Question 1

What is the Attack Playbook?

Accepted Answer

The Attack Playbook is a free, interactive 3D visualization tool covering 37 cybersecurity attack scenarios built with Three.js and React. It uses animated scenes to show radar eavesdropping, acoustic side-channels, electromagnetic emanation attacks, Frey effect directed audio, WiFi CSI surveillance, RFID glasses eavesdropping, Lamphone optical attacks, and defensive countermeasures — all backed by 275 peer-reviewed citations from IEEE, USENIX Security, ACM CCS, Nature, and Science.

Question 2

What is the RF Academy?

Accepted Answer

The RF Academy is a 9-module self-paced curriculum that organizes all 37 attack scenes into a logical learning path for telecom and frequency intelligence. It covers: (1) EM Spectrum and SDR Fundamentals, (2) Acoustic Physics, (3) RF Emanations and IoT, (4) Directed Energy and Radar, (5) Laser and Optical Exploitation, (6) Audio ML and Neural Attacks, (7) Multi-Vector Operations, (8) Code and Implementation, (9) Forensics and Counter-Surveillance. Each module includes core concepts, hands-on scene demonstrations, and assessment questions.

Question 3

What attacks does the playbook cover?

Accepted Answer

37 scenes cover: mmWave radar speech capture, Frey effect microwave audio, keyboard acoustic eavesdropping (95% accuracy), WiFi CSI through-wall sensing, voice cloning (VALL-E, SV2TTS), sub-GHz RF capture, photoacoustic laser audio, heterodyne frequency mixing, RF-Mic RFID eavesdropping, Doppler fingerprinting with Python code, Lamphone photodiode optical attack, VoIP audio exfiltration, HDMI TEMPEST emanation capture, smart meter metadata correlation, crowded room 1-of-20 extraction via beamforming, parametric speaker and DolphinAttack ultrasonic injection, infrastructure movement prediction, 4-platform SDR WiFi CSI, signal forensics and TSCM, and FM radio broadcast defense.

Question 4

What is the Transparent Home (Scene 36)?

Accepted Answer

Scene 36 models a 3-story home with 14+ electromagnetic attack surfaces. An articulated walking victim is tracked by a photodiode particle beam that dynamically locks onto the nearest lightbulb and changes color based on signal strength. The scene includes VoIP exfiltration via compromised SIP phone, HDMI TEMPEST emanation rings, smart meter RF pulses, device proximity interference, mmWave spectrogram residue (appearing after 15 seconds), and a defender FM radio broadcast counterstrike (appearing after 25 seconds).

Question 5

What SDR hardware does the playbook support?

Accepted Answer

Scene 37 provides working Python code for 4 SDR platforms: RTL-SDR v3 ($25, 24-1766 MHz, 2.4 MSPS), HackRF One ($350, 1 MHz-6 GHz, 20 MSPS), ESP32 ($5, native WiFi CSI extraction, 64 subcarriers at 100 Hz), and Nexmon Raspberry Pi ($45, BCM43455c0 firmware patch, 256 subcarriers on 80 MHz channels). Scene 31 includes a complete Microwave Doppler Fingerprint Python pipeline using RTL-SDR ($50 total hardware cost).

Question 6

How does the Lamphone photodiode attack work?

Accepted Answer

The Lamphone attack (Scene 36) uses a telescope and electro-optical sensor (Thorlabs PDA100A2 photodiode) aimed at a hanging lightbulb through a window. Sound waves cause air pressure fluctuations on the bulb surface, producing millidegree vibrations that modulate emitted light. The photodiode converts these intensity fluctuations into electrical current, sampled at 4+ kHz. An OAT algorithm high-pass filters at 85 Hz to remove mains hum, applies spectral subtraction and Wiener filtering to recover speech at 150-3400 Hz. Published at USENIX Security 2022.