BW16 Devboard
HW_IDFLIPPER-ZERO-DUAL-BAND-5GHZ-2-4GHZ-WIFI-DEVBOARD-PRELOADED-FIRMWARE-RTL8720DN-BW16-GPIO-MODULE-WITH-HIGH-GAIN-8DBI-EXTERNAL-ANTENNA-LONG-RANGE-IOT-NETWORK-ANALYSIS-PACKET-MONITOR-TOOL
Preparation Manifest
● Hardware Core: Dual-Band WiFi (2.4GHz & 5GHz) based on BW16 RTL8720DN.
● Key Features: Supports 5G Deauth Attack, Evil Portal (Phishing simulation), and Beacon Flood.
● Firmware Support: [Optimized for] Unleashed and Momentum.
Note: Other firmware may trigger an "Outdated App" warning; this is safe to ignore.
● Range Notice: 5GHz signals have superior speed but shorter range. Stay closer to the target for optimal results.
● Limits: Does NOT support WPA3/PMF (Protected Management Frames) or WiFi 6E/7.
Hardware & Firmware Deployment
[STEP_01] SOFTWARE INSTALLATION
Download the provided .fap file for delfyRTL.
Connect Flipper Zero to your PC/Mac via qFlipper.
Navigate to: SD Card → apps → GPIO.
Drag and drop the .fap file into this folder.
[STEP_02] HARDWARE CONNECTION
Power OFF your Flipper Zero.
Align the board with the GPIO headers and insert it firmly.
Power ON the device.
[STEP_03] LAUNCHING THE TOOL
Go to: Applications → GPIO → [delfyRTL].
If prompted with "App too old," select [Run Anyway]. The board is pre-calibrated for this version.
Troubleshooting Guide
⚠️ CRITICAL: DO NOT RE-FLASH THE BOARD FIRMWARE
The board comes pre-flashed with custom high-stability firmware. Re-flashing or updating the board's internal chip will break compatibility and void your warranty.
ISSUE: "App Version Outdated" Warning?
SOLUTION: This is a standard metadata mismatch in some Flipper firmware forks. As long as you are using the provided .fap, the module will perform at 100% capacity. Simply click "Run."
● Legal Disclaimer: EDUCATIONAL USE ONLY. Unauthorized WiFi jamming or phishing is illegal. The user assumes all legal responsibility. Explicit permission from the network owner is required before testing.
CC1101 Devboard
HW_IDCC1101-433-MHZ-RF-DEVELOPMENT-BOARD-FOR-FLIPPER-ZERO
Preparation Manifest
● Hardware: CC1101 Sub-GHz GPIO Module with High-Gain Antenna.
● Firmware Requirement: [CRITICAL] Unleashed Firmware (Highly Recommended) or other 3rd-party forks (Momentum/RogueMaster).
● Firmware Link: github.com/DarkFlippers/unleashed-firmware
● Note: Official firmware does not support external CC1101 modules via GPIO by default. Please update your firmware before hardware installation.
Hardware & Firmware Deployment
[STEP_01] PHYSICAL INSTALLATION
Power OFF your Flipper Zero.
Align the module pins with the top GPIO headers.
Gently but firmly insert the module and ensure the SMA antenna is tightened securely.
[STEP_02] ACTIVATE EXTERNAL MODULE
Power ON. Navigate to: Main Menu → Sub-GHz.
Go to: Radio Settings → Module.
Toggle the setting from [Internal] to [External].
The Flipper Zero will now bypass the internal chip and use the high-power CC1101 GPIO module.
[STEP_03] TESTING
Attempt to "Receive" or "Read" a known signal (e.g., a remote) to verify the significantly extended range provided by the external antenna.
Troubleshooting Guide
ISSUE: "External Module Not Found" or No Signal?
SOLUTION:
Re-check the [Module] setting in Sub-GHz Radio Settings; it must be manually set to External.
Ensure you are using Unleashed or compatible firmware.
