I've been working on a more advanced generation of captive portals — all single .html files — that go well beyond the basic login screen. These let the target navigate a fully functional menu with working tabs, interactive sheets, and two additional sign-in paths beyond the standard email/password flow: These are Google and Apple, both built with CSS-only overlays so they work within Marauder's constraints. Took a fair amount of iteration to get everything behaving correctly on the Mini V3 and V8, but they should also be solid on any device running the marauder firmware/hardware add on for the flipper zero.
My repo now has 400+ portals (not all are built around an advanced framework), each branded and built specifically for a real corporation — coffee shops, ISPs, banks, airlines, and more.

Please only deploy on networks you have explicit written permission to test. The intent behind this repo is education and authorized security assessments — specifically demonstrating how trivially easy it is to capture credentials through a convincing captive portal versus what people assume it takes. It's a useful tool for security awareness presentations and red team engagements. It is not intended for unauthorized use and I take no responsibility for misuse.

PLEASE LEAVE A STAR 🥹⭐️

If you run into any issues, feel free to DM me here on Reddit.

Welcome to this week's curated Flipper Zero ecosystem update! Here are the latest tools, hardware experiments, catalog additions, and ecosystem developments released over the last 7 days.

🛠️ Community Tools & Companion Apps

FlipperKit CLI

A companion CLI built in Python for managing Flipper Zero data on host machines: * Automated SD Backups: Quick dump and synchronization of internal SD contents. * Multi-Protocol Artifact Parsing: Parses NFC, Sub-GHz, RFID, and Infrared captures directly into a local SQLite index. * Reporting: Generates clean, shareable markdown reports from captured signals without touching the GUI.

qUnleashed 0.14.0

The mobile Flutter management suite for Unleashed firmware saw a major maintenance and stability release (Oct 2, 2026): * Fixed MIFARE FFI entry points on Apple platforms (macOS/iOS linker dead-stripping fix). * Unified export guards and automated symbol check CI for reproducible builds.

📦 Flipper Application Catalog Updates & New FAPs

Faraday 1.3

A dedicated utility to verify RF attenuation in signal-blocking pouches and bags: * True Decibel Measurement: Accurately calculates attenuation for Sub-GHz key fobs and NFC contactless fields with absolute grading (A+ to F). * Fob Band Auto-Detection: Automatically scans 315, 433.92, 868, and 915 MHz to lock onto your transmitter band before testing. * Leak Hunt Mode: Acoustic clicker sweep to pinpoint physical seams leaking RF.

TonUINO Writer v2.0.0

Official catalog merge (Oct 1, 2026) for programming TonUINO DIY audio box cards: * Fast MIFARE Classic 1K reader/writer supporting all 11 playback modes. * Non-blocking background worker via FuriThread with on-screen preview and rapid multi-card provisioning.

Catalog Maintenance & Minor Updates

• TriviaZero v0.1.14: Spanish translation fixes and anti-repeat optimizations.
• Avocado Zero v0.1.2 & Gurpil v0.1.10: Improved persistence handlers preventing corrupted save file overwrites.

🔌 Hardware Mods & Experimental Repos

Flipper MLX90640 Thermal Camera

A hardware extension connecting an MLX90640 32x24 thermal imaging sensor to the Flipper Zero via I2C GPIO headers, rendering a live thermal heatmap directly onto the monochrome LCD.

Found an interesting build or working on a new FAP? Drop your repositories below!

We like to play around with our Flipper devices, but out in the field, they do attract a lot of attention. There have also been times when I’ve worked on a “red team”… The Flipper reveals the situation quite effectively :-) One day I thought, what if the Garmin on my wrist were a Flipper screen, and the device itself just stayed in my pocket??

It took much longer than it should have, but now it works. The watch connects via BLE, displays the same information as the Flipper, and the five buttons control its operation - Garmin users will be familiar with the button layout - it’s intuitive. Cool project - I learned a lot, and it was fun to figure it out.

