Scout Lite ESP32-C5 wardriving module for Flipper Zero

Best Flipper Zero ESP32-C5 Wardriving Module 2026: Scout Lite vs koko C5 Adapter vs Apex 5 vs Rabbit-Labs

PINGEQUA Lab · Buyer's guide · 8 min read · Updated 2026-07-17

2026 gave the Flipper Zero a whole shelf of ESP32-C5 wardriving options — JustCallMeKoKo's C5 Adapter, the Apex 5, the Rabbit-Labs multi-board, and lean modules like Scout Lite. They all use the same dual-band chip. What separates them is everything around it.

Quick answerEvery one of these runs the same ESP32-C5 dual-band Wi-Fi 6 radio, so they all see 2.4 and 5 GHz. They split into three archetypes. DIY-reference: JustCallMeKoKo's Marauder C5 Adapter (~$30–40 + a DevKit you flash yourself) — cheapest parts, most flexible, from the creator of Marauder. Do-everything: the Apex 5 ($99) and Rabbit-Labs boards add sub-GHz + NRF24. Integrated-lean: Scout Lite ($64.98) is C5 + a hard-wired GPS, pre-flashed, nothing else. Pick by how much you want to build and carry: tinker → koko; one board for everything → Apex 5/Rabbit-Labs; grab-and-go wardriving → Scout Lite.

The 2026 field of C5 Flipper modules

Until recently, seeing 5 GHz on a Flipper meant a second radio. The ESP32-C5 — Espressif's first dual-band 2.4/5 GHz Wi-Fi 6 chip — changed that, and a cluster of Flipper options built on it arrived in 2026:

  • JustCallMeKoKo Marauder C5 Adapter — from the creator of ESP32 Marauder. You plug an ESP32-C5-DevKitC-1 (≈$15, separate) into the adapter and flash Marauder yourself. 3D-printed case, microSD slot, dual UART headers, and an optional velcro GPS patch antenna for wardriving. Adapter ~$30–40.
  • ESP32 Marauder 5G "Apex 5" (Honey Honey Team) — C5 + dual-band sub-GHz (433 & 868 MHz) + NRF24 + GPS, listed at $99. "Five functions on one board."
  • Rabbit-Labs Flipper Zero ESP32-C5 multi-board — C5 + a TI CC1101 sub-GHz transceiver + GPS + microSD + USB-C.
  • PINGEQUA Scout Lite — C5 + Quectel L86-M33 GPS + microSD, pre-flashed Marauder. No sub-GHz, no NRF24. $64.98.

(Others exist too — M5Shark sells a C5 Marauder board, for instance.) The chip is a constant. The real questions are: how much do you want to assemble, how many radios do you actually need, and how much are you carrying?

Side by side

Scout Lite koko C5 Adapter Apex 5 Rabbit-Labs C5
Wi-Fi ESP32-C5 ESP32-C5 (DevKit) ESP32-C5 ESP32-C5
GPS Onboard L86-M33, hard-wired Velcro patch-antenna option Yes Yes
Sub-GHz None None Two (433+868) CC1101
NRF24 None None Yes Not listed
Assembly Pre-flashed, seat & go Supply + flash a DevKit Pre-built Pre-built
Price $64.98 ~$30–40 + ~$15 DevKit $99 Not published
Best for Grab-and-go wardriving Tinkerers / DIY All-in-one pentest Multi-tool

Specs per each vendor's listing plus CNX Software coverage (Feb & Mar 2026) and JustCallMeKoKo's product page; prices as listed and subject to change. Rabbit-Labs pricing was not published at the time of writing.

Three honest ways to get there

DIY-reference — JustCallMeKoKo C5 Adapter

This one comes from the author of ESP32 Marauder himself, so firmware support is first-class and the community around it is deep. It's the cheapest way into C5 wardriving if you're happy to buy a DevKit separately, flash it (about five minutes over USB-C), and velcro on the GPS antenna. You get maximum flexibility — swap DevKits, daisy-chain modules — in exchange for doing the assembly yourself. If you like building your kit, this is the enthusiast's pick.

Do-everything — Apex 5 & Rabbit-Labs

These add sub-GHz radios (and, on the Apex 5, an NRF24) so a single board covers wardriving and sub-GHz replay / NRF24 work. That breadth is real, and if you want one module for everything it's genuinely the strength here. The trade to weigh: for wardriving specifically those extra radios aren't used, so you're carrying capability you won't tap for this particular job (more on the RF side below).