Check the physical connection—ensure no pins are bent or misaligned.
SUPPORT THE PINGEQUA PROJECT:
Happy with the boost in range? Please take a moment to Leave Us a Review on Amazon! Your feedback is vital for our small dev team.
📩 Contact: pingltd@hotmail.com
● Disclaimer: For educational use only. Use responsibly on your own equipment.
Hydra RF 424 Cap
HW_IDM5STACK-CARDPUTER-ADV-2-IN-1-RF-MODULE
Preparation Manifest
● Compatibility: M5Stack Cardputer ADV Version ONLY.
● Performance: Optimized Power & Impedance matching for extended range.
● WebUI Login: - User: admin
Password: bruce
● Feature: Smart Auto-Switching logic enabled (No physical toggle needed).
● Warning: Using this on Cardputer v1.1 or older will result in detection failure and potential firmware errors.
Hardware & Firmware Deployment
[STEP_01] ACCESS WEBUI
On Cardputer: Files → WebUI → Connect your device to the SSID shown.
Open the IP in your browser and log in with admin/bruce.
[STEP_02] EDIT PIN CONFIGURATION
Navigate to brucePins.conf (Priority: SD Card; Alternative: LittleFS).
Update the values exactly as follows:
CC1101 Pins: cs=13, io0=5
NRF24 Pins: cs=6, io0=4
Save the file and Restart the Cardputer ADV.
[STEP_03] OPERATING THE MODULE
● For RF (CC1101 433MHz):
Menu: RF → CONFIG → RF MODULE → Select [CC1101].
● For NRF24 (2.4GHz):
Launch any NRF24 tool and ensure SPI Mode is selected in the connection settings.
Troubleshooting Guide
ISSUE: Device Reboots During "Record Raw"?
EXPLANATION: Due to the Cardputer's shared SPI bus design, high-speed data traffic may cause congestion. This is a hardware limitation, not a module defect.
SOLUTION: Removing the SD card during "Record Raw" operations can significantly reduce reboots.
ISSUE: Module Still Not Detected?
SOLUTION:
Ensure pins are edited in BOTH SD and LittleFS.
If issues persist, format the SD card, perform a "Full Erase" and reflash the latest Bruce Beta.
● Disclaimer: Educational use only. User assumes all legal liability.
Hydra RF 924 Pro
HW_IDM5STACK-CARDPUTER-ADV-HYDRA-RF-924-PRO
Preparation Manifest
● Hardware Compatibility: M5Stack Cardputer ADV Version ONLY.
● Firmware Requirement: Latest Bruce Firmware (Stable or Beta).
● WebUI Access Info: - Login User: admin
Password: bruce
● Note: Configuration is performed via the device's internal WebUI. Ensure your PC/Phone is ready to connect to the Cardputer's AP.
Hardware & Firmware Deployment
[STEP_01] ACCESS WEBUI
On Cardputer, navigate to: Files → WebUI.
Connect your PC/Phone to the WiFi SSID shown on the screen.
Open the IP address in your browser and log in.
[STEP_02] EDIT BRUCEPINS.CONF
Locate and edit brucePins.conf (Priority: SD Card; Secondary: LittleFS).
Update the following values exactly:
CC1101: cs=13, io0=5
NRF24: cs=6, io0=4
Click Save and Restart the device to apply changes.
[STEP_03] MODULE ACTIVATION
● CC1101 (915MHz US): Path: RF → Config → RF Module → Select [CC1101].
Frequency: RF → Frequency → Select [915.00 MHz].
● NRF24 (2.4GHz): Launch any NRF24 tool (e.g., Spectrum) and ensure SPI Mode is selected in settings.
Troubleshooting Guide
ISSUE: Module Still Not Detected?
SOLUTION: Ensure you have edited brucePins.conf in BOTH the SD card and LittleFS. Sometimes the system prioritizes one over the other. Double-check that cs and io0 values have no typos.
ISSUE: Software Instability or Persistent Errors?
