Best Flipper Zero ESP32-C5 Wardriving Module 2026: Scout Lite vs koko C5 Adapter vs Apex 5 vs Rabbit-Labs - PINGEQUA

Scout Lite vs Apex 5 vs koko C5: GPS, SD and 5 GHz Differences

PINGEQUA Lab · Buyer's guide · 8 min read · Updated 2026-08-03

2026 gave the Flipper Zero a whole shelf of ESP32-C5 wardriving options — JustCallMeKoKo's C5 Adapter, the Apex 5, the Rabbit-Labs multi-board, and lean modules like Scout Lite. They all use the same dual-band chip. What separates them is everything around it.

Quick answerEvery one of these runs the same ESP32-C5 dual-band Wi-Fi 6 radio, so they all see 2.4 and 5 GHz. They split into three archetypes. DIY-reference: JustCallMeKoKo's Marauder C5 Adapter (~$30–40 + a DevKit you flash yourself) — cheapest parts, most flexible, from the creator of Marauder. Do-everything: the Apex 5 ($99) and Rabbit-Labs boards add sub-GHz + NRF24. Integrated-lean: Scout Lite ($64.98) is C5 + a hard-wired GPS, pre-flashed, nothing else. Pick by how much you want to build and carry: tinker → koko; one board for everything → Apex 5/Rabbit-Labs; grab-and-go wardriving → Scout Lite.

The 2026 field of C5 Flipper modules

Until recently, seeing 5 GHz on a Flipper meant a second radio. The ESP32-C5 — Espressif's first dual-band 2.4/5 GHz Wi-Fi 6 chip (mass production 2025) — changed that, and a cluster of Flipper options built on it arrived in 2026:

  • JustCallMeKoKo Marauder C5 Adapter — from the creator of ESP32 Marauder. You plug an ESP32-C5-DevKitC-1 (≈$15, separate) into the adapter and flash Marauder yourself. 3D-printed case, microSD slot, dual UART headers, and an optional velcro GPS patch antenna for wardriving. Adapter ~$30–40.
  • ESP32 Marauder 5G "Apex 5" (Honey Honey Team) — C5 + dual-band sub-GHz (433 & 868 MHz) + NRF24 + GPS, listed at $99. "Five functions on one board."
  • Rabbit-Labs Flipper Zero ESP32-C5 multi-board — C5 + a TI CC1101 sub-GHz transceiver + GPS + microSD + USB-C.
  • PINGEQUA Scout Lite — C5 + Quectel L86-M33 GPS + microSD, pre-flashed Marauder. No sub-GHz, no NRF24. $64.98.

(Others exist too — M5Shark sells a C5 Marauder board, for instance.) The chip is a constant. The real questions are: how much do you want to assemble, how many radios do you actually need, and how much are you carrying?

Side by side

Scout Lite koko C5 Adapter Apex 5 Rabbit-Labs C5
Wi-Fi ESP32-C5 ESP32-C5 (DevKit) ESP32-C5 ESP32-C5
GPS Onboard L86-M33, hard-wired Velcro patch-antenna option Yes Yes
GPS UART (Flipper) Pre-wired to GPIO 15/16 You map GPIO 15/16 Not published Not published
Sub-GHz None None Two (433+868) CC1101
NRF24 None None Yes Not listed
WiGLE output WigleWifi CSV WigleWifi CSV WigleWifi CSV WigleWifi CSV
Assembly Pre-flashed, seat & go Supply + flash a DevKit Pre-built Pre-built
Price $64.98 ~$30–40 + ~$15 DevKit $99 Not published
Best for Grab-and-go wardriving Tinkerers / DIY All-in-one pentest Multi-tool

Specs per each vendor's listing plus CNX Software coverage (Feb & Mar 2026) and JustCallMeKoKo's product page; prices as listed and subject to change. Rabbit-Labs pricing was not published at the time of writing.

Three honest ways to get there

DIY-reference — JustCallMeKoKo C5 Adapter

This one comes from the author of ESP32 Marauder himself, so firmware support is first-class and the community around it is deep. It's the cheapest way into C5 wardriving if you're happy to buy a DevKit separately, flash it (about five minutes over USB-C), and velcro on the GPS antenna. You get maximum flexibility — swap DevKits, daisy-chain modules — in exchange for doing the assembly yourself. If you like building your kit, this is the enthusiast's pick.

Do-everything — Apex 5 & Rabbit-Labs

These add sub-GHz radios (and, on the Apex 5, an NRF24) so a single board covers wardriving and sub-GHz replay / NRF24 work. That breadth is real, and if you want one module for everything it's genuinely the strength here. The trade to weigh: for wardriving specifically those extra radios aren't used, so you're carrying capability you won't tap for this particular job (more on the RF side below).

Integrated-lean — Scout Lite

Scout Lite takes the opposite bet from the do-everything boards, and a different one from the DIY route: it integrates a dedicated L86-M33 GPS on the board, hard-wired, ships pre-flashed, and leaves off the sub-GHz and NRF24 entirely. No DevKit to buy or flash, no velcro antenna, no radios you won't use while wardriving. You pay more than a bare adapter, less than a loaded module — for a board that just works, out of the box, for one job.

Buying tip (applies to all of these): hardware revisions and firmware move fast on every board here. Whichever you choose, confirm the current revision supports the exact feature you care about — wardrive, GPS logging, 5 GHz — before you order.