Integrated-lean — Scout Lite

Scout Lite takes the opposite bet from the do-everything boards, and a different one from the DIY route: it integrates a dedicated L86-M33 GPS on the board, hard-wired, ships pre-flashed, and leaves off the sub-GHz and NRF24 entirely. No DevKit to buy or flash, no velcro antenna, no radios you won't use while wardriving. You pay more than a bare adapter, less than a loaded module — for a board that just works, out of the box, for one job.

Buying tip (applies to all of these): hardware revisions and firmware move fast on every board here. Whichever you choose, confirm the current revision supports the exact feature you care about — wardrive, GPS logging, 5 GHz — before you order.

Why "fewer radios" matters for wardriving

Wardriving is enumeration — scan every 2.4 and 5 GHz access point, tag it with GPS, log it. It uses the Wi-Fi radio and the GPS, and nothing else. So on a do-everything board the extra radios are simply idle for this job, and there's a real engineering reason a leaner board can be an advantage here: an NRF24 operates in the same 2.4 GHz band your scanner is enumerating, and sub-GHz transceivers sit near a GPS front-end that tracks at −165 dBm. A board carrying only the Wi-Fi radio and GPS sidesteps both — which is what both the koko adapter and Scout Lite do; Scout Lite just also spares you the assembly. The single-chip story is in the ESP32-C5 breakdown.

So which one?

  • You enjoy building your own kit, or already own an ESP32-C5 DevKit → the JustCallMeKoKo C5 Adapter is the flexible, community-favorite DIY route.
  • You want one board for wardriving and sub-GHz / NRF24 work → a do-everything module (Apex 5 or Rabbit-Labs) genuinely does more.
  • You want to wardrive with GPS built in, zero assembly, for less than a loaded board → Scout Lite.

New to the workflow entirely? Start with the complete wardriving guide, then come back to pick hardware.

Scout Lite — grab-and-go C5 wardriving

ESP32-C5 dual-band Wi-Fi 6 + onboard L86-M33 GPS + microSD, pre-flashed Marauder. No DevKit to flash, no extra radios. $64.98.

Get Scout Lite Wardriving guide

FAQ

Do all these modules use the same chip?
Yes — Scout Lite, the JustCallMeKoKo C5 Adapter (with a DevKit), the Apex 5 and the Rabbit-Labs board all use the ESP32-C5 dual-band Wi-Fi 6 radio, so all can scan 2.4 and 5 GHz. They differ in what else is on the board and how much you assemble.
Is Scout Lite or the koko C5 Adapter cheaper?
The koko adapter is cheaper on parts (~$30–40 plus a ≈$15 ESP32-C5 DevKit) but you supply and flash the DevKit and add a GPS antenna. Scout Lite is $64.98 with the GPS integrated and hard-wired and Marauder pre-flashed — you pay more for zero assembly and a built-in dedicated GPS.
Is Scout Lite cheaper than the Apex 5?
Yes — $64.98 versus the Apex 5's $99. Scout Lite leaves out the sub-GHz radios and NRF24 that a wardriving workflow doesn't use.
Does the Apex 5 support wardriving?
Yes — the Apex 5 runs ESP32 Marauder and supports WarDrive on current revisions. As with any of these boards, it's worth confirming the current hardware/firmware revision when you order so you get the feature set you expect.
Why does removing radios help wardriving?
An NRF24 sits in the same 2.4 GHz band your scanner enumerates, and sub-GHz radios add noise near a sensitive GPS front-end. A board with just the Wi-Fi radio and GPS has fewer things to interfere — cleaner by design.

Sources: JustCallMeKoKo — Marauder C5 Adapter product page (justcallmekokollc.com) and ESP32Marauder wiki "ESP32-C5-DevKitC-1" (github.com, 2026); CNX Software — Apex 5 module (2026-02-11), Rabbit-Labs ESP32-C5 multi-board (2026-03-16), ESP32-C5-DevKitC-1 ~$15 (2025-04); Espressif ESP32-C5 dual-band Wi-Fi 6 (2025). Scout Lite specs and price per PINGEQUA listing (2026-07). Prices subject to change.

For authorized network research, security auditing and electronics education only. Only scan or assess networks you own or are explicitly permitted to test. Product names and specifications belong to their respective owners and are referenced for comparison; no affiliation or endorsement is implied.

Back to blog