Rayhunter is an IMSI catcher detection tool and cellular network monitor designed to identify cell-site simulators and fake base stations. It functions as an SDR signal analyzer that tracks tower connectivity, logs GPS locations, and monitors for network downgrades or disabled encryption on mobile hardware.
The system distinguishes itself through heuristic-based traffic analysis used to detect suspicious identity requests, malformed system information, and the use of null ciphers. It includes a remote device management interface consisting of a REST API and web dashboard for controlling detection daemons.
The project covers broad capabilities in wireless signal capturing, remote device administration via ADB or telnet, and hardware integration for rendering status through LEDs and physical button triggers. It also provides network management utilities, including dual-mode WiFi operation and automated driver recovery.
Software is deployed to supported mobile devices through automated daemon installation and can be updated using source packages or pre-built binaries.
