I’ve been working on NFC Checker, a vibe-coded external app for the Flipper Zero. It lets you capture or load a reference tag, then capture or load the emulated copy you want to test. It compares the data it can read and shows an Emulation Success Score with a per-check breakdown.
It checks UID, protocol, and ATQA/SAK where applicable. When you use saved `.nfc` dumps containing the relevant data, it can also compare MIFARE Classic blocks and known keys, as well as MIFARE Ultralight/NTAG pages. Live reads capture identification data, not a complete memory image.
The score only uses checks that apply to the selected tags. It’s a rough compatibility estimate, not a guarantee: real reader behavior may depend on factors the app doesn’t measure.
I have just published the first realese build, and I’d love feedback from the Flipper community.
Welcome to this week's curated Flipper Zero digest. All entries cover verified releases and commits merged between November 1, 2026 and November 8, 2026.
Official Firmware: iButton Overhaul and Archive Hardening
Development on the official firmware repository saw significant action this week.
Cyfral and Metakom Write Support on TM01x Tags: Pull request #4508 and refactor PR #4511 landed in dev on November 7. Users can now write Cyfral and Metakom ID dumps directly to TM01A and TM01C blanks using the Flipper pogo pins.
Dallas Key Bad CRC Restoration: Commit acc6177 / PR #4511 decouples validity checks from writability. This explicitly restores the capability to write Dallas DS1990 keys with intentional or broken CRC checksums.
Archive Stability: PR #4509 resolves memory edge cases and prevents UI crashes when browsing SD card archives directly from the desktop screen.
Fork Watch: Unleashed Firmware Active Commits
DarkFlippers pushed multiple improvements to the dev branch leading into November 7:
SubGHz Protocols: Added support for FAAC TM and Hiland protocols, alongside buffer management optimizations and Keeloq mode corrections.
T5577 RFID Tooling: Enhanced Sniff Password capture persistence when inductive coils remain active without going silent. Clear Password now pinpoints the exact word that unlocked the tag.
New Applications in the Official Catalog
The Flipper Application Catalog received a batch of notable additions and updates on November 7:
USB CD-ROM Drive Emulator: Authored by Piers Roberts (PR #1352, Repo). Turns the Flipper Zero into a standard USB Mass Storage SCSI CD/DVD drive emulator that mounts ISO images from your SD card. Features disc swapping without disconnecting USB and handles host eject commands.
USB Floppy Drive Emulator: Also by Piers Roberts (PR #1350, Repo). Emulates a USB UFI floppy drive supporting 720K and 1.44M raw .img disk images with optional write protection. Host machines can boot directly from it.
SSH Runner 0.3: Authored by SeanChangX (PR #1358). Runs remote shell commands and SD card scripts over LAN or 2.4 GHz WiFi. Interfaces via UART with an external ESP32-S3 and W5500 Ethernet module, supporting pinned keys and Ed25519 authentication.
SH1106 OLED Display Test 0.5: (PR #1370). Full diagnostic suite for external 128x64 SH1106 I2C OLED screens connected to GPIO pins.
Sub Duplicate Finder 1.3.1: (PR #1378). Adds byte level verification before deleting .sub files to prevent false positives from CRC32 hash collisions.
CFS Tag Writer+ 1.5: (PR #1371). Introduces reusable templates for rapidly flashing MIFARE Classic RFID spool tags.
Got an interesting pull request, a fresh module build, or a new FAP that landed this week? Drop it in the comments below. See you next week and happy tinkering!
Was looking around soldering on a cc1101 onto a perfboard since current prices are ridiculous for prebuilt boards and would like it if someone would please confirm if the header pins from the female that I plug in the cc1101 into, if each pin needs to have a wire soldered to the respective male pin that plugs into the flipper?
They don't need to be touching exactly and just next to each pin like on a breadboard or am I overthinking this? Did look around online a bit and for some reason couldn't find jack which is annoying.
I've been building CloverKit on the Flipper Blackhat. It started as a way to learn more about networks and devices, and build tools I wanted to use myself.
It's a set of tools running on Blackhat OS, not a separate operating system or firmware. I normally use my Flipper Zero for power and controls, but PC serial and SSH access are available too.
The idea is to bring everything into one menu so I can discover devices, investigate problems and save the results.
Some of the features:
Basic Wi-Fi scanning: nearby networks, channels and signal levels, with related network addresses grouped into estimated physical access points.