SOLUTION:
Perform a "Full Erase" and reflash the latest Bruce Beta version.
Check the physical connection between the Hydra-RF module and the Cardputer ADV backplane pins.
NRF24 & CC1101 2-in-1 RF Devboard
HW_IDFLIPPER-ZERO-NRF24-CC1101-2-IN-1-RF-DEVBOARD
Preparation Manifest
● Compatibility: Flipper Zero (Momentum Firmware Recommended).
● Critical SPI Config: Go to: START → PROTOCOLS → GPIO PINS
Set [NRF24 SPI] to [Extra 7] (Mandatory for this module).
● Notice: Smart Auto-Switching enabled. No physical toggle needed.
● Disclaimer: For educational and research purposes only. User assumes all legal liability.
Hardware & Firmware Deployment
[STEP_01] PHYSICAL INSTALLATION
Power OFF your Flipper Zero.
Carefully insert the module into the LEFT GPIO headers.
Power ON the device.
[STEP_02] ACTIVATE CC1101 (433MHz)
Path: Sub-GHz → Radio Settings → Module → Select [External].
[STEP_03] RUN NRF24 (2.4GHz)
Navigate to Apps → GPIO and run MouseJacker or other NRF24 tools directly. (If the app fails to launch, re-verify the SPI Pin setting in Module 01).
Troubleshooting Guide
ISSUE: NRF24 Scanner / Jammer Not Working?
REASON: These specific apps use hardcoded pin definitions in their current version.
STATUS: This is a Software Limitation, NOT a hardware defect. We are collaborating with developers to push compatibility updates.
ISSUE: CC1101 "External Module Not Found"
SOLUTION:
Re-check Sub-GHz settings to ensure "External" is active.
Inspect GPIO pins for any alignment issues or debris.
NRF24 Module
HW_IDFLIPPER-ZERO-NRF24L01-SNIFFER-MOUSE-JACKER-MULTI-TOOL-DEV-BOARD-GPIO-ACCESSORY
Preparation Manifest
● Functional Specs: 2.4GHz RF Transceiver (GFSK). Used for sniffing and injecting wireless HID packets (mice/keyboards).
● Core Capabilities: - Sniffing: Capturing hardware addresses of unencrypted 2.4GHz wireless devices.
Mousejacking: Injecting BadUSB payloads into vulnerable wireless receivers (e.g., Logitech Unifying).
Scanning: 2.4GHz spectrum interference analysis.
● Required Firmware: [CRITICAL] Momentum or Unleashed. Official firmware lacks the necessary SPI drivers and GPIO apps.
● App Path: Applications → GPIO → [NRF24 Sniffer / MouseJacker].
Hardware & Firmware Deployment
● Functional Specs: 2.4GHz RF Transceiver (GFSK). Used for sniffing and injecting wireless HID packets (mice/keyboards).
● Core Capabilities: - Sniffing: Capturing hardware addresses of unencrypted 2.4GHz wireless devices.
Mousejacking: Injecting BadUSB payloads into vulnerable wireless receivers (e.g., Logitech Unifying).
Scanning: 2.4GHz spectrum interference analysis.
● Required Firmware: [CRITICAL] Momentum or Unleashed. Official firmware lacks the necessary SPI drivers and GPIO apps.
● App Path: Applications → GPIO → [NRF24 Sniffer / MouseJacker].
Troubleshooting Guide
ISSUE: "NRF24 Module Not Found" Error?
SOLUTION:
Re-confirm you are using a Third-party Firmware (Official FW will not work).
Check for bent pins or debris in the GPIO headers.
Ensure the module is getting stable 3.3V power (Pin 9).
ISSUE: Sniffer Captures Nothing?
EXPLANATION:
Encryption: Most modern "Bluetooth" mice use BLE encryption which NRF24 cannot crack. This module is effective against older 2.4GHz GFSK protocols (like early Logitech, Microsoft, or non-brand wireless mice).
