Flipper & Cardputer 5 GHz Wi-Fi in 2026: Why 2.4 GHz-Only Boards Fall Short

PINGEQUA Lab · Wi-Fi research · 8 min read · Updated 2026-07-11

Half of modern Wi-Fi lives on 5 GHz — but almost every Flipper Zero and Cardputer Wi-Fi tool can only see the 2.4 GHz half. That's not a firmware limitation you can patch around. It's the radio on the chip. Here's why the 2.4 GHz-only boards fall short, which chips can actually reach 5 GHz, and what it takes to close the gap.

Wi-Fi moved to 5 GHz. Your 2.4 GHz-only tool didn't.

For years, routers have been steering traffic onto 5 GHz. It's faster, the channels are far wider, and — critically for anyone doing Wi-Fi research — it's much less crowded than the three usable channels on 2.4 GHz. Plenty of modern access points run their main SSID on 5 GHz, and some networks put their fastest or most sensitive clients there on purpose.

A 2.4 GHz-only tool is simply deaf to that traffic. It can't list those access points, can't map their channels, and can't attempt a handshake against them — because it never hears them in the first place. If the network you care about is on 5 GHz, no amount of scanning on 2.4 GHz will surface it.

Neither the Flipper nor the Cardputer has Wi-Fi of its own

This trips people up, so it's worth stating plainly:

• The Flipper Zero has no built-in Wi-Fi radio at all. Every Wi-Fi capability comes from an add-on board docked on the GPIO header — most commonly an ESP32 board running the excellent ESP32 Marauder firmware.
• The M5Stack Cardputer does have Wi-Fi — but its main controller is an ESP32-S3, which is 2.4 GHz only. So the Cardputer's on-board Wi-Fi has exactly the same ceiling.

In both cases the band you can reach is decided by the chip doing the radio work — and on the popular hardware, that chip tops out at 2.4 GHz.

The hardware map: which chips can even see 5 GHz

The whole question comes down to the silicon. Here is where the common Flipper/Cardputer Wi-Fi chips actually stand:

The pattern is clear: the entire mainstream ESP32 family that the Flipper and Cardware ecosystems are built on is 2.4 GHz only. Two parts break out of it — the brand-new ESP32-C5, and the already-shipping RTL8720DN.

What a 2.4 GHz-only board actually misses

It's not a small corner case. On a 2.4 GHz-only tool you lose:

• Every 5 GHz access point. Modern routers, mesh backhauls, and a lot of enterprise SSIDs live wholly or partly on 5 GHz — invisible to a 2.4 GHz scan.
• Channel-congestion mapping on the busy band. If you're surveying a site, seeing only 2.4 GHz gives you half the picture.
• A handshake path that actually completes. This class of radio often can't reliably hear a 2.4 GHz client's uplink frames during a WPA/WPA2 four-way handshake — a dual-band board can route capture through 5 GHz, where it lands cleanly.

If your work never leaves 2.4 GHz — a lot of IoT and consumer gear stays there — a good ESP32 board is genuinely all you need, and the Marauder is a mature, fully open-source toolkit with Bluetooth tools on top. The gap only bites when the target is on 5 GHz. If you're just starting out, it's worth reading why 2.4 GHz is usually enough for beginners before paying extra for an ESP32-C5 5 GHz board.

Getting to 5 GHz today: dual-band hardware

Because the limit is physical, the fix is physical too — you need a radio that has a 5 GHz side. For a Flipper Zero today, the practical route is a board built on the Realtek RTL8720DN (BW16), which is natively dual-band. That's the chip the 5Ghost WiFi Lab runs on. With real 5 GHz silicon in place, the software can:

• Scan and channel-map both bands, so the 5 GHz networks a 2.4-only tool misses finally show up.
• Flag PMF / WPA3 access points by reading each beacon's RSN element — the ones that are immune to deauth — so you know before you act.
• Capture a WPA/WPA2 handshake on 5 GHz, written as a standard PCAP for offline analysis (hashcat / aircrack-ng).

Looking ahead, the ESP32-C5 will likely bring dual-band to the ESP32 world the community already knows — but that's a maturing story, not a board most people are running today. If you need 5 GHz right now, dual-band hardware like the BW16 is the answer that ships.

The honest limits (true on any band)

Dual-band hardware widens what you can see — it doesn't rewrite the protocols. These hold on every tool in this category:

• WPA3-SAE can't be cracked offline — by anything. SAE (Dragonfly) is designed so a captured handshake carries no offline-crackable hash. A good tool detects WPA3 and tells you it's out of reach instead of pretending otherwise.
• PMF / WPA3 access points can't be deauthenticated. That's 802.11w working as designed — on 2.4 GHz and 5 GHz alike. The value is a tool that flags it up front.
• Mesh roaming is hard for any single-radio device. A client can roam across nodes faster than one radio keeps up; same-channel nodes are caught in a pass, cross-channel 802.11r roaming isn't.

FAQ

Sources & further reading: ESP32-C5 dual-band Wi-Fi 6 — Espressif; ESP32 is 2.4 GHz only — espboards.dev; ESP32 Marauder firmware & tools — justcallmekoko/ESP32Marauder wiki; 5Ghost WiFi Lab (open source) — github.com/pingequalab/5ghost-wifi-lab. Chipset band facts verified July 2026.

For authorized security testing, network administration, and education only. Test only networks and devices you own or have explicit written permission to test. You are responsible for compliance with all applicable laws and radio regulations (e.g. FCC Part 15 in the US, CE/RED in the EU). "Flipper Zero", "M5Stack", "Cardputer" and "ESP32 Marauder" are referenced for compatibility and comparison; PINGEQUA is independent and not affiliated with or endorsed by their respective owners.