PINGEQUA Hydra RF Sub-GHz cap for M5Stack Cardputer

M5Stack LoRa Cap vs PINGEQUA Hydra RF: Meshtastic Messaging or Sub-GHz Pentest? (2026)

PINGEQUA Lab · Cardputer ADV cap comparison · 8 min read · Updated 2026-07-10

Both caps live in the same Sub-GHz neighborhood and both plug into a Cardputer ADV, but one is built to talk and the other is built to test.

Quick answer The M5Stack Cap LoRa868 (and the pre-flashed Cardputer Mesh Kit) run Semtech SX1262 LoRa for Meshtastic off-grid text messaging plus GPS — it is a communication tool. PINGEQUA's Hydra RF caps pair a TI CC1101 Sub-GHz transceiver with an nRF24L01+ 2.4 GHz radio on Bruce firmware for Sub-GHz security research — capture, scanning, replay. Buy the LoRa cap to talk on a mesh; buy Hydra RF (start with Hydra RF 424) to test the RF around you. PINGEQUA does not sell LoRa or Meshtastic hardware.

Same band, different job

If you own a Cardputer ADV and you've been reading about M5Stack's LoRa cap alongside PINGEQUA's Hydra RF caps, the overlap is real: both operate in Sub-GHz ISM territory and both need a Cardputer ADV host. That's where the similarity ends.

The M5Stack Cap LoRa868 is built around a Semtech SX1262 LoRa radio and is meant to move data — specifically Meshtastic mesh text messages and GPS positions — between off-grid nodes. PINGEQUA's Hydra RF caps are built around a TI CC1101 Sub-GHz transceiver and are meant to interact with existing Sub-GHz devices already broadcasting around you — key fobs, garage remotes, sensors — for security research on Bruce firmware. One is a radio for people talking to each other. The other is a radio for analyzing what other radios are already saying.

Spec comparison

Spec M5Stack Cap LoRa868 / Mesh Kit PINGEQUA Hydra RF (424 / 824 Pro / 924 Pro)
Radio chip Semtech SX1262 (module: Stamp LoRa-1262) TI CC1101 (Sub-GHz) + nRF24L01+ (2.4 GHz), auto-switching, no physical toggle
Band 868-923 MHz, LoRa chirp spread-spectrum 433 MHz (424) / 868 MHz (824 Pro) / 915 MHz (924 Pro) — three separate SKUs, one band each
Purpose Off-grid mesh text messaging + GPS positioning (Meshtastic), remote data collection, IoT Sub-GHz security research: capture, scan, replay of everyday Sub-GHz devices, plus 2.4 GHz
Firmware Meshtastic (pre-flashed on the Cardputer Mesh Kit) Bruce firmware (requires brucePins.conf setup)
GNSS Integrated ATGM336H-6N / AT6668 (GPS/QZSS/BeiDou/Galileo/GLONASS, under 1.5 m CEP50 per M5Stack) None on Hydra RF caps
Host M5Stack Cardputer ADV via Cap-Bus (host not included) M5Stack Cardputer ADV only — not compatible with Cardputer v1.1 (host not included)

LoRa is a modulation, not the whole Sub-GHz ecosystem

The confusion usually comes from treating "Sub-GHz" as one interchangeable thing. It isn't. LoRa (the modulation SX1262 speaks) is Semtech's proprietary chirp spread-spectrum scheme, purpose-built for long-range, low-power point-to-point and mesh links between other LoRa devices. It's excellent at what it does — carrying a text message or a GPS coordinate a long way on very little power — but it only really talks to other LoRa/Meshtastic nodes.

CC1101, the chip inside Hydra RF, is a general-purpose Sub-GHz transceiver supporting OOK, ASK, 2-FSK, GFSK, and MSK modulation. That flexibility is exactly what's needed to interact with the huge installed base of everyday Sub-GHz devices — garage door remotes, key fobs, weather stations, sensors — almost none of which speak LoRa at all.

