Build a Portable HackRF One + PortaPack Standalone Radio
The RTL-SDR dongles covered elsewhere on this site are receive-only — great for listening to ADS-B traffic, FM radio, and trunked P25 systems, but they can't transmit a single bit. The HackRF One is a different class of tool: a half-duplex software-defined radio that both receives and transmits across 1 MHz to 6 GHz, with up to 20 MHz of instantaneous bandwidth. Pair it with a PortaPack add-on board and it becomes a standalone, battery-powered, touchscreen SDR you can carry around without a laptop — the same general concept as the Flipper Zero's Sub-GHz tools, but operating across a vastly wider frequency range and with real transmit power output instead of a narrow sub-1GHz replay function. This project builds that standalone unit and gets you to your first legal transmission.
Why HackRF Over RTL-SDR
RTL-SDRHackRF One Frequency range~24 MHz - 1.7 GHz (dongle dependent)1 MHz - 6 GHz TransmitNoYes (half-duplex) Bandwidth~2.4-3.2 MHzUp to 20 MHz ADC/DAC resolution8-bit8-bit Typical price tierBudgetMid-range Standalone (no PC)NoYes, with PortaPackIf your project is purely receive-and-decode — ADS-B, weather satellites, trunked radio monitoring — an RTL-SDR remains the cheaper, simpler tool and is what most of this site's SDR content already covers. HackRF earns its place when you need to generate a signal: testing your own receivers, exploring protocols on hardware you own, or replaying and analyzing signals well outside the sub-1GHz range a Flipper Zero can reach.
Assembly
The PortaPack H4M mounts directly onto the HackRF One's expansion header — no soldering required for the stock combo, just careful alignment of the header pins before seating it fully. The H4M's own case typically has a cutout for the HackRF's SMA connector and buttons; check your specific kit's fit before final assembly, since HackRF One board revisions have shifted component placement over the years. Seat the battery cells according to the H4M's polarity markings — reversed cells are a common first-boot failure and won't damage anything if caught immediately, but will prevent power-on.
Flashing Mayhem Firmware
Mayhem is the actively maintained community firmware for PortaPack — it replaces the older, now largely abandoned stock PortaPack firmware with a maintained fork that adds dozens of features: a spectrum analyzer, protocol-specific TX/RX apps, GPS simulation, and a Flipper-Zero-style file manager for captures. Download the latest Mayhem release, copy the firmware image to the microSD card's root, and boot the PortaPack holding the appropriate button combination to enter DFU/bootloader mode (check the current Mayhem documentation for your hardware revision's exact key combo, since this has changed across firmware versions). The flashing process writes both the HackRF's own firmware and the PortaPack application layer — expect the first boot after flashing to take longer than normal while it initializes.
Your First Receive: A Spectrum Sweep
Before transmitting anything, spend time in Mayhem's spectrum analyzer app sweeping bands you already know the occupants of — FM broadcast (88-108 MHz), the 433 MHz ISM band your garage remotes and weather stations use, and 2.4 GHz Wi-Fi. Watching known signals appear on the waterfall display is the fastest way to build intuition for what you're looking at before you try to identify something unknown. This also confirms your antenna and RF chain are working correctly before you move to transmit testing.
Your First Transmission — Legally
HackRF's transmit capability is real RF output, not a simulated replay — which means the same legal framework that governs any radio transmitter applies to you. In most countries, transmitting on licensed amateur radio bands requires an amateur radio license (see this site's guide on getting your Technician license), and transmitting on other allocated spectrum without authorization — cellular bands, public safety, aviation — is a serious federal offense, not a gray area. The safe, legal, genuinely useful first transmit test is a low-power loopback: connect the HackRF's TX port to its own RX port (or a second SDR) through a short coax cable and a fixed attenuator (20-30 dB minimum — direct TX-to-RX connection without attenuation can damage the receiver front-end), and verify you can generate and receive a simple tone or FSK signal entirely within your own hardware, radiating nothing into open air.
Once you're ready to transmit into free space, stick to the ISM bands available for unlicensed low-power use in your region (315/433/915 MHz depending on country, and 2.4 GHz), keep power output low, and if you hold an amateur license, the amateur bands open up considerably more room to experiment legally with GNU Radio flowgraphs and digital modes.
Beyond Mayhem: GNU Radio
The PortaPack's on-device apps cover the common cases, but HackRF's real ceiling is reached tethered to a computer running GNU Radio Companion — a visual flowgraph tool for building arbitrary signal processing chains: FM demodulators, custom digital mode decoders, spectrum recorders, and protocol fuzzers you design yourself rather than ones baked into firmware. GNU Radio has a steep learning curve compared to point-and-click SDR apps, but it's the tool that separates "using someone else's decoder" from "understanding and building your own" — the same shift this site's readers have made moving from Flipper Zero's Sub-GHz app to actually parsing a signal's modulation and bit timing by hand.
Safety and Legal Notes
- Never transmit on public safety, aviation, cellular, or other licensed bands without proper authorization — this isn't a technicality, it's federal law in most jurisdictions and carries real penalties.
- An amateur radio license (see our licensing guide) legally opens a huge amount of spectrum for legitimate experimentation and is genuinely worth getting if you plan to transmit regularly.
- Battery cells for the H4M are unprotected-cell-compatible but using protected 18650 cells adds a real safety margin against over-discharge and short-circuit — don't cheap out here.
- Keep transmit power low during testing; you don't need to blast a signal across a neighborhood to verify a flowgraph works.
A HackRF plus PortaPack combo is a genuinely different tool than the RTL-SDR dongles and the Flipper Zero already covered on this site — wider frequency range, real transmit capability, and a path into GNU Radio that neither of those tools offers. Used responsibly and within the law, it's one of the best ways to actually understand radio instead of just clicking "replay" on someone else's captured signal.
Related Guides
- RF and Antenna Fundamentals for Makers: Dipoles, Ground Planes, SWR, and Feedline Loss
- Sub-GHz Signal Capture and Replay on Flipper Zero
- Flipper Zero SubGHz: Reading, Recording, and Replaying RF Signals
- Sub-GHz Replay: Fixed Code vs Rolling Code Explained
- SDR vs DSP Pocket Radios: Where the ATS Mini V4 Fits In
- ATS Mini V4: Flashing Custom Firmware From Your Phone (ats-mini vs H.J. Berndt)
- Fixing the ATS Mini Donut WB Loop Antenna (Anti-Series Wiring Defect)
- H.J. Berndt Firmware for the ATS Mini V4: The In-Depth Guide