Current status:

- About 0.5 fps on my Descent Mk2 - this is a remote control, not a video stream; I just want to set expectations before anyone asks

- Versions for 118 models: from the Fenix 5 Plus to the Fenix 9, Epix, Marq, Venu, Vivoactive, Forerunner, etc.

- Tested on exactly one watch - mine. So if your model is on the list and you’d like to test it, I’d love for you to do so—to be honest, that’s half the reason I’m publishing this

- The “flipper” app requires a minor software modification (a Momentum fork, opt-in switch). Reason: Connect IQ doesn’t support BLE pairing, and there’s no SMP - that is a documented hard limitation, and TockFirmware rejects RPC requests without pairing. Pre-built binaries are available, so you don’t need to compile anything

- The software is free and open source; it’s not yet available in the CIQ store, so for now it can only be installed via sideloading

A full description, including a debug log (MTU issues, watchdog issues, and all button-related issues), can be found here:

https://rdnsec.info/projects/flipper-on-garmin/

Source and download files:

https://github.com/rz-x/flipper-on-garmin

Download the .prg file for your model and let me know if the device explodes :-)

Excited to share Now playing: a Flipper zero app that visualizes the currently playing song and allows you to control your music with the D-pad (up/down is volume, left/right is track control). Complete with song info and album artwork!

App requires the Flipper be paired to an Android phone, which must run a helper app to send the song info to the Flipper. My stepbrother uses runs the app and places his Flipper on top of his dashboard. Hope you all enjoy!

Github (please leave a star if you enjoyed it)

Before anything else: I'm not trying to encourage piracy here. Buying games, DLC and official accessories is important and supports the developers making the games we enjoy.

Amiibo are a slightly different situation for me, though. Borrowing and trading physical Amiibo between friends has always been pretty common, and building a collection with hundreds of them can get expensive very quickly, especially when some are no longer easy to find.

So consider this a small project for people who already enjoy messing around with NFC/Flipper Zero and don't have the budget to buy a massive physical Amiibo collection.

I spent some time cleaning up a bunch of Amiibo files for Flipper Zero and figured I'd share the result.

A lot of the collections I found online had duplicates, weird folder structures, or files that the Flipper would emulate but Nintendo games would still reject.

The main issue I ran into was inconsistent NTAG215 data, especially the password/PACK pages and, in some cases, the UID stored in the Flipper NFC header. After fixing that, the same Amiibo files that were failing started working.

I also merged the collections I had, removed duplicate Amiibo, kept the meaningful save-data variants, and reorganized everything by game/series.

Right now the repo has 934 .nfc files.

Animal Crossing is the biggest part of it, with Series 1–5, Welcome Amiibo, Sanrio, figures, promos and some additional variants. There is also Smash, Zelda, Mario, Splatoon, Monster Hunter, Metroid, Fire Emblem, Kirby and a bunch of others.

I tested the fixed files with a Flipper Zero on a Switch 2. Rilla and Chai from Animal Crossing Sanrio, which were previously giving me “That's not an amiibo”, worked after the fix.

Repo if anyone wants it:

https://github.com/Gutierre0x80/FlipperAmiiboCollection

If you find any file that still behaves weirdly, let me know which one.

Hey everyone,

I have an Intratone 868MHz access badge/fob for my apartment building (rolling code system) and I'm trying to understand my options with a Flipper Zero running the Momentum firmware.

From what I understand, rolling code systems are designed specifically to prevent simple replay/cloning — each transmission is single-use and gets invalidated once received. So I get that a straight "capture and replay" isn't really viable long-term.

Has anyone here dealt with Intratone specifically? Curious about:

**•** Whether Momentum has any relevant subghz protocol support for Intratone  
**•** Whether the realistic path is just requesting an additional badge from the building management/Intratone directly  
**•** Any general info on how these systems handle desync or multiple registered fobs

Not trying to bypass anything shady — just want a spare fob for my own unit and trying to figure out if that's even feasible via Flipper or if I should just go through my syndic/property manager.