Why "fewer radios" matters for wardriving

Wardriving is enumeration — scan every 2.4 and 5 GHz access point, tag it with GPS, log it. It uses the Wi-Fi radio and the GPS, and nothing else. So on a do-everything board the extra radios are simply idle for this job, and there's a real engineering reason a leaner board can be an advantage here: an NRF24 operates in the same 2.4 GHz band your scanner is enumerating, and sub-GHz transceivers sit near a GPS front-end that tracks at −165 dBm. A board carrying only the Wi-Fi radio and GPS sidesteps both — which is what both the koko adapter and Scout Lite do; Scout Lite just also spares you the assembly. The single-chip story is in the ESP32-C5 breakdown, and the GPS-pin conflict a hard-wired board removes is walked through in the GPIO 15/16 vs 13/14 UART fix.

So which one?

  • You enjoy building your own kit, or already own an ESP32-C5 DevKit → the JustCallMeKoKo C5 Adapter is the flexible, community-favorite DIY route.
  • You want one board for wardriving and sub-GHz / NRF24 work → a do-everything module (Apex 5 or Rabbit-Labs) genuinely does more.
  • You want to wardrive with GPS built in, zero assembly, for less than a loaded board → Scout Lite.

New to the workflow entirely? Start with the complete wardriving guide, then come back to pick hardware. Already wardriving and tired of pulling the microSD? Scout Lite's C5 is the same radio that can push logs to WiGLE from the board — see ESP32 Marauder WiGLE auto-upload.

SigRoam is a Flipper app, not ESP32 firmware. Scout Lite still ships pre-flashed with ESP32 Marauder — leave that image on the board. For a dedicated live dashboard, install SigRoam on the Flipper: copy sigroam-0.3.fap from SigRoam v0.3 to SD Card/apps/GPIO/. Do not flash SigRoam onto the ESP32. Marauder still writes the WigleWifi CSV to the Scout Lite onboard microSD (not the Flipper card). A dedicated scanner firmware is in development; it is not in the flasher. Shipping units stay on Marauder.

Scout Lite — grab-and-go C5 wardriving

ESP32-C5 dual-band Wi-Fi 6 + onboard L86-M33 GPS + microSD, pre-flashed Marauder. No DevKit to flash, no extra radios. $64.98.

Get Scout Lite Wardriving guide

FAQ

Do all these modules use the same chip?
Yes — Scout Lite, the JustCallMeKoKo C5 Adapter (with a DevKit), the Apex 5 and the Rabbit-Labs board all use the ESP32-C5 dual-band Wi-Fi 6 radio, so all can scan 2.4 and 5 GHz. They differ in what else is on the board and how much you assemble.
Is Scout Lite or the koko C5 Adapter cheaper?
The koko adapter is cheaper on parts (~$30–40 plus a ≈$15 ESP32-C5 DevKit) but you supply and flash the DevKit and add a GPS antenna. Scout Lite is $64.98 with the GPS integrated and hard-wired and Marauder pre-flashed — you pay more for zero assembly and a built-in dedicated GPS.
Is Scout Lite cheaper than the Apex 5?
Yes — $64.98 versus the Apex 5's $99. Scout Lite leaves out the sub-GHz radios and NRF24 that a wardriving workflow doesn't use.
Does the Apex 5 support wardriving?
Yes — the Apex 5 runs ESP32 Marauder and supports WarDrive on current revisions. As with any of these boards, it's worth confirming the current hardware/firmware revision when you order so you get the feature set you expect.
Why does removing radios help wardriving?
An NRF24 sits in the same 2.4 GHz band your scanner enumerates, and sub-GHz radios add noise near a sensitive GPS front-end. A board with just the Wi-Fi radio and GPS has fewer things to interfere — cleaner by design.
Is the ESP32-C5 good for wardriving?
Yes — in 2026 it's the best-fit chip for it. The ESP32-C5 is a single dual-band 2.4/5 GHz Wi-Fi 6 radio, so it enumerates both 2.4 and 5 GHz access points in one scan, catching the 5 GHz networks a 2.4-only board misses. On ESP32 Marauder its 5 GHz is scan/enumeration only, which is exactly what wardriving is — you log networks, you don't join them. Every module compared here is built on it.
Scout Lite vs Apex 5 — which is better for wardriving?
Both run the same ESP32-C5 dual-band radio, so they see the same networks. For wardriving specifically, Scout Lite ($64.98) is the tighter fit: C5 + a hard-wired GPS, pre-flashed, nothing else. The Apex 5 ($99) adds sub-GHz radios and an NRF24 — real capability, but idle while you wardrive, and the NRF24 shares the 2.4 GHz band you're scanning. Pick the Apex 5 if you want one board for wardriving and sub-GHz / NRF24 work; pick Scout Lite for grab-and-go wardriving at a lower price.
Does Scout Lite need a separate GPS module?
No. Scout Lite has a Quectel L86-M33 GPS hard-wired to the ESP32-C5 onboard and ships pre-flashed with Marauder, so it logs GPS-tagged networks the moment you power on. There's no discrete GPS to wire and no GPIO 15/16 vs 13/14 UART mapping to fix — the conflict that trips up DIY rigs is engineered out.

Sources: JustCallMeKoKo — Marauder C5 Adapter product page (justcallmekokollc.com) and ESP32Marauder wiki "ESP32-C5-DevKitC-1" (github.com, 2026); CNX Software — Apex 5 module (2026-02-11), Rabbit-Labs ESP32-C5 multi-board (2026-03-16), ESP32-C5-DevKitC-1 ~$15 (2025-04); Espressif ESP32-C5 dual-band Wi-Fi 6 (2025). Scout Lite specs and price per PINGEQUA listing (2026-07). Prices subject to change.

For authorized network research, security auditing and electronics education only. Only scan or assess networks you own or are explicitly permitted to test. Product names and specifications belong to their respective owners and are referenced for comparison; no affiliation or endorsement is implied.

Back to blog