Docs Github Install Discord Donate

What is Bruce Firmware?

Bruce is meant to be a versatile ESP32 firmware that supports a ton of offensive features focusing to facilitate on Red Team operations.

It also supports m5stack products and works great with Cardputer and Sticks.

What is Bruce for?

Bruce stems from a keen observation within the community focused on devices like Flipper Zero.

While these devices offered a glimpse into the world of offensive security, there was a palpable sense that something more could be achieved without being that overpriced.

Particularly with the robust and modular hardware ecosystem provided by ESP32 Devices and M5Stack products.

📜 Is it open-source?

YES! You can check our github repo to see all our code, which is available under the AGPL license.

Free as in freedom

Contributions are welcome <3

🛠️ How can i Install it?

The easiest way to install Bruce is using the WebFlasher! which is the 'Install' button above!

But if you already use M5Launcher to manage your m5stack device, you can install it with OTA

You can also burn it directly from the m5burner tool, just search for 'Bruce' (My official builds will be uploaded by "owner" and have photos.) on the device category you want to and click on burn.

🔌 Supported Modules

Specific functions per Device, the ones not mentioned here are available to all.

Device CC1101 NRF24 Interpreter FMRadio PN532 Mic_SPM1423 BadUSB RGB Led Speaker LITE_MODE
Cardputer NS4168
StickCPlus2 Tone
StickCPlus 1.1 Tone
Core Tone
Core2
CoreSe/SE
CYD-2432S028
Lilygo T-Embed CC1101
Lilygo T-Embed
Lilygo T-Deck (and pro)

LITE_MODE: TelNet, SSH, DPWO, WireGuard, BLEScan and OpenHaystack are NOT available for M5Launcher Compatibility

🖥️ List of Features

Click on the categories below

Connect to WiFi ✅
WiFi AP ✅
Disconnect WiFi ✅
WiFi Atks ✅
Beacon Spam ✅
Target Atk ✅
Information ✅
Target Deauth ✅
EvilPortal + Deauth ✅
Deauth Flood (More than one target) ✅
Wardriving ✅
NRF24 Jammer ✅
TelNet ✅
SSH ✅
RAW Sniffer ✅
DPWO-ESP32 ✅
Evil Portal ✅
Scan Hosts ✅
Wireguard Tunneling ✅
Pwnagotchi ✅
Pwnagotchi friend ✅ 
Pwngrid spam faces & names ✅
Optional: DoScreen a very long name and face ✅ 
Optional: Flood uniq peer identifiers ✅ 
Mousejack ☐ 
BLE Scan ✅
Bad BLE - Run Ducky scripts, similar to BadUsb ✅ 
BLE Keyboard - Cardputer Only (for now) ✅
NRF24 Jammer ✅
iOS Spam ✅
Windows Spam ✅
Samsung Spam ✅
Android Spam ✅
Spam All ✅
      
Scan/Copy ✅
Custom SubGhz ✅
Spectrum ✅
Jammer Full (sends a full squared wave into output) ✅
Jammer Intermittent (sends PWM signal into output) ✅
Config ✅
RF TX Pin ✅
RF RX Pin ✅
RF Module ✅
RF433 T/R M5Stack ✅
CC1101 (Sub-Ghz) ✅
RF Frequency ✅
Replay ✅
      
Read tag ✅
Read 125kHz ✅
Clone tag ✅
Write NDEF records ✅
Write data ✅
Erase data ✅
Save file ✅
Load file ✅
Config ✅
RFID Module ✅
PN532 ✅
Emulate tag ☐
      
TV-B-Gone ✅
IR Receiver ✅
Custom IR ✅
- Config ✅
- Ir TX Pin ✅
- Ir RX Pin ✅
      
Broadcast standard ✅
Broadcast reserved ✅
Broadcast stop ✅
FM Spectrum ☐
Hijack Traffic Announcements ☐
Config ☐
      
NRF24 Jammer ✅
2.4G Spectrum ✅
      
Mic Spectrum ✅
QRCodes ✅
- Custom ✅
- PIX (Brazil bank transfer system) ✅
SD Card Mngr ✅
- View image (jpg) ✅
- File Info ✅
- Wigle Upload ✅
- Play Audio ✅
- View File ✅
SPIFFS Mngr ✅
WebUI ✅
- Server Structure ✅
- Html ✅
- SDCard Mngr ✅
- LittleFS Mngr ✅
Megalodon ✅
BADUsb (New features, SPIFFS and SDCard) ✅
USB Keyboard ✅
Openhaystack ✅
LED Control ✅
JavaScript Interpreter ✅
      
RTC Support ✅
NTP Time adjust ✅
Manual Time adjust ✅
      
Send File ✅
Receive File ✅
      
Brightness ✅
Dim Time ✅
Orientation ✅
UI Color ✅
Clock ✅
Sleep ✅
Restart ✅
      

⚡ Some Schematics

CC1101 on M5Stack Stick Cplus

CC1101 on M5Stack Cardputer

CC1101 on M5Stack Cardputer with SD Sniffer

Read the wiki for more.

Those CC1101 connections are the same for NRF24!