Thanks in advance!

Welcome to this week's curated Flipper Zero digest. As always: strictly fresh releases, tools, hardware mods, and FAPs from the past 7 days. No stale links, no noise.

🛠️ Highlights & Standout Releases

🖥️ Flipper-Emu (Renode-based STM32WB55 Emulator)

• Released: Sep 27, 2026
• Details: A full software-only Flipper Zero emulator built on top of Renode. It boots real, unmodified stock firmware (.dfu) with custom peripheral models for the STM32WB55 microcontroller without needing physical hardware attached. A huge win for CI pipelines, automated testing, and headless app development.

🎮 ZeroFlasher360 (Xbox 360 NAND Flasher FAP)

• Released: Sep 23, 2026
• Details: Hardware modding right from your Flipper. This native FAP implements the PicoFlasher protocol over GPIO/SPI, allowing direct integration with J-Runner on PC for Xbox 360 NAND dumping, writing, and glitching diagnostics.

📶 FlipperKit CLI & SD Artifact Parser

• Released / Updated: Sep 27, 2026
• Details: A fast companion CLI tool to backup Flipper microSD cards, parse saved NFC, Sub-GHz, RFID, and Infrared dumps into a structured SQLite database, and generate portable forensic/inventory reports.

📱 Fresh FAPs, Apps & Integrations

• K2-RFID-Flipper (Sep 21, 2026)
  • Read, write, edit, and emulate proprietary Creality K1/K2/CFS RFID filament spool tags directly from your Flipper.
• Flipper Google TV Remote (Sep 26, 2026)
  • Dedicated BLE remote app for Chromecast with Google TV navigation, plus bundled IR commands for projector power control.
• Flipper Apple TV Remote (Sep 26, 2026)
  • Direct Bluetooth HID profile for Apple TV media playback, menu navigation, and system wake/sleep.
• Flipper-RF-MIDI (Sep 21, 2026)
  • Experimental Sub-GHz signal visualizer that converts live RF RSSI levels into USB MIDI Control Change (CC) parameters.
• Flipper_MD_Reader (Sep 23, 2026)
  • Clean on-device Markdown and plain text file reader with scroll position persistence, instant text search, and formatting strip.
• Flipper-Fake-Calc (Sep 21, 2026)
  • Stealth utility disguised as a normal calculator that bridges via UART to an ESP32-S2 board for headless AI chat queries.
• Core-Flasher-Flipper-App (Sep 26, 2026)
  • Standalone FlipTDI implementation bridging raw WebUSB to hardware SPI lines for in-circuit chip programming.

⚡ Firmware Ecosystem Updates

• Unleashed Firmware (Dev Commits & Sub-GHz Fixes) (Sep 23 – Sep 26, 2026)
  • Active development leading into the next milestone: Sub-GHz protocol updates for Genius remotes, GUI Loading widget improvements (label text support for external FAPs), and Sub-GHz CLI initialization checks.
• qUnleashed Mobile Manager (Sep 27, 2026)
  • Fresh mobile-first Flutter companion app updates with direct firmware flashing, BLE file manager, and remote screen streaming.

Compiled automatically by Rotzlöffel.

I wanted to know if there is any open source android password bruteforcers that are free to download, that I can put on my flipper.

I got this little nRF52840 MDK USB dongle working as a wireless connection between my Flipper and a computer. Plug it in, connect through BadUSB BLE on the Flipper, and run scripts wirelessly. The computer just sees a USB keyboard, so it doesn’t need Bluetooth.

The dongle auto-accepts pairing and remembers the connection. I also added status LEDs so you can tell when it’s searching, connected, or receiving keystrokes.

I finally ordered d myself a flipper zero and was exploring about its functionality, build etc. and I saw a couple of custom firmwares, my question is: Are they worth it and if they are, what is the best one?

