Complicated multipath trajectories of waves in disordered cavities cause object localization to be very challenging with traditional ray-tracing approaches. Yet it is known that information about the object position is encoded in the Green's function. After a calibration step, traditional time-reversal approaches retrieve a source's location from a broadband impulse response measurement. Here, we show that a nonemitting object's scattering contribution to a reverberant medium suffices to localize the object. We demonstrate our finding in the microwave domain. Then, we further simplify the scheme by replacing the temporal degrees of freedom (d.o.f.) of the broadband measurement with spatial d.o.f. obtained from wave front shaping. A simple electronically reconfigurable reflectarray inside the cavity dynamically modulates parts of the cavity boundaries, thereby providing spatial d.o.f. The demonstrated ability to localize multiple noncooperative objects with a single-frequency scheme may have important applications for sensors in smart homes.