Successful GPS Spoof

Using this (gps-sdr-sim) library we were able to spoof the GPS receiver on a Nexus (phone) and a BU-353S4 (dedicated GPS receiver).

Download/Clone this library to your Linux machine. Create your gpssim.bin file as described in the previous tutorial. The important step that I found for the BladeRF in particular is that when you generate your gpssim.bin file you need the options "-b 16" at the end of your command.

You can also modify the gain of the BladeRF's TX antenna by going into the bladerf.script file and changing the tvxga1 to -4 (which is the maximum without any type of amplifier). It may take a while for your GPS receiver to get a 3D Fix. It may be stuck at Figure 1's screen for a while.

Figure 1 - No Fix, but enough strong satellites found

After a while it will eventually get a 3D Fix and you can see exactly where in the world you spoofed it to (Figure 2 and Figure 5). In this case we spoofed to Japan (Figure 3) and started walking around in a circle as you can see from the heading changing (Figure 6). You can also see the where in the constellation that the GPS satellites are being spoofed to (Figure 4).

Figure 2 - 3D Fix, GPS successfully spoofed

Figure 3 - Spoofed Coordinates to Japan

Figure 4 - Spoofed Satellites

Figure 5 - Dedicated GPS Receiver Spoofed

Figure 6 - Spoofed GPS Heading, Walking in Circle