Detection and Analysis of Flipper Zero Deauthentication Signals Using HackRF One Software-Defined Radio

Deauthentication attacks remain a significant threat to wireless network security. This study investigates the characteristics of deauthentication signals generated by a Flipper Zero device as captured by a HackRF One Software-defined radio (SDR). By analyzing signal parameters such as power levels, frequency bands, and modulation techniques, distinct features differentiating deauthentication attacks from legitimate network traffic are identified. Results indicate that deauthentication attacks introduce notable power level spikes, increasing from approximately −80 dBm to −30 dBm at a distance of one meter. The deauthentication signal typically occupies a 6 MHz bandwidth centered around 2.422 GHz. Signal strength decreases to −35 dBm and −40 dBm at distances of five and ten meters, respectively. These findings complement existing packet-based detection methods by providing additional insights into deauthentication attack characteristics, enabling the development of more robust detection systems through the integration of waveform analysis and advanced signal processing techniques.