BruceDevices/firmware

Features

• Penetration Testing Firmware - Provides a dedicated ESP32 firmware for portable penetration testing with multi-protocol attack support.
• Embedded Scripting Runtimes - Runs custom JavaScript scripts to orchestrate infrared, radio, serial, and file operations.
• Multi-Protocol Wireless Attack Suites - Runs WiFi deauthentication, handshake capture, evil portal, Bluetooth attacks, and Sub-GHz jamming from a single device.
• On-Device - Creates, renames, copies, deletes, and reads files stored on SD card or LittleFS partitions.
• Peripheral State Restoration - Restores hardware peripheral configurations and WiFi AP settings from non-volatile memory on every boot.
• JavaScript Scripting Environments - Interprets JavaScript scripts with hardware API bindings for automated penetration testing.
• Embedded Scripting Engines - Runs custom JavaScript programs directly on embedded hardware for automation.
• BadUSB Payloads - Simulates a USB keyboard to inject keystrokes and run DuckyScript payloads on target computers.
• Serial Device Communication - Sends text commands over a serial connection to trigger infrared, sub-GHz, music, and system operations.
• HID Emulations - Emulates USB and Bluetooth HID devices to inject keystrokes for automated payload delivery.
• RFID Tag Emulation - Emulates programmable RFID tags to interact with readers for security testing.
• RFID Tag Reading - Reads data from 125kHz and 13.56MHz RFID tags using on-board modules.
• Dual-Storage File Systems - Persists configuration, scripts, and logs across both internal flash and external SD card with automatic mounting.
• SPI Bus Interfaces - Connects radio modules via SPI bus for wireless communication.
• Standalone RFID Operations - Executes standalone RFID reading, cloning, and writing operations directly on the device.
• Standard USB Device Emulations - Emulates USB HID devices to enable keystroke injection on hosts without native USB support.
• LLMNR/NBT-NS/mDNS Poisoners - Responds to LLMNR and NBT-NS queries with spoofed addresses to capture authentication credentials.
• Unified Multi-Protocol Radio Drivers - Unifies WiFi, BLE, LoRa, Sub-GHz, RFID, and IR under a single send/receive/scan interface with hardware-specific backends.
• Wireless Deauthentication Tools - Sends management frames to disconnect wireless clients from access points.
• UART-Based - Parses text commands over UART for headless operation, scripting integration, and external control of all firmware modules.
• Web-Based Remote Clients - Provides a web interface to manage files, view the screen, run serial commands, and execute IR, RF, and BadUSB payloads.
• Rogue Access Points - Deploys cloned or custom access points with captive portals to capture credentials.
• Embedded - Provides a custom JavaScript interpreter with hardware bindings for orchestrating multi-protocol attacks on an ESP32.
• Wireless Network Attacks - Deploys deauthentication, beacon spam, evil portal, and ARP spoofing against wireless networks.
• Man-in-the-Middle Frameworks - Sends forged ARP replies to enable man-in-the-middle traffic interception.
• Multi-Vector WiFi Attack Suites - Launches combined deauthentication, handshake capture, and beacon spam attacks to overwhelm WiFi networks.
• Network Probe Response Spoofing - Impersonates networks by responding to probe requests and deploying a captive portal.
• USB Keystroke Injection Scripts - Emulates USB and Bluetooth keyboards to inject pre-scripted keystrokes for automated payload delivery.
• Wireless Attack Tools - Integrates WiFi, BLE, and sub-GHz attack tools into a unified wireless testing platform.
• Handshake Captures - Captures and cracks WPA/WPA2 handshakes using a wordlist to recover network passwords.
• Headless Controllers - Controls the device without a screen or buttons by issuing serial commands to connect to WiFi and launch a web interface.
• Non-Volatile Device Configuration Persistence - Stores settings to non-volatile memory to survive reboots and firmware swaps, restoring state on each boot.
• Remote Control Interfaces - Controls units without displays or buttons through a web interface or serial connection.
• Web-Based Control Panels - Starts a web server that provides a full graphical interface for control over WiFi or via an access point.
• Screen Mirroring Controllers - Displays the device's current screen in a browser and allows virtual button presses for navigation and selection.
• Embedded-Device Remote Desktop Protocols - Streams the device's frame buffer to a browser and relays button inputs as serial-like commands for headless control.
• Wardriving Loggers - Logs GPS coordinates alongside detected Wi-Fi access points for geospatial network mapping.
• Wireless Protocols - Implements 2.4 GHz protocol jamming to disrupt WiFi and Bluetooth communications.
• Remote File Managers - Uploads, downloads, renames, deletes, and creates files and folders on internal storage and SD card.
• Penetration Testing Tool Configurations - Configures BadUSB keyboard layout, keystroke delay, output display, BLE API toggle, and stores WiFi AP credentials.
• On-Device App Stores - Provides an on-device app store to download and install extension modules over WiFi.
• Device Startup and Time Synchronization - Adjusts startup behavior, splash screen, WiFi auto-connect, and time synchronization via NTP.
• Bluetooth Attack Execution - Scans for Bluetooth devices, sends spam notifications, and simulates a keyboard to execute attacks.
• Bluetooth Pairing Notification Spam - Floods nearby devices with fake pairing notifications across multiple platforms or simulates tracking beacons.
• Wi-Fi Wardriving Loggers - Records detected Wi-Fi access points with GPS coordinates into a CSV file for mapping platform upload.
• Radio Frequency Transceivers - Configures external radio modules to transmit and receive signals across adjustable frequency bands.
• Sub-GHz Transceivers - Transmits and receives signals on sub-GHz frequencies to interact with wireless sensors and remotes.
• Jamming Transmitters - Transmits interference signals on selected frequencies to disrupt radio communications within range.
• Sub-GHz Attack Transmitters - Scans, copies, replays, and jams radio frequency signals in the sub-1 GHz band to disrupt devices.
• Signal Replayers - Captures raw or modulated radio signals and retransmits them for reuse of previously seen transmissions.
• Signal Scanners and Jammers - Scans for 2.4 GHz signals and transmits jamming signals to disrupt them using an NRF24 module.
• RFID Tag Writing - Writes data to 13.56MHz tags, supporting cloning, NDEF records, and erasing.
• ARP Cache Poisoning - Floods networks with spoofed ARP replies to disrupt communication and enable man-in-the-middle attacks.
• BLE Device Discovery and Reporting - Scans for nearby Bluetooth Low Energy devices and reports their identifiers for reconnaissance.
• LoRa Messaging Integrations - Exchanges text messages between devices over Long Range radio using supported hardware modules.
• Network Host Discoverers - Identifies active hosts on a network using ARP scanning.
• Scan-and-Attack Workflows - Discovers live hosts and then launches deauthentication, ARP spoofing, and SSH attacks against them.
• WiFi Access Point Hosting - Hosts a WiFi network for client connections and serves as a platform for other attacks.
• Default Credential Lookups - Checks a database of factory-default router credentials and attempts login.
• Bluetooth Keystroke Injection - Emulates a Bluetooth keyboard to inject keystrokes and execute scripts on previously paired devices.
• 2.4 GHz Jammers - Ships a 2.4 GHz jamming capability using an NRF24 module to disrupt WiFi and Bluetooth communications.
• Hardware-Input-Driven Menu Systems - Renders a nested menu system navigated by physical buttons, encoder, or keyboard with theme support and status bar.

Star history