{"repo":"cifertech/ESP32-DIV","free":true,"listed":false,"github":"https://github.com/cifertech/ESP32-DIV","clone":"git clone https://github.com/cifertech/ESP32-DIV.git","description":"ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32","language":"C++","stars":3752,"topics":["arduino","attack","bluetooth","deauthentication-attack","deauther","defense","esp32","esp32-s3","espressif","flipper-zero","flipperzero","hack","infrared-control","offensive","scanner","security-tool","sniffer","spammer","subghz","wifi"],"license":"MIT","category":"hardware_security_toolkit","readme_excerpt":"
\n\n \"ESP32-DIV\n\n
\n
\n\n

\n \n \n \n \n \n \n

\n\n

\n \n \n \n \n

\n\n
\n\n \n\n## 📖 Explore the ESP32-DIV Wiki\n\nComplete project story, in-depth tutorials, and all the features in [Wiki](https://github.com/cifertech/ESP32-DIV/wiki)! From Wi-Fi deauthentication attacks to Sub-GHz signal replay, the Wiki covers everything you need to get started. [Click here to explore now!](https://github.com/cifertech/ESP32-DIV/wiki)\n\n> ⚡ **Skip the IDE** — flash directly from your browser at [cifertech.github.io/ESP32-DIV](https://cifertech.github.io/ESP32-DIV)\n\n
 
\n\n\n## :star2: About the Project\nESP32-DIV is an open-source, multi-band wireless toolkit built on the **ESP32-S3**. It covers Wi-Fi, BLE, 2.4GHz, Sub-GHz, IR, RFID/NFC, and GPS. all from a compact handheld device with a touchscreen UI. Whether you're analyzing wireless traffic, testing signal resilience, or building your own RF tools, ESP32-DIV gives you a single platform to do it all.\n\n\n> [!WARNING]\n> This project is intended for **educational and research purposes only**. Use only on networks and devices you own or have explicit permission to test. Unauthorized use may violate local laws.\n\n\n\n\n\n\n## :dart: Features\n
\n📡 Wi-Fi\n \n| Tool | Description |\n|------|-------------|\n| Packet Monitor | Real-time waterfall graph across all 14 channels; optional PCAP logging to SD |\n| Wi-Fi Scanner | Lists nearby networks with extended details |\n| Beacon Spammer | Broadcasts fake SSIDs (custom or random) |\n| Deauth Attack | Sends deauthentication frames to disrupt client connections |\n| Deauth Detector | Monitors for incoming deauth attacks |\n| Captive Portal | AP + DNS + web server; clone networks and force sign-in pages |\n| Probe Flood | Floods probe requests to stress-test APs |\n| Hidden SSID Revealer | Forces hidden networks to expose their SSID |\n| WPS Scanner | Detects access points with WPS enabled |\n| ARP Scanner | Maps all devices on a network with IP and MAC after joining |\n| Karma Attack | Listens for probe requests and impersonates saved networks to auto-connect devices |\n\n
\n
\n🔵 Bluetooth\n \n| Tool | Description |\n|------|-------------|\n| BLE Scanner | Discovers hidden and visible BLE devices |\n| BLE Sniffer | Tracks MAC, RSSI, packet count, and last-seen time |\n| BLE Spoofer | Broadcasts fake BLE advertisements |\n| Sour Apple | Spoof Apple BLE advertisements (e.g., AirDrop popups) |\n| BLE Jammer | Disrupts BLE and classic Bluetooth channels |\n| BLE Rubber Ducky | Acts as a BLE keyboard; executes scripts from `/ducky` on SD |\n| AirTag Spoofer | Broadcasts fake AirTag signals into the Find My network |\n| AirTag Sniffer | Monitors for AirTags in range |\n| Skimmer Detect | Scans for BLE signatures matching known card skimmer profiles |\n\n
\n
\n📶 2.4GHz / NRF24\n \n| Tool | Description |\n|------|-------------|\n| 2.4GHz Scanner | Spectrum analyzer across 128 channels (Zigbee, custom RF, etc.) |\n| Protokill | Disrupts Zigbee, Wi-Fi, and other 2.4GHz protocols |\n| ESB Sniffer | Passively captures Enhanced ShockBurst NRF24 packets |\n| ESB Replay | Replays captured ESB packets |\n| MouseJack Scan | Detects vulnerable wireless mice and keyboards |\n| MouseJack Inject | Injects keystrokes into vulnerable wireless receivers |\n\n
\n
\n📻 Sub-GHz\n \n| Tool | Description |\n|------|-------------|\n| Replay Attack | Captures and replays Sub-GHz commands (e.g., garage doors, remotes) |\n| Sub-GHz Jammer | Disrupts Sub-GHz communication across various bands |\n| Saved Profiles | Stores and manages captured signal profiles |\n| De Bruijn / Brute Force | Cycles through all possible fixed codes for Sub-GHz remotes |\n| Jamming Detector | Receive-only monitor that detects Sub-GHz jamming attacks (e.g. car-fob jamming) |\n\n
\n
\n📺 Infrared (IR)\n \n| Tool | Description |\n|------|-------------|\n| IR Replay Attack | Captures real IR presses, visualizes, replays, and saves to SD |\n| IR Saved Profiles | Browses IR captures; preserves signal and carrier frequency |\n| Universal IR Controller | Built-in profiles, SD imports, favorites, and remote-style control |\n\n
\n
\n🧲 RFID / NFC\n \n| Tool | Description |\n|------|-------------|\n| Card Reader | Reads UID and tag identification |\n| Card Clone | Copies supported writable tags |\n| Dump | Reads sectors/blocks when keys are available |\n| Decode Access | Interprets access bits and ACL-style fields from dumps |\n| Erase | Wipes supported writable tags |\n| Jam Reader | Impedes another reader with RF patterns |\n| Tag Disrupt | Advanced disruption flows for authorized physical tests |\n| Disrupt Emulate | Disruption combined with emulation-style flows |\n\n
\n
\n🛰️ GPS\n \n| Tool | Description |\n|------|-------------|\n| Wardriver | Logs GNSS position with Wi-Fi/BLE observations to SD |\n| Satellite Scanner | Shows satellites in view, signal strength, and fix diagnostics |\n\n
\n
\n🧰 Device & System\n \n| Tool | Description |\n|------|-------------|\n| Serial Monitor | Mirrors serial traffic on the TFT for field debugging |\n| SD File Manager | Browses and manages files on the SD card |\n| Update Firmware | Flashes new firmware from SD |\n| Touch Calibrate | Four-corner XPT2046 touchscreen calibration |\n| Settings | Brightness, dark/light theme, NeoPixel, background auto-scan |\n\n
\n\n
 