Interference: High-traffic WiFi environments can drown out the sniffer. Try moving closer to the target receiver.
● Security Note: This tool is for authorized penetration testing and educational use only. Use it responsibly.
RF PACK S3
HW_IDM5STACK-STICK-S3-RF-PACK-S3-V1-BLACK
Preparation Manifest
● Host Device: M5Stack Stick S3
● Required Firmware: [CRITICAL] Bruce v1.14 or later (Latest/Beta)
● Flasher Link: bruce.computer/flasher
⚠️ WARNING: DO NOT use v1.12 or v1.13. Only v1.14+ includes the essential SPI & power patches required for hardware recognition. If your module is not detected, check the version first.
Hardware & Firmware Deployment
[STEP_01] HARDWARE CONNECTION
Align the pins and plug the RF Board firmly into the back of your M5Stack Stick S3.
[STEP_02] SOFTWARE CONFIGURATION
● For CC1101 (433MHz):
Menu: RF → CONFIG → RF MODULE → Select "CC1101 (legacy)"
● For NRF24 (2.4G):
No setup required. Simply navigate to the NRF24 menu and turn it on—it's ready to use.
Troubleshooting Guide
ISSUE: "CC1101 NOT FOUND" Error
SOLUTION: This is a typical firmware mismatch. Ensure you are using Bruce v1.14 or a newer Beta. Older versions fail to power the module via the SPI protocol.
ISSUE: Module Unresponsive or Freezing
SOLUTION:
Check if the Stick S3 physical power switch (on the side) is ON.
Re-plug the module to ensure pins are perfectly aligned and not bent.
For stable RF transmission, ensure battery levels are above 30%.
Stick RF 424
HW_IDSTICK-RF-424-MOUDLE
Preparation Manifest
● Host Device: M5Stack Cardputer / M5StickC Plus 1.1 & 2.
● Required Firmware: [CRITICAL] Latest Beta Version from bruce.computer/flasher.
● Firmware Alert: DO NOT use v1.13/v1.14 Stable. These versions have SPI bus timing issues on M5StickC/Cardputer hardware. The Beta version includes essential AXP2101 power management patches for 100% recognition.
● Hardware Manifest: RF Board, MicroSD Interface, Grove Cable.
Hardware & Firmware Deployment
[STEP_01] PHYSICAL CONNECTION
Insert the RF Board into the SD Slot of the Cardputer.
Connect the board's GPIO pins to the Cardputer using the included Grove cable.
[STEP_02] SELECT RF MODE (DUAL-STEP)
● For CC1101 (433MHz):
Toggle the physical switch on the board to [433MHz].
Menu: RF → CONFIG → RF MODULE → Select [CC1101 (Legacy)].
● For NRF24 (2.4GHz):
Toggle the physical switch on the board to [2.4GHz].
The NRF24 functions are now active and ready to use.
Troubleshooting Guide
ISSUE: "MODULE NOT FOUND" Error?
SOLUTION:
Re-verify that you are running the Latest Beta firmware.
Ensure the Grove cable is firmly seated and the physical switch is in the correct position.
ISSUE: Limited NRF24 Jammer Range?
NOTE: Due to low-power hardware design and anti-interference of 2.4GHz protocols, range is naturally limited. This is a design characteristic, not a defect.
● Advanced Config: Refer to: github.com/pr3y/Bruce/wiki/
● Disclaimer: For educational purposes only. User assumes all legal responsibility.
SWITCHBLADE RF 3-in-1 Board
HW_IDM5STACK-CARDPUTER-RF-3-IN-1-BOARD-NRF24L01-PA-LNA-CC1101-SUB-GHZ-TRANSCEIVER-WITH-MICROSD-SLOT-PLUG-PLAY-IOT-DEVELOPMENT-MODULE-FOR-SIGNAL-ANALYSIS-EDUCATION
Preparation Manifest
● Hardware Compatibility: M5Stack Cardputer v1.1 (Standard Edition).
