Adapting EFF's Rayhunter IMSI-catcher detector for the GL-E750V2 Mudi V2 portable 4G LTE router. Integrates OpenCelliD for cell tower verification and Blue Merle for IMSI/IMEI randomization. Feeds into Chasing Your Tail NG for combined surveillance analysis.
"Know your enemy and know yourself, and you can fight a hundred battles without disaster." — Sun Tzu
| Goal | Tool |
|---|---|
| Detect IMSI catchers / fake cell towers | Rayhunter |
| Verify cell towers against known database | OpenCelliD |
| Avoid being tracked via IMSI/IMEI | Blue Merle |
| Cross-reference with WiFi/BT surveillance data | Chasing Your Tail NG |
| Pager display & control interface | DuckyScript |
- GL-E750V2 Mudi V2 — portable 4G LTE router (OpenWrt-based)
- Modem: Quectel EM050-G
- Architecture: MIPS
- OS: OpenWrt 22.03.x
- WiFi Pineapple Pager — display/control interface (DuckyScript)
EFF's Rayhunter analyzes cellular modem diagnostic data to detect anomalies characteristic of IMSI catchers (Stingrays).
⚠️ Compatibility Research Required: Rayhunter currently targets the Orbic RC400L and TP-Link M7350 (Qualcomm/dev/diaginterface). Porting to the Mudi V2 (EM050-G modem) requires investigation of diagnostic interface availability. See research notes.
Cross-reference detected cell towers against the OpenCelliD open database to identify unknown or suspicious base stations in the area.
Blue Merle by SRLabs provides:
- IMEI randomization
- IMSI-based pseudo-random IMEI generation
- MAC address randomization (WiFi uplink)
Already supports the GL-E750V2 Mudi V2. ✓
The WiFi Pineapple Pager acts as the control interface via DuckyScript:
- Display current cell tower info and threat level
- Alert on suspicious BTS events (
VIBRATE,LED) - Trigger Blue Merle IMEI rotation
- Export findings to CYT report
Suspicious cell tower events are exported as CYT-compatible JSON and merged with WiFi/Bluetooth tracking data from Chasing Your Tail NG for unified timeline analysis.
| Component | Status |
|---|---|
Rayhunter /dev/diag on EM050-G |
🔬 Research |
| OpenCelliD lookup module | 📋 Planned |
| Blue Merle integration | 📋 Planned |
| DuckyScript Pager UI | 📋 Planned |
| CYT JSON export | 📋 Planned |
This project is for authorized security research and counter-surveillance purposes only. Detecting IMSI catchers is legal in most jurisdictions — verify local laws before use. Do not use components of this project to intercept communications or track others without authorization.