\n\n \n\n \n \n \n
\n \"ESP32-DIV\n

ESP32-DIV v2

\n
\n\n\n \n \n \n \n
\n \"ESP32-DIV\n

ESP32-DIV Beta

\n 		\n \"ESP32-DIV\n

ESP32-DIV v1

\n
\n\n
 
\n\n \n## 🔧 Hardware Overview\n\nESP32DIV consists of two boards:\n\n### 🧠 Main Board\n- **ESP32-S3** – Main microcontroller with Wi-Fi and BLE\n- **ILI9341 TFT Display** – 2.8\" UI display\n- **LF33** – 3.3V regulator\n- **IP5306** – Lithium battery charging and protection\n- **CP2102** – USB to serial for flashing\n- **PCF8574** – I/O expander for buttons\n- **SD Card Slot** – Stores logs and captured signals\n- **Push Buttons** – Navigation and interaction\n- **Antenna Connector** – External antenna support\n- **WS2812 NeoPixels** - Giving better feedback\n- **Buzzer** - It shares a GPIO with the battery voltage divider, so using it is optional.\n\n### 🛡️ Shield\n- **3x NRF24 Modules** – 2.4GHz jamming and spoofing\n- **1x CC1101 Module** – Sub-GHz jamming and replay\n- **Multiple antennas** - Extended range\n- **IR Transceiver** - Capture & replay IR remotes\n\n
 
\n\n\n \n \n \n \n
\n \"ESP32-DIV\n

ESP32-DIV v2 Main Board

\n 		\n \"ESP32-DIV\n

ESP32-DIV v2 Shield

\n
\n\n\n \n
\n