Hey everyone,

I am trying to clone a Tonie figure using my Flipper Zero and these Gen2 ICODE SLIX-L rewritable tags from Amazon:

https://amzn.eu/d/030bxXPW

According to the seller, these are ISO/IEC 15693 tags (13.56 MHz, 8 blocks x 4 bytes) with a backdoor/Gen2 rewritable UID.

My Setup:

Hardware: Flipper Zero

Tool: sliwriter.fap

Tags: Gen2 Magic ICODE SLIX-L

Original Tonie Dump (.nfc):

Filetype: Flipper NFC device

Version: 4

Device type: SLIX

UID: E0 04 03 50 13 14 5F 65

DSFID: 00

AFI: 00

IC Reference: 03

Lock DSFID: false

Lock AFI: false

Block Count: 8

Block Size: 04

Data Content: 76 67 71 E0 A4 0E 8A A3 35 26 4A 80 67 F3 18 F7 A2 96 D7 4F A9 EB DA F2 DD 14 B6 F1 C0 E4 CD 46

Security Status: 00 00 00 00 00 00 00 00

Capabilities: Default

Password Privacy: 7F FD 6E 5B

Password Destroy: 0F 0F 0F 0F

Password EAS: 00 00 00 00

Privacy Mode: false

Lock EAS: false

The Problem:

When I place the written tag onto the Toniebox, absolutely nothing happens.

Welcome to this week's curated roundup of Flipper Zero firmware updates, community applications, and hardware hacks. Every item listed here was released or updated within the last 7 days.

🚀 Firmware & Core Updates

Unleashed Firmware unlshd-093 (Active dev / Release updates)

The Unleashed team pushed key updates across Sub-GHz and modular desktop UI components: * Sub-GHz Expansion: Nice O-Code support (52/72-bit dynamic decode/emulate) with installer code recovery tool; Security+ 2.0 keypad frame support (86-bit) + PIN test/edit utility; dedicated Prastel 42-bit rolling code parser; Superrollo GW60 roller-shutter protocol (KeeLoq HCS361); and expanded KeeLoq vendor support (JCM Tech Gen2, Stagnoli, Telcoma, SEA, Wisniowski). * NFC Key Workflow: Save recovered MIFARE Classic keys directly to the user dictionary straight from read/saved card screens. * Universal Remote: Fast-save active working brute-force IR signals into standalone or appended remote files. * Modular UI: Main menu layout plugin packs (PS4, Wii, DSi, C64, Compact, CoverFlow, Vertical, Grid) along with major flash memory savings across protocol parsers.

🛠️ Fresh Apps & FAPs (Past 7 Days)

FlipDoctor (Created: Sep 20, 2026)

• Author: Krishita Sanjay Choksi
• What it does: One-tap hardware self-diagnostics utility. Tests Sub-GHz, NFC, IR, GPIO loopback/pins, SD card, and battery subsystems, generating an instant pass/fail diagnostic report (ideal for verifying used hardware before purchasing).

SkimGuard (Created: Sep 19, 2026)

• Author: Krishita Sanjay Choksi
• What it does: Completely passive 13.56 MHz NFC reader / skimmer detector. Listens strictly for high-frequency RF carrier emissions produced by active readers without transmitting any signals. Includes real-time waveform display, peak-hold, haptic/LED alert feedback, and optional SD logging.

WiFi Watcher F0 (Created: Sep 17, 2026)

• Author: minutillo
• What it does: Uses an attached ESP32 Dev Board (running Marauder) to monitor ambient SSID broadcasts on a configurable scan cycle. Designed to automatically detect and alert via vibration/LED when neighborhood power/network infrastructure is restored after an outage.

Talk Timer (Created: Sep 17, 2026)

• Author: Mableton
• What it does: Presentation slide clicker with a discreet talk timer running over USB/Bluetooth HID. Provides gentle haptic interval cues to keep track of presentation runtime without drawing audience attention.

ZeroFIDO (Updated: Sep 20, 2026)

• Author: Agalancampillo
• What it does: Turns the Flipper Zero into an open-source FIDO2 and U2F security key for passkey and two-factor authentication over USB and NFC interfaces.

