Firmware
Predatory ESP32 Firmware
Install / Use
/learn @BruceDevices/FirmwareREADME

:shark: Bruce
Bruce is a versatile ESP32 firmware that supports a ton of offensive features focusing on facilitating Red Team operations. It also supports M5stack and Lilygo products and works great with Cardputer, Sticks, M5Cores, T-Decks and T-Embeds.
Check our fully open-source hardware too: https://bruce.computer/boards
:building_construction: How to install
The easiest way to install Bruce is using our official Web Flasher!
Check out: https://bruce.computer/flasher
Alternatively, you can download the latest binary from releases or actions and flash locally using esptool.py
esptool.py --port /dev/ttyACM0 write_flash 0x00000 Bruce-<device>.bin
For m5stack devices
If you already use M5Launcher to manage your m5stack device, you can install it with OTA
Or you can burn it directly from the m5burner tool, just search for 'Bruce' (My official builds will be uploaded by "owner" and have photos.) on the device category you want to and click on burn
:keyboard: Discord Server
Contact us in our Discord Server!
:bookmark_tabs: Wiki
For more information on each function supported by Bruce, read our wiki here. Also, read our FAQ
:computer: List of Features
<details> <summary><h2>WiFi</h2></summary>- [x] Connect to WiFi
- [x] WiFi AP
- [x] Disconnect WiFi
- [x] WiFi Atks
- [x] Beacon Spam
- [x] Target Atk
- [x] Information
- [x] Target Deauth
- [x] EvilPortal + Deauth
- [x] Deauth Flood (More than one target)
- [x] Wardriving
- [x] TelNet
- [x] SSH
- [x] RAW Sniffer
- [x] TCP Client
- [x] TCP Listener
- [x] Evil Portal
- [x] Scan Hosts (with TCP Port scanning)
- [x] Responder
- [x] Arp Spoofing
- [x] Arp Poisoning
- [x] Wireguard Tunneling
- [x] Brucegotchi
- [x] Pwnagotchi friend
- [x] Pwngrid spam faces & names
- [x] [Optional] DoScreen a very long name and face
- [x] [Optional] Flood uniq peer identifiers
- [X] BLE Scan
- [X] Bad BLE - Run Ducky scripts, similar to BadUsb
- [X] BLE Keyboard - Cardputer and T-Deck Only
- [X] iOS Spam
- [X] Windows Spam
- [X] Samsung Spam
- [X] Android Spam
- [X] Spam All
- [x] Scan/Copy
- [x] Custom SubGhz
- [x] Spectrum
- [x] Jammer Full (sends a full squared wave into output)
- [x] Jammer Intermittent (sends PWM signal into output)
- [x] Config
- [X] RF TX Pin
- [X] RF RX Pin
- [X] RF Module
- [x] RF433 T/R M5Stack
- [x] CC1101 (Sub-Ghz)
- [X] RF Frequency
- [x] Replay
- [x] Read tag
- [x] Read 125kHz
- [x] Clone tag
- [x] Write NDEF records
- [x] Amiibolink
- [x] Chameleon
- [x] Write data
- [x] Erase data
- [x] Save file
- [x] Load file
- [x] Config
- [X] RFID Module
- [x] PN532
- [x] PN532Killer
- [X] RFID Module
- [ ] Emulate tag
- [x] TV-B-Gone
- [x] IR Receiver
- [x] Custom IR (NEC, NECext, SIRC, SIRC15, SIRC20, Samsung32, RC5, RC5X, RC6)
- [x] Config
- [X] Ir TX Pin
- [X] Ir RX Pin
- [x] Broadcast standard
- [x] Broadcast reserved
- [x] Broadcast stop
- [ ] FM Spectrum
- [ ] Hijack Traffic Announcements
- [ ] Config
- [X] NRF24 Jammer
- [X] 2.4G Spectrum
- [ ] Mousejack
- [X] Mic Spectrum
- [X] QRCodes
- [x] Custom
- [x] PIX (Brazil bank transfer system)
- [x] SD Card Mngr
- [x] View image (jpg)
- [x] File Info
- [x] Wigle Upload
- [x] Play Audio
- [x] View File
- [x] LittleFS Mngr
- [x] WebUI
- [x] Server Structure
- [x] Html
- [x] SDCard Mngr
- [x] Spiffs Mngr
- [x] Megalodon
- [x] BADUsb (New features, LittleFS and SDCard)
- [x] USB Keyboard - Cardputer and T-Deck Only
- [x] iButton
- [x] LED Control
- [X] RTC Support
- [X] NTP time adjust
- [X] Manual adjust
- [X] Send File
- [X] Receive File
- [X] Send Commands
- [X] Receive Commands
- [x] Brightness
- [x] Dim Time
- [x] Orientation
- [X] UI Color
- [x] Boot Sound on/off
- [x] Clock
- [x] Sleep
- [x] Restart
Specific functions per Device, the ones not mentioned here are available to all.
| Device | CC1101 | NRF24 | FM Radio | PN532 | Mic | BadUSB | RGB Led | Speaker | Fuel Guage | LITE_VERSION | | --- | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: | :---: | | M5Stack Cardputer (and ADV) | :ok: | :ok: | :ok: | :ok: | :ok: | :ok: | :ok: | NS4168 | :x: | :x: | | M5Stack M5StickC PLUS2 | :ok: | :ok: | :ok: | :ok: | :ok: | :ok:¹ | :x: | Tone | :x: | :x: | | M5Stack M5StickC PLUS | :ok: | :ok: | :ok: | :ok: | :ok: | :ok:¹ | :x: | Tone | :x: | :x:² | | M5Stack M5Core BASIC | :ok: | :ok: | :ok: | :ok: | :ok: | :ok:¹ | :x: | Tone | :x: | :x: | | M5Stack M5Core2 | :ok: | :ok: | :ok: | :ok: | :ok: | :ok:¹ | :x: | :x: | :x: | :x: | | M5Stack M5CoreS3/SE | :ok: | :ok: | :ok: | :ok: | :x: | :ok: | :x: | :x: | :x: | :x: | | JCZN CYD‑2432S028 | :ok: | :ok: | :ok: | :ok: | :x: | :ok:¹ | :x: | :x: | :x: | :x:² | | Lilygo T‑Embed CC1101 | :ok: | :ok: | :ok: | :ok: | :ok: | :ok: | :ok: | :ok: | :ok: | :x: | | Lilygo T‑Embed | :ok: | :ok: | :ok: | :ok: | :ok: | :ok: | :ok: | :ok: | :x: | :x: | | Lilygo T-Display-S3 | :ok: | :ok: | :x: | :x: | :x: | :ok: | :x: | :x: | :x: | :x: | | Lilygo T‑Deck (and pro) | :ok: | :x: | :x: | :x: | :x: | :ok: | :x: | :x: | :x: | :x: | | Lilygo T-Watch-S3 | :x: | :x: | :x: | :x: | :x: | :ok: | :x: | :x: | :x: | :x: | | Lilygo T-LoRa Pager | :x: | :x:
