Flipper Zero Evil Portal Setup Guide (2026): ESP32-S2 Wi-Fi Devboard, Step by Step

PINGEQUA Lab · Flipper Zero Wi-Fi · 7 min read · Updated 2026-08-01

Authorized use only. An Evil Portal is a captive-portal demonstration tool. Run it only on networks and devices you own or have explicit written permission to test — your own lab, or a security-awareness exercise with consent. Capturing credentials from people without authorization is illegal in most jurisdictions.

The Evil Portal is the classic demo of why open Wi-Fi plus a convincing login page is dangerous. Here's how to set one up on a Flipper Zero with an ESP32-S2 Devboard — for authorized testing and awareness training.

Quick answer To set up an Evil Portal on a Flipper Zero you need three things: the Flipper Zero, an ESP32-S2 Wi-Fi Devboard flashed with Marauder (or the dedicated Evil Portal firmware), and a captive-portal HTML file on the Flipper's SD card. The Devboard broadcasts an open Wi-Fi access point; when someone connects, they're served your portal page, and anything they submit is logged to the SD card. It all runs on 2.4 GHz, so a plain ESP32-S2 board is all the hardware you need — no 5 GHz board, no GPS. A pre-flashed board like the PINGEQUA Wi-Fi Devboard (Black) ($29.99, free shipping) skips the firmware-install step so you go straight to building the portal.

What an Evil Portal actually does

An Evil Portal turns your Wi-Fi Devboard into an open access point. When a device joins, the OS captive-portal check is redirected to a page you control — often a clone of a familiar Wi-Fi login screen. Whatever the user types is sent back to the Flipper and written to the SD card. That's why it's a staple of security-awareness training: it shows, concretely, how an open SSID plus a plausible login form harvests credentials.

Two common ways to run it on the Flipper:

  • ESP32 Marauder has a built-in Evil Portal mode.
  • The dedicated flipper-zero-evil-portal app ships pre-compiled .bin files for the official Devboard, so you can flash from a website instead of the Arduino IDE.

Both target the same ESP32-S2 Devboard hardware, so the board you buy works with either. Prefer a dual-band board? The 5Ghost (BW16) has Evil Portal built in alongside its Wi-Fi and BLE tools — see our full 5Ghost WiFi Lab feature guide.

What you need

  • Flipper Zero (any current firmware — Official, Momentum, or Unleashed)
  • ESP32-S2 Wi-Fi Devboard, flashed with Marauder or the Evil Portal firmware
  • A microSD card in the Flipper
  • A portal HTML file (an index.html; sample portals are in the app's repo)
  • Desktop Chrome or Edge (only if you still need to flash the board)

Don't have a Devboard yet? — PINGEQUA Wi-Fi Devboard (Black)

ESP32-S2, official Devboard pinout, pre-flashed with Marauder (Evil Portal mode ready). Independent LDO + storage cap keeps it powered during AP broadcast. $29.99, free shipping, ~3 days from a USA warehouse.

Check price & availability → Flash at flash.pingequa.com →

Step-by-step setup

  1. Flash the board (skip if pre-flashed). Open flash.pingequa.com in desktop Chrome/Edge, plug the Devboard in over USB-C, let it auto-detect, choose Marauder, and flash. No esptool, no Python.
  2. Put your portal on the SD card. Copy your index.html portal file into the Evil Portal app's data folder on the Flipper's SD card (for the dedicated app, that's apps_data/evil_portal/; sample portals are in the app repo).
  3. Seat the Devboard on the Flipper's GPIO header and power on.
  4. Open the app. Launch Evil Portal (or Marauder → Evil Portal) on the Flipper, select your portal, and start the access point.
  5. Test with your own device. On a phone you own, join the open AP, confirm the portal appears, and submit test data. Check that the entry is logged on the SD card.
  6. Stop the AP when done. Review the log, then delete captured test data.

Troubleshooting

  • Board not detected / "no module": use a USB-C data cable (not charge-only), and confirm the board is seated on the correct GPIO pins. Re-flash via the web flasher if the firmware is missing.
  • AP appears but no portal page: the index.html isn't in the expected folder, or the filename is wrong. Recheck the SD card path.
  • Board resets during broadcast: usually a power issue — a board with its own LDO + storage capacitor (like the PINGEQUA black board) rides out the current spikes better than a bare board.

FAQ

Is running an Evil Portal legal?
Only on networks and devices you own or have explicit written permission to test. Using it to capture other people's credentials is illegal in most places. Treat it as a lab and training tool.
Do I need a special board for Evil Portal?
No — any ESP32-S2 Wi-Fi Devboard with the official pinout works, using either Marauder's Evil Portal mode or the dedicated Evil Portal app. A pre-flashed board saves the firmware-install step.
Does Evil Portal need 5 GHz or GPS?
No. It runs on 2.4 GHz and doesn't use GPS. A basic ESP32-S2 board is all you need — no C5 5 GHz board, no GPS module.
Marauder Evil Portal or the dedicated app — which should I use?
If your board is already on Marauder, its built-in Evil Portal mode is the quickest start. The dedicated flipper-zero-evil-portal app offers more portal-management features. Both use the same Devboard.
Where do I get portal templates?
Sample portals ship in the Evil Portal app's GitHub repo. Only use them for authorized testing and awareness training.

Sources & further reading: Evil Portal app — bigbrodude6119/flipper-zero-evil-portal; ESP32 Marauder — GitHub; web flasher — flash.pingequa.com. Verified August 2026.

For authorized security testing and education only. Use only on systems you own or are explicitly permitted to test; capturing others' data without consent is illegal in most jurisdictions. "Flipper Zero" is referenced for compatibility; PINGEQUA is independent and not affiliated with or endorsed by Flipper Devices.

Retour au blog