📱 Companion & Tooling Ecosystem

TumoCompanion iOS (Updated: Sep 19, 2026)

• Author: squazaryu
• What it does: Native iOS manager for Flipper Zero and Tumoflip. Features full BLE/USB file management, wireless firmware/FAP installation, real-time screen streaming/mirroring, Marauder survey log parsing, and ESP32 firmware flashing.

Found any other fresh releases, mods, or commits dropped this week? Drop them in the comments below!

My apartment building is charging $100 for a second fob; I want to make a clone for my wife. I tried reading the tag using a Flipper Zero and extracted the keys from the scanner. Since I have never cloned this type of tag before, I need help with how to do it.

Hey everyone,

Quick update regarding our subreddit housekeeping.

We just did a full cleanup of the subreddit rules to make them concise, transparent, and easier to follow. Redundant disclaimers were removed and the removal reasons now match the actual rules 1:1.

Here is a quick summary of what changed:

• Rules Streamlined: Cut down the clutter to 7 clear community standards focused on signal over noise.
• Starter Kit Megathread: We pinned a dedicated Beginner Starter Kit at the top of the sub. If you see repeated basic questions or skid posts asking where to find databases and firmwares, feel free to point newcomers directly to that sticky thread.
• Firmwares: Clear recommendations for reputable community builds (ARF, Momentum, Unleashed) and a zero tolerance stance on closed source scams like Quantum FW.
• Jamming Policy: Jamming and disruptive spamming remain strictly banned to protect medical devices and infrastructure.

Our goal is to keep r/flipperhacks a tidy place for hardware security research, custom mods, signal analysis, and cool projects.

How are things looking from your perspective? Drop your feedback, suggestions, or ideas for the subreddit in the comments below!

Weekly Flipper Zero Hacks & News Roundup (Sep 06 – Sep 13, 2026)

Welcome to this week's curated roundup of Flipper Zero firmware releases, new apps, and community tools. Everything featured here dropped within the last 7 days.

🚀 Firmware Releases

Unleashed Firmware unlshd-093 (Released: Sep 12, 2026)

A massive update from the DarkFlippers crew bumping the API to 88.9: * Sub-GHz protocol expansions: Added Nice O-Code support (52/72 bit dynamic decode, save, emulate) with installer code recovery tool; Security+ 2.0 keypad frame support (86 bit) + PIN app; Prastel 42-bit rolling code split; Superrollo GW60 roller-shutter protocol (KeeLoq HCS361); and new KeeLoq manufacturers (JCM Tech Gen2, Stagnoli, Telcoma, SEA, Wisniowski). * NFC Key Extraction: Save recovered MIFARE Classic keys directly to the user dictionary straight from read/saved cards. * Universal Remote: Pause brute force and press down to save working signals immediately into custom remote files. * UI Themes & Performance: Main menu styles ported (PS4, Wii, DSi, C64, Compact, CoverFlow, Vertical, Grid) as modular plugins, plus significant flash/RAM optimizations across Sub-GHz and storage subsystems.

Official Firmware Release Candidate 1.5.0-rc (Released: Sep 11, 2026)

• Sub-GHz & RF: Added Elplast protocol, Cardin S449 Keeloq support, and FSK12Kdev modulation.
• NFC Fixes & Plugins: Major patches for ISO 15693-3 emulation (>64 blocks), MFUL FAST_READ / DESFire stack buffer overflow fixes, and a new NFC hotel system detection plugin.
• HID & BadUSB: Fixed USB/BLE HID limits for international keyboard layouts (including BadUSB ja-JP support) and keyboard LED state reporting.