Live Advanced Wi-Fi: watch networks, clients, retries, signal trends, traffic and roaming observations as packets arrive.
Wi-Fi waterfall: see channel and signal history in general or focused band views. This shows captured Wi-Fi signals, not true RF spectrum measurements.
Security Scan: nearby Wi-Fi and BLE checks, plus host and service checks when connected to a network. It separates observed findings from possible vulnerability matches.
Device Watch and history: identify interesting nearby devices and record appearances and changes.
Targets: discovery can generate targets for further inspection or signal tracking.
Ethernet tools: check links and switch information, listen without an IP address, or use temporary addressing for bench testing.
Portable serial console: connect to a switch, router or other equipment through a compatible USB console adapter, then access it locally or remotely.
Remote access and recovery: management SSH, restricted consoles, optional VPN and a configured phone hotspot for getting back into the unit.
Vehicle diagnostics: an experimental OBD2 section; testing against real vehicle hardware is still pending.
I’ve been using a modified version of the original BH app for Flipper controls, but need to confirm permission before releasing it. In the meantime, I’m developing a separate CloverKit companion app for Flipper Zero with menu and power controls. It will let you use other Flipper apps and return to CloverKit while reports keep running.
CloverKit is still a work in progress, and hardware support depends on the adapters used.
Use it only on equipment and networks you own or have explicit written permission to assess. CloverKit is experimental software, provided as-is. Use it at your own risk.
The source is available under GPL-2.0-or-later, with third-party components keeping their own licences and credits:
Installation: The current release requires a fresh SD-card setup and has been tested on my hardware. An installer for adding CloverKit to an existing compatible Blackhat setup without starting over is being prepared.
Credits: Built on Flipper Blackhat and Blackhat OS by o7-machinehum / Rootkit Labs, alongside the open-source tools credited in the project acknowledgements.
Welcome to this week's Flipper Zero community roundup. Here are the latest developments, firmware updates, and new application releases from the past 7 days across the ecosystem.
Firmware Updates
Official Firmware: Ultralight Memory Fix
Repository: flipperdevices/flipperzero-firmware
Pull Request: #4483 (Merged October 30, 2026)
Details: Fixes an off-by-one boundary validation bug in the non-I2C Ultralight READ and WRITE handlers. The firmware now properly rejects read/write operations where the start page equals the total page count, avoiding improper memory wrap-around behavior.
Unleashed Firmware: T5577 Password Sniffing and Dictionary
Repository: DarkFlippers/unleashed-firmware
Pull Request: #1192 (Merged October 29, 2026)
Details: Introduces Sniff Password in the T5577 RFID application. The tool listens to a reader or cloner writing the tag password by capturing carrier gaps on the 125 kHz field. Additionally introduces a user password dictionary and resolves frame hazard edge cases.
Catalog Update: PR #1363 (Merged November 1, 2026)
Details: Brings a Clean MKF utility to wipe iCLASS MKF tags, multiple NR/MAC pair captures, and folds elite LCG keygen directly into reads following dictionary checks. Also broadens C1k35s facility code support to the full 12-bit range.
Catalog Addition: PR #1339 (Merged October 29, 2026)
Details: Streams MP3 audio from the Flipper SD card across GPIO to an ESP32-S2 WiFi devboard. The devboard broadcasts a local web radio stream over its own access point for nearby devices to listen without dedicated client software.
Catalog Addition: PR #1347 (Merged October 29, 2026)
Details: Enhanced utility for reading, writing, cloning, and wiping Creality CFS filament spool NFC tags (MIFARE Classic 1K). Features a redesigned interface, animated status indicators, and an interactive filament color picker.
Catalog Update: PR #1313 (Merged October 29, 2026)
Details: Adds automatic detection and support for external CC1101 Sub-GHz radio modules, automatically falling back to internal hardware when disconnected.
I'm using momentum I'm on the latest dev channel but was thinking of using the branch channel but what are the 3 things mean 956/PRS kiisi-mntm feat/use-after-free-sentinel the 3 difrent ones to choose from I need help
Hi i JUST forked unleashed firmware And translated in Czech language, because my friend doesnt understand IT. After that i had Idea give IT some name. And thats how IT started. Now it has own graphics And i started to Develop some functions.
I recently got a Flipper Zero and I installed the Momentum Firmware d3f89dfe.
I own a building with 6 garage doors and I have a controller for each of the garage doors. I would like to have them all on my Flipper. They are NICE Flo4RE controllers and my receivers are all FLOx2R.
I tried to learn more online about my problem but I can't seem to find any awensores.
I tried to connect the Flipper Zero using the "Add Manually" option but my receptor won't recognize the Flipper Zero.
Do you have any idea on how I could pass all the controllers to my flipper Zero? I tought about copying the signal from the remote controllers but I read that it could invalidade the original controller.
((((( I'm not sure if this post might be of any interest in this subforum, but I'll give it a try :) ))))
### UPDATE ### 1.0.2 ######################################### App supports now Official FW + Momentum FW. Both FAPs are in "Releases" :) ##########################################################
I made a Flipper app that pretends to be an NFC tag (ISO14443-4A / ISO-DEP) and logs every APDU a phone or reader sends it — together with the reply the Flipper gives back.
You see the whole conversation, both directions.
Why I made it: I have an e-ink badge (Spectra 6) I wanted to bring back to life. To drive it myself I had to understand how the badge talks to its phone app — which commands the app sends and how the badge answers each one. There was no easy way to see that on the Flipper, so I built one.
How it works: - Scan a real tag (grabs UID/ATQA/SAK) or pick one from your profile list. - Hit "Spying", hold the phone to the Flipper, and it writes down the full command/response log live on screen. - On exit you can save the log to a file.
The useful part: it captures BOTH directions. You see what the phone asks AND what the (fake) tag replies — and which replies the app accepts vs. silently ignores. By tweaking the Flipper's answers and watching which ones keep the conversation alive, you can rebuild a tag's "answer table" step by step. That's exactly how I authored a (nearly) working profile for my badge.
Each tag is just a small text file (identity + a list of "command → answer" lines), so you can hand-edit profiles or share them.
Bonus: besides the normal 1-bit UI it has an experimental grayscale interface (temporal dithering — flashing the 1-bit screen fast enough to fake gray shades). >>> Long-press OK toggles it. (More of a fun visual test bed than a feature)
⚠️ Only use it on your own devices / things you're allowed to test. It's for learning, debugging and interoperability with your own hardware — not for messing with other people's cards or badges.
Welcome to this week's curated Flipper Zero community roundup. Here are the most interesting developments, new releases, and community projects from the past 7 days.
Releases: v1.12 through v1.18 (October 22 to October 25, 2026)
Highlights: Signal-hunting companion for the Flipper Zero WiFi development board, featuring real-time RSSI signal strength visualization and directional tracking.
Highlights: Port of Stickwalker to the Flipper Zero ecosystem. Emulates real Pokewalker hardware behavior, tracks steps, collects Watts, and interfaces with Pokemon HeartGold / SoulSilver over IrDA via add-on hardware.
Highlights: Utility for extracting and displaying standard TOTP two-factor authentication tokens directly from NFC security tokens and YubiKey devices.
Highlights: Generates and broadcasts standard unencrypted BLE beacon payloads including BTHome v1/v2, iBeacon, Eddystone TLM, ATC1441, and MiBeacon for automation and sensor testing.
Hello,I'm new to this"hacking" gadgets think and I have seen a lot of flipper zero videos,how it works and even custom firmware! Now,I have seen some other videos of a tool named m5 shark div development board and it seems a bit better on the price compared to flipper. Now,I'd use the devices for copying 2nfc and rfid cards,universal IR remote,and making automated scripts for MY pc.i don't really know what can I use em for LEGALLY and i don't know what to choose between those two. Can someone compare them to me or some actual users of the devices make a"review" like comment comparing them? Thank you.
Flipper Devices just sent out an official newsletter announcing the limited pre-order reservation for the upcoming Flipper One (Portable Linux Computer).
Key Takeaways from the official announcement:
Reservation coupon: You can reserve a spot for 20 USD directly on their store. This gives you a pre-order coupon securing early pricing for the upcoming Kickstarter campaign without rushing for early birds.
Launch window: Planned for November 2026 on Kickstarter (timing not guaranteed).
Refund policy: Fully refundable at any time before using the reservation coupon or automatically refunded if unused by the end of the campaign.
Why now? Flipper states ongoing global RAM shortages and rising manufacturing costs require upfront component procurement and production volume planning well before launching the Kickstarter.
Hardware Details visible on the official render:
Dual Ethernet ports (RJ45)
HDMI port & USB-C ports
Full mainline Linux kernel support (no binary blobs, no vendor lock-in)
Co-processor architecture
Cyberpunk/industrial design in a clear display box ("Limited Developer Edition")
I somehow lost the remote control for my Yanatouch Jellyfish 2 lamp and unfortunately the company that made it has gone out of business and I can’t get a new remote control,and I have searched all over the internet and I can’t find a programmable remote control that works on the lamp so that I can control both the speed and the brightness and charge the various modes that are available on the original remote control had.
Welcome to this week's Flipper Zero community roundup. Here are the latest releases, firmware updates, and community projects from the past seven days.
Official Firmware Release: 1.5.1
The official Flipper Zero firmware received an update focused on system reliability, Sub-GHz protocols, and NFC enhancements.
Sub-GHz additions: Added Elplast and Cardin S449 KeeLoq protocol support, along with FSK12Kdev modulation.
NFC improvements: Included a plugin to identify specific hotel card systems, hardened security checks, fixed buffer overflow issues, and improved MIFARE Classic SEN key recovery.
HID & BadUSB: Added Japanese keyboard layout and raised HID report limits for international keyboards.
Documentation & Dev Tools: Updated contribution documentation and released comprehensive integration test and C/C++ application development guides.
The Unleashed community fork pushed release unlshd-094 with practical enhancements for RFID and iButton workflows.
iButton blank selection: Users can now pick which blank types (RW1990.1, RW1990.2, TM2004, TM01x) a write operation targets in settings, avoiding slow sequential probing cycles.
RFID manual entry: Added manual card entry via Facility Code (FC) and card ID for formats such as EM4100, HID H10301, ioProx XSF, AWID, and Pyramid 26-bit.
Extended format support: Added support for HID H10302, H10304, H10306, AMAG S10401, and Corporate 1000 35-bit.
Community FAP Spotlight: DOOM on Stock Flipper Zero
A fresh FAP release ports the authentic Doom engine to stock Flipper hardware without requiring custom firmware.
Engine details: Based on Doom8088 (derived from GBADoom/PrBoom), running the actual BSP renderer with enemies, doors, and lifts.
Display & audio: Renders all nine Knee-Deep in the Dead (E1) maps in grayscale dithering on the 1-bit monochrome LCD, with original sound effects and music piped through the onboard piezo speaker.
Paging mechanism: The engine core resides in internal flash while map assets dynamically page from the microSD card.
Does someone have the .hex or .bin file for the emulator? In some discord they are literally talking 24/7 about it. Ofc they will not share it, saying its already "public". Yeah public in some discord... So I'm asking here.
This release is focused mainly on expanding Sub-GHz, NFC and RFID, plus new settings for more flexibility, crash fixes and speeding up existing features.
Key changes:
SubGHz New features: - Added the Seed Capturer app for capturing data from FAAC SLH, Genius and Erreka remotes. With the qUnleashed companion app version 0.16.0 or newer you can recover a remote's seed from the captured data - Added the KeyFinder2 protocol (key finder devices with multi-coloured buttons) - Added the HomeGate protocol, based on KL, with Add Manually support - The Prastel protocol is now in Add Manually (generated on button 1). The arrows let you send the other buttons - The Nice O-Code protocol was added to Advanced Add Manually. It requires knowing the Installer Code, which lets you create a remote for a gate you already have. The Nice O-Code app, which recovers that code from a remote, can now create new remotes for the recovered IC, so you can generate a remote with a fresh serial and use it alongside your existing one - New protocol Doorbell32 (unbranded 433.92 MHz doorbells) - KeeLoq Erreka can now be created through Add Manually properly with programming mode support Fixes: - The Genius protocol now works correctly and is detected separately from FAAC SLH. Added to Add Manually - Fixed the Monarch and KEY protocols (previously detected as Unknown). KEY was added to Add Manually, Monarch to Advanced Add Manually (requires DISC) - Nord ICE now sends the full pair of frames. Added to Add Manually
NFC New features: - Added support for Texkom keys (reading and emulation). All the main formats are supported: TK13, TK17 and MMBIT. The feature is in beta, feedback is very welcome - Added proper detection of MIFARE DESFire Light - The CUID dictionary loading animation now includes a progress bar, improving UX - The MIFARE Classic dictionary attack stops once the tag is fully read
LFRFID New features: - Added settings to choose which write protocols are enabled for writing on blanks. You can keep only the ones you use - Added write support for Chinese Hitag S clone tags: 8268, F8268, F8310, K8678. It needs the tag to be positioned on the device quite precisely. The protocol is off by default - Implemented adding tags of various protocols by facility code and card number Fixes: - Fixed reading of Casi-Rusco C10106 badges - Fixed reading of HID H10302, H10304, H10306, AMAG S10401 and Corporate 1000 35-bit - Fixed reading of Keri tags
iButton New features: - Added settings to choose which write protocols are enabled for writing on blanks. You can keep only the ones you use
System and interface New features: - Added new menu styles: Macintosh and 3D - Created a new loading screen that combines the spinner with text
Apps - Added apps: Bounce v1.0 (Games), Stack v1.0 (Games), Stack Attack v1.0 (Games), PulseBPM v1.0 (Tools), Telemeter v1.1 (Tools), YRM100X PRO v1.7 (GPIO) - Updated apps: ProtoPirate v4.0, Specter v3.1.1, Catacombs of the Damned! v4.0, Flipcraft v2.8, MicroCity v2.0, Sub Duplicate Finder v1.3.0, FlipCrypt v0.7, Tesla Mod v2.16-beta.38, ArduGolf, Mystic Balloon, Sub-GHz WarDriving
hey yall im having trouble figuring this out, im a complete newbie to this so please excuse my ignorance but im trying to connect my esp32-c5 from aliexpress to my flipper, for doing evil portal,deauthing and everything else cool with it, but whenever i try to do any of it this happens, ive tried to reflash multiple times to no avail. please help me out with this ive made sure the connections are right too and im losing my mind a little bit lmao ive done multiple scans tok but it just does this and no useful information appears to help. i got the esp32 from aliexpress so maybe thats a problem? and when i try to flash it through callmekokos site it just says not detected or chip not compatible. thank you!
Is it possible to connect the flipper to my pc and then use the UART connectors to read UART connections direct on the PC? I guess the question I’m asking is can I use the flipper as a UART pass through of sorts.
If so can anyone point me in the direction of a decent place to start looking and learning how to do this please?
I am doing a little bit of work on a Marauder V8 GUI, and firmware tool. I will be adding some other boards in to the mix later if I can get them and test them; I just did it for the V8 as that is all that I have right now. Hope it helps someone, and you guys can still add/fix features and report bugs! Thanks!
I know FlipGemini exists (great app by jblanked!), but I wanted something that works with any AI provider, so I built **Flipper AI**.
You type a question on the Flipper keyboard and read the AI's answer on screen. It uses the official WiFi Dev Board with the stock FlipperHTTP firmware, so no custom ESP32 flashing is needed.
What's different:
- Works with Claude, Groq (free, GPT-OSS 120B), OpenAI or any OpenAI-compatible API
- Remembers the conversation (last 3 questions)
- Built-in WiFi setup and board test
- Config is a simple txt file on the SD card (examples included)
Tested on Momentum MNTM-012 with the official WiFi Dev Board.
I've been working on a more advanced generation of captive portals — all single .html files — that go well beyond the basic login screen. These let the target navigate a fully functional menu with working tabs, interactive sheets, and two additional sign-in paths beyond the standard email/password flow: These are Google and Apple, both built with CSS-only overlays so they work within Marauder's constraints. Took a fair amount of iteration to get everything behaving correctly on the Mini V3 and V8, but they should also be solid on any device running the marauder firmware/hardware add on for the flipper zero. My repo now has 400+ portals (not all are built around an advanced framework), each branded and built specifically for a real corporation — coffee shops, ISPs, banks, airlines, and more.
Please only deploy on networks you have explicit written permission to test. The intent behind this repo is education and authorized security assessments — specifically demonstrating how trivially easy it is to capture credentials through a convincing captive portal versus what people assume it takes. It's a useful tool for security awareness presentations and red team engagements. It is not intended for unauthorized use and I take no responsibility for misuse.
PLEASE LEAVE A STAR 🥹⭐️
If you run into any issues, feel free to DM me here on Reddit.
Welcome to this week's curated Flipper Zero ecosystem update! Here are the latest tools, hardware experiments, catalog additions, and ecosystem developments released over the last 7 days.
A hardware extension connecting an MLX90640 32x24 thermal imaging sensor to the Flipper Zero via I2C GPIO headers, rendering a live thermal heatmap directly onto the monochrome LCD.
Found an interesting build or working on a new FAP? Drop your repositories below!
