dsl2sigrok ✅ ✅ ✅ dsl2sigrok_install ✅
SeerGDB Lightweight GUI frontend to GDB seergdb ✅ ✅ ✅ seergdb_install ✅
OpenOCD On-Chip Debugger for embedded devices openocd ✅ ✅ ✅ openocd_install ✅
dfu-util Device Firmware Upgrade utilities dfu-util | dfu-prefix | dfu-suffix ✅ ✅ ✅ dfu_util_install ✅
openFPGALoader Universal FPGA programming utility openFPGALoader ✅ ✅ ✅ openFPGALoader_install ✅
MTKClient MediaTek bootloader client mtkclient | mtk ✅ ✅ ✅ mtkclient_install ✅
esptool ESP8266/ESP32 ROM bootloader utility esptool.py | espefuse.py | espsecure.py ✅ ✅ ✅ esptool_install ✅
ngscopeclient Next-generation oscilloscope software ngscopeclient ✅ ✅ ✅ ngscopeclient_install ✅
GPU Drivers - NVIDIA NVIDIA GPU compute drivers nvidia-smi | nvidia-settings ✅ ✅ ✅ install_GPU_nvidia ✅
GPU Drivers - Intel Intel GPU compute drivers intel-gpu-tools ✅ ✅ ✅ install_GPU_Intel ✅
GPU Drivers - Radeon (up to 5000) AMD Radeon GPU drivers for older cards rocm-smi ✅ ✅ ✅ install_GPU_Radeon_until5000 ✅
GPU Drivers - Radeon (latest) AMD Radeon GPU drivers for latest cards rocm-smi ✅ ✅ ✅ install_GPU_latest_Radeon ✅
HydraNFC Trace Plugin Sigrok plugin for HydraNFC traces Sigrok HydraNFC decoder ✅ ✅ ✅ hydranfc_trace_plugin_install ✅
SPI-TPM Trace Plugin Sigrok plugin for SPI-TPM trace analysis Sigrok SPI-TPM decoder ✅ ✅ ✅ spitpm_trace_plugin_install ✅
SPITkey SPI programming and key extraction tool spitkey ✅ ✅ ✅ spitkey_install ✅
PyHydraBus Python interface for HydraBus hardware pyhydrabus ✅ ✅ ✅ pyhydrabus_install ✅
findus Python module driving the PicoGlitcher fault-injection board Python findus module ✅ ✅ ✅ pythonfindus_install ✅
rd6006 Python module for RD6006 programmable power supplies Python rd6006 module ✅ ✅ ✅ pythonrd6006_install ✅
SLogic PulseView Sipeed SLogic build of PulseView/sigrok isolated in /opt/slogic /opt/slogic/bin/pulseview ✅ ✅ ✅ slogic_pulseview_install_fromsources ✅

Logic Analyzer Software:

  • Logic 2 (Saleae): x86_64 only, uses --no-sandbox flag automatically
  • PulseView/Sigrok: Built from source with ARM64 libsigrokdecode patch
  • DSView: Built from source for DSLogic devices

Tool Locations:

  • /hardware/ - Logic analyzers, programmers, and debugging tools
  • Arduino IDE wrapper at /usr/sbin/arduino
  • OpenOCD with extensive debug probe support

Native Nix environments

The same categories exist as native environments for the Nix engine, defined in RF-Swift-nix. rfswift env catalog lists them on your machine, rfswift env tools <name> shows what one carries, and rfswift env run <environment> <tool> runs a single tool without creating anything. This table comes from the catalog (RF-Swift-nix 4.0.0):

Environment Category Packages What it covers
ad Network 20 Active Directory attack tooling: impacket, NetExec, kerbrute, Samba/LDAP/Kerberos clients.
android Mobile 21 Android / mobile: adb/fastboot, apktool, frida, androguard, scrcpy, jadx and reversing tools.
automotive Automotive 13 Automotive / CAN bus: can-utils, SavvyCAN, gallia and CAN analysis tooling.
bluetooth Bluetooth 29 Bluetooth Classic + BLE: BlueZ stack, Ubertooth, and Python BLE tooling, on the SDR device layer.
cyberether SDR 11 CyberEther: heterogeneous SDR signal visualisation (Vulkan), with the SoapySDR device stack.
hardware Hardware 29 Hardware hacking: avrdude, sigrok/PulseView, OpenOCD, flashrom, openFPGALoader, esptool, dfu-util.
network Network 126 General network & web pentest: nmap, Wireshark, Metasploit, bettercap, Kismet, hashcat/john, sqlmap and more.
osint OSINT 24 OSINT: theHarvester, sherlock, recon-ng, subfinder, exiftool and reconnaissance tools.
reversing Reversing 46 Reverse engineering & firmware analysis: Ghidra, rizin/Cutter, radare2, binwalk, AFL++, semgrep, ImHex.
rfid RFID 23 RFID / NFC toolkit: Proxmark3 (Iceman), libnfc, MIFARE crackers and NFC utilities.
sdr_full SDR 78 Full SDR arsenal: sdr_light plus SDRangel, SatDump, SigDigger, GQRX and many GNU Radio OOT modules available in nixpkgs.
sdr_light SDR 59 Light SDR set: GNU Radio, everyday SDR apps and the full device/driver layer (sdrsa_devices).
telecom Telecom 50 Mobile telecom 2G-5G: Osmocom stack, srsRAN, Open5GS, UERANSIM, YATE and SDR.
telecom_5g_bladerf Telecom 26 5G SA on a bladeRF: srsRAN Project bladeRF fork with its SoapyBladeRF variant, Open5GS core, and the telecom utility set (telecom_5G_bladerf image).
wifi WiFi 45 Wi-Fi audit suite: aircrack-ng, hcxtools, WPS/WPA3 attacks and rogue-AP frameworks, on top of the network toolkit.