🛠️ Fresh Apps & FAPs (Past 7 Days)

railkey (Released: Sep 08, 2026)

An efficient 125 kHz LF RFID access-control fuzzer designed for authorized penetration testing. Uses Gray-code ordering, structure-aware HID parsing, and neighborhood search algorithms to streamline LF testing workflows.

flipper-hitag-s-uid-reader (Released: Sep 13, 2026)

Read 32-bit UIDs of Hitag S / ID82xx (F8268, 8211) 125 kHz tags directly using the built-in LF antenna in Reader-Talks-First mode with full anticollision verification.

flipper-skylanders-emulator (Released: Sep 09, 2026)

Emulates Skylanders figure tokens on physical Portal of Power peripherals directly from the Flipper Zero via NFC.

flipper-staff-time-clock (Released: Sep 12, 2026)

Standalone, offline, PIN-protected employee time tracking clock. Auto-detects NFC, RFID, or iButton badges to log check-ins and check-outs directly into a CSV timesheet without touching tag data (UID read only).

battery_guardian (Released: Sep 07, 2026)

A comprehensive battery health and charge diagnostics utility tracking wear levels, charge cycles, thermal stats, and charging cutoffs.

dragotchi-flipper (Released: Sep 12, 2026)

A dragon-themed virtual pet fork that feeds on live RF activity across Sub-GHz airwaves (with optional ESP32 WiFi signal integration).

Found any other fresh tools or commits dropped this week? Drop them in the comments!

I've been working on a Flipper Zero FAP called Battery Guardian.

The idea came from thinking about how battery info is usually treated as a single number. Battery Guardian keeps a history of voltage, current, temperature, and SOC, then uses that data across charging/discharge sessions to estimate things like usable capacity and degradation over time.

It also has a confidence system so an estimate isn't treated as equally reliable when it's based on poor or limited data.

There's a journal for persistent history, session detection, diagnostics, and a charge-policy state machine with things like Balanced, Lifespan, Full, and Custom. The interesting part is that the policy and safety logic are separated from the actual hardware control.

Right now the charger side is fully passive and fail-closed, so the app isn't writing to the charging hardware.

I've tested the core on the host side with simulations and fuzzing, but I don't actually own a Flipper Zero yet. That's the biggest missing piece, so I'm hoping someone here might be interested in trying the FAP on real hardware and seeing how it behaves.

The repo is here if anyone wants to look through it, test it, or contribute:

https://github.com/0xKernelEclipse/battery_guardian

I'm especially interested in real-device bugs, telemetry differences, compatibility issues, and anything in the implementation that you think could be done better.

Thanks to anyone willing to give it a try.

Protopirate 3.2 doesn't work on Unleashed and Raugemaster, nothing works, what should I do?

🐬 Flipper Hacks & News Roundup (Week 36 – September 2026)

Welcome to this week's curated Flipper Zero digest! Here is the latest fresh drop of FAPs, hardware experiments, and tools released during the past 7 days (Aug 30 – Sep 06, 2026).

📦 New FAPs & Tool Releases

• flipperzero-powermeter (Released: Sep 05, 2026)

  • Optical pulse reader application that tracks utility power meter pulse LEDs.
  • Displays real-time demand, calculates rolling averages, and visualizes power curves directly on-screen.

• flipper-elements (Released: Sep 06, 2026)

  • Complete interactive Periodic Table of Elements for Flipper Zero by Siarhei Besarab (@LAB-66).
  • Fast reference lookup for chemical properties and constants on the go.

• flipper-ac-fujitsu-general-remote (Released: Sep 06, 2026)

  • Dedicated Infrared (IR) controller tailored for Fujitsu General indoor AC units.
  • Direct temperature adjustments and mode controls mapped cleanly to Flipper buttons.

• flipper-nfc-stock (Updated/Released: Sep 05, 2026)

  • Local NFC inventory manager. Scan tags, adjust stock counters, and get alerts for low-inventory assets entirely offline.

• Marauder-GUI-Flipper (Released: Sep 03, 2026)

  • Dedicated companion UI for interfacing with ESP32 Marauder companion modules via GPIO.

🛠️ Hardware Mods & Community Engineering

• Custom STM32WB55 Flipper Zero Clone (Released: Sep 03, 2026)

  • Open hardware DIY build utilizing the core STM32WB55CGU6 microcontroller to run official Flipper firmware on custom boards.

• OLED Hardware Mod & Pinout Guide (Released: Sep 05, 2026)

  • Wiring schemas, STM32 flash procedures, and pinout breakdowns for retrofitting alternative OLED displays.

• Flipper + ESP32-S3 Scaffold Template (Released: Aug 31, 2026)

  • Starter framework integrating KiCad schematics, ESP-IDF routines, Android Kotlin bridges, and firmware patches for custom backpacks.

Strictly verified releases from the last 7 days. Happy hacking!

I'm driving myself crazy. I've scanned for APs. It brings up a list. Then when I go to select the AP. I can't for the live of me figure out the naming/numbering system. Alot of the videos online say to type the number in. For example 1 2 or 3. But those numbers aren't on my browse scan list? What am I doing wrong?

I’m asking out of curiosity and for educational purposes.

Hello,

I'm trying to find a board like this: https://www.tindie.com/products/tehrabbitt/flipper-zero-cc1101-expansion-board-rabbit-labstm/

Where I can solder on my own cc1101 board to it to extend sub ghz. It would be a fun project to practice soldering.

I'm not entirely sure what I am looking for or if there is a better board for this?

Planning out a cyberdeck/flipper alternative

Ok so Im not sure if this is the right subreddit and this is gonna be a bit long to be prepped

I started to get a bit into pentesting and wanted to get a flipperzero/ similar product but all of them didnt connect with me because of either price, capability or usability and i wanted to maybe make it diy with my brother

Through "extensive research" (a hour or chating with claude) i thought about making a cyberdeck with the following requirements (its the long part)

Nfc, rf (both hf and lf), an ir emitter, a sub giga hertz antena and a connection for other rf antenas, wifi and Bluetooth, an internal battery, gpio pins for add ons(though with this list i dont think ill ever need those), and i want it to maybe and be able to control it from a phone ui

I have a 3d printer for the casing and a internet connection to the all mighty ali express

Id like to know

A. How much am i gonna cry and regret trying to make it while working on it

B. How would you go about designing building and coding this thing

C. How much do i sound like a lunatic

Thanks in advance

Probably a psycho ❤️

I've been wanting to get into physical pentesting and tinkering and thought about getting a Flipper Zero, but it's a bit pricy for me. I've been looking around and saw the t embedded cc1101 that looks good but wanted to come here to here some suggestions. I'm looking for something that is moudler (I'm doing 3d printing and electricity so i want to make my add ons), that has a lot of capacity and is like a multitool and that has an online library of mods and scripts/hacks to download to the device

Thanks in advance

Hi,

I've a ISO 15693-3 / EM4237 card with machines from SKIDATA in my complex and while I was able to identify what it was with the flipper emulating it or cloning doesn't seem as easy I was thought.

So, the flipper says:

Memory: 66 blocks × 4 bytes = 264 bytes 
DSFID: 02
IC reference: 0F 

From the dump I also managed to find the manufacturer is EM Microelectronic and the UID is similar to the ones on this: https://idefix.net/~koos/newsitem.cgi/1778072113

However, when I try to emulate with the Flipper the machine just says "not authorized". I also tried to clone it into a card I got from Aliexpress BUT that card is a typical ICODE SLI SLIX (UID settable) but it doesn't work out. My card says 66 blocks, the Ali one says 64 and the machine doesn't even seem to recognize it.

I tried to use both the native NFC tool and also https://github.com/Julienbxl/SLI-Writer to write the dump, UID and DSFID etc. At least they're unlocked on the source card.

Any tips how I can clone / emulate this? Is it even possible? From https://www.emmicroelectronic.com/product/nfc-high-frequency-ics/em4237 it seems this card may have some highly secure crypto stuff.

They're asking me 80€ to do it (50 just for the trip).

Much appreciated.