● Interface: Dual-connection required (Internal SD Slot + Grove Port).
● Firmware: Latest Bruce Firmware (Stable or Beta).
● Physical Toggle: Integrated switch for Mode Selection (CC1101 ⇋ NRF24).
● Power Management: Features dedicated LDO and Tantalum capacitors for high-power RF transmission stability.
● Notice: Always power OFF the device before inserting the module into the SD slot.
Hardware & Firmware Deployment
[STEP_01] HARDWARE INSTALLATION
Power OFF the Cardputer.
Insert the module firmly into the Internal MicroSD slot.
Connect the module to the Cardputer's Grove port using the provided 4-pin cable.
Power ON the device.
[STEP_02] ACTIVATE CC1101 (SUB-GHZ)
Toggle the board's physical switch to the [CC1101] position.
Navigate to: RF → CONFIG → RF MODULE → Select [CC1101].
The MicroSD slot remains active for recording RAW signals.
[STEP_03] ACTIVATE NRF24 (2.4GHZ)
Toggle the board's physical switch to the [NRF24] position.
Launch any NRF24 tool (e.g., Sniffer) and ensure [SPI Mode] is selected in the app settings.
Note: Switching the physical toggle requires a software restart of the specific RF app to re-initialize the bus.
Troubleshooting Guide
ISSUE: "Module Not Found" or SPI Errors?
SOLUTION:
Re-check the Physical Switch position. The hardware cannot run both RF chips simultaneously.
Ensure the Grove Cable is fully seated; it carries essential I/O signals that the SD slot cannot provide.
Verify you are using the Latest Bruce Beta firmware for optimal SPI timing.
ISSUE: Device Reboots During High-Power Transmission?
EXPLANATION: While our board includes Tantalum caps to buffer power, the Cardputer's internal battery may struggle if below 20%.
SOLUTION: Connect an external USB-C power source for long-duration RF sniffing or jamming tasks.
● Disclaimer: Educational use only. User assumes all legal liability.
Wi-Fi Devboard
HW_IDFLIPPER-ZERO-WI-FI-DEV-BOARD-ESP32-S2-PRELOADED-MARAUDER-FIRMWARE-WIRELESS-IOT-TESTING-SHIPS-FROM-USA-IN-3-DAYS
Preparation Manifest
● Host Device: Flipper Zero
● Essential App: Wi-Fi Marauder (Pre-install via Flipper Application Catalog).
● Web Flasher: https://fzeeflasher.com (PC/Mac Recommended).
● Hardware Note: Standard GPIO interface. Always handle with power OFF to protect the ESP32 chip.
Hardware & Firmware Deployment
[STEP_01] HARDWARE INSTALLATION
Power OFF your Flipper Zero.
Align the pins and insert the board into the GPIO headers. Do not force or tilt.
Power ON and launch the [Wi-Fi Marauder] app to start.
[STEP_02] FIRMWARE UPDATE (WEB FLASHER)
Press and hold the [BOOT] button on the Wi-Fi board.
While holding [BOOT], connect the board to your PC/Mac via USB-C.
Open fzeeflasher.com → Click "Connect" → Select Firmware → Program.
After completion, press the [RESET] button on the board to initialize.
Troubleshooting Guide
ISSUE: Device Not Detected During Flashing?
SOLUTION: Ensure the [BOOT] button is held down before plugging in the USB cable. This triggers the ESP32 Bootloader mode. Try a high-quality data cable if the COM port does not appear.
ISSUE: No PC/Mac Available?
SOLUTION: Use the "ESP Flasher" app directly on Flipper Zero.
Copy flash files to microSD card.
Run [ESP Flasher] tool → Select files → Flash.
Pingequa Lab Wiki
SYSTEM_STATUS: ONLINE // SELECT_A_MODULE
Flipper Zero
GPIO & RF Modules
Cardputer
Expansion Kits
M5Stick
S3 RF Tools