Packages are nixpkgs attribute names (python3Packages.impacket, gnuradioPackages.gr-osmosdr), which is also what rfswift env install and rfswift env search --nixpkgs accept, so a tool the catalog does not carry is one env install away. The catalog records the packages that do not build on an architecture, and the environment simply ships without them there. See Installing software for how this compares with the images.

Tool Usage Tips

Tool Directory Organization

RF Swift organizes tools in specialized directories for easier discovery:

  • /rftools/ - Radio frequency analysis tools
  • /rftools/sdr/ - SDR software and utilities
  • /rftools/bluetooth/ - Bluetooth tools and firmwares
  • /rftools/wifi/ - WiFi security tools
  • /rftools/rfid/ - RFID readers and utilities
  • /rftools/calibration/ - VNA and calibration tools
  • /rftools/analysers/ - Spectrum analyzer software
  • /rftools/generators/ - Signal generator software
  • /hardware/ - Hardware security and testing tools
  • /automotive/ - Vehicle communication and analysis tools
  • /reverse/ - Reverse engineering and firmware analysis tools
  • /telecom/ - Telecommunications tools
  • /telecom/2G/ - GSM/2G base stations
  • /telecom/3G/ - UMTS/3G tools
  • /telecom/4G/ - LTE/4G tools
  • /telecom/5G/ - 5G SA/NSA tools
  • /telecom/SIM/ - SIM card tools
  • /security/ - Security testing tools (Caido, etc.)
  • /opt/network/ - Network security tools
  • /opt/ad/ - Active Directory tooling (ad image) 🆕
  • /opt/osint/ - OSINT frameworks in their own venvs (osint image) 🆕
  • /mobile/ - Android and mobile tooling (android image) 🆕
  • /opt/gnuradio4/ - GNU Radio 4.0 tree and its Python venv (sdr_gnuradio4 image) 🆕
  • /opt/fuzzing/ - Wordlists and fuzzing resources (SecLists)
  • /nettools/ - Network monitoring tools built from source
  • /opt/crack/ - Password cracking tools
  • /sast/ - Static analysis security testing

These directories complement the standard system paths (/usr/bin, /usr/local/bin) and contain specialized tools, scripts, and resources.

Finding Available Tools

To discover which tools are available in your current container:

# List all executable commands in standard paths
find /usr/bin /usr/local/bin -type f -executable | sort

# List RF tools in the dedicated directory
ls -la /rftools

# List tools in other specialized directories
ls -la /hardware
ls -la /automotive
ls -la /reverse
ls -la /telecom

# Search for a specific tool across all locations
find /usr/bin /usr/local/bin /rftools /hardware /automotive /reverse /telecom -name "*sdr*" -type f -executable

Manual Tool Installation

Some tools are not installed by default but can be added after container creation. To install these tools:

rfswift container install -c container_name -i <installation_function_name>

The Installing software page compares this with apt inside the container, committing the result, recipes, and the Nix engine’s env install and env run.

Common manually-installed tools:

  • mdk3_soft_install - WiFi DoS testing
  • wifipumpkin3_soft_install - Rogue AP framework
  • install_soapy_modules - Additional SoapySDR device support
  • pocketvna_sa_device - PocketVNA software (x86_64 only)
  • srsran5GSA_bladerf_soft_install - 5G SA gNB fork with bladeRF support

To find out what is available in a given image, check the Installation function column of the tables above. Every entry marked ❌ can be installed this way.

Check what actually built. RF Swift images record install failures instead of aborting the whole build, so a tool listed as installed by default may still be missing if its build broke on your architecture. Every image carries its build report at /var/lib/db/rfswift_build_report.tsv. Inspect it from inside a running container:

cat /var/lib/db/rfswift_build_report.tsv

An empty or missing file means nothing failed. Failures are recorded as CATEGORY / STAGE / ITEM / DETAIL, so you can see exactly which tool broke and why, then reinstall it manually with rfswift install once the upstream issue is fixed.

Tool Documentation

Most tools include built-in help available through the -h or --help flags:

tool_name --help

For more detailed documentation, many tools include man pages:

man tool_name

Creating Tool Aliases

For frequently used tools with complex options, consider creating aliases in your container:

echo 'alias rtlpower-optimized="rtl_power -f 88M:108M:25k -g 50 -i 10 -e 1h power.csv"' >> ~/.zshrc
source ~/.zshrc

Architecture-Specific Notes

x86_64 / AMD64

  • Broadest tool support
  • All GPU-accelerated tools available
  • SignalHound and specialized SA software supported

ARM64 / aarch64

  • Most tools fully supported
  • Some GUI applications require AppImage extraction
  • Limited SA software support (no SignalHound Spike/VSG60)
  • Python tools may need building from source

RISC-V64

  • Growing support, most core SDR tools work
  • Some tools installed from source due to package availability
  • Limited pre-built binary support
  • Python packages may require longer build times

Next Steps

Continue to the Configurations page to learn how to customize your RF Swift environment:

Configuration Options
Customize your RF Swift environment for optimal performance.
Last updated on
Container ImagesConfigurations