A LoRa/SX1262 radio cannot do CC1101-style capture and replay of an arbitrary OOK or FSK remote — it doesn't decode that modulation family the way CC1101 does. And a CC1101 cannot join a Meshtastic mesh — it doesn't speak LoRa's chirp spread-spectrum protocol. Same rough frequency neighborhood, incompatible radio languages, opposite jobs.

Decision guide

You want off-grid messaging, GPS, or a Meshtastic mesh

That's the M5Stack Cap LoRa868 or the pre-flashed Cardputer Mesh Kit. PINGEQUA does not sell LoRa or Meshtastic hardware — we're saying this plainly rather than pointing you somewhere we don't stock. Go to M5Stack directly for those.

You want Sub-GHz security research — capture, scanning, replay — plus 2.4 GHz

That's what Hydra RF is for. Pick the band that matches your region and your targets: see Hydra RF 424 vs 824 vs 924: which band for the ISM/SRD allocation breakdown, and what is a CC1101 cap if you're still deciding whether Sub-GHz research is what you actually need.

Quick reminder on band matching: your cap's tuned frequency has to fit both your region's legal ISM/SRD allocation and the frequency your target devices use — a 433 MHz-tuned antenna performs poorly at 915 MHz and vice versa. Frequency-region rules vary; verify your local radio regulations, this isn't legal advice.

One more thing: host compatibility

Both the M5Stack LoRa cap and every Hydra RF variant are Cardputer ADV only. Neither fits the original Cardputer v1.1.

Hydra RF caps for Cardputer ADV

CC1101 Sub-GHz + nRF24L01+ 2.4 GHz, auto-switching, Bruce firmware. Pick your band.

Hydra RF 424 (433 MHz) — $32.99 Hydra RF 824 Pro (868 MHz) — $35.99 Hydra RF 924 Pro (915 MHz) — $35.99

FAQ

Can the M5Stack LoRa cap do Sub-GHz replay like a CC1101?
No. The LoRa cap's SX1262 radio speaks Semtech's LoRa chirp spread-spectrum modulation, built for point-to-point and mesh links with other LoRa devices. It does not decode or replay the OOK/ASK/FSK signals that everyday Sub-GHz devices (remotes, sensors) use — that's what CC1101 in Hydra RF is built for.
Can Hydra RF join a Meshtastic mesh?
No. Hydra RF's CC1101 chip doesn't speak LoRa's protocol at all, so it can't join or communicate with a Meshtastic network. Meshtastic requires an SX1262 (or other LoRa) radio like the one in M5Stack's LoRa cap.
Which one should I get for wardriving?
Neither is a Wi-Fi wardriving tool on its own — that's a separate GPS/Wi-Fi path, not what either of these caps does. The LoRa cap's GNSS module is there to tag Meshtastic mesh messages with location, not to scan Wi-Fi networks.
Do I need both a LoRa cap and a Hydra RF cap?
Only if you need both jobs: off-grid Meshtastic messaging with GPS, and separately, Sub-GHz security research plus 2.4 GHz. They solve different problems and don't substitute for each other — there's no overlap in capability despite the shared frequency neighborhood.
Does either cap fit the original Cardputer v1.1?
No. Both the M5Stack Cap LoRa868 and all three Hydra RF caps (424, 824 Pro, 924 Pro) are built for the Cardputer ADV only.

Sources & further reading: M5Stack Cap LoRa868 documentation, docs.m5stack.com/en/cap/Cap_LoRa868 · CNX Software, M5Stack Cardputer Mesh Kit coverage, 2026-04-30 · shop.m5stack.com · Wikipedia, "ISM radio band" · Texas Instruments ISM-band application note SWRA048 · ETSI EN 300 220 / CEPT Recommendation 70-03 · FCC Part 15. PINGEQUA is independent and not affiliated with M5Stack, Bruce, Texas Instruments, Semtech, or Meshtastic.

Sub-GHz band use is governed by ISM/SRD allocations that vary by region (FCC Part 15 in the US, ETSI EN 300 220 / CEPT 70-03 in the EU/UK) — verify your local radio regulations before transmitting; this is not legal advice.

Back to blog