Component Guides

Detailed guides for the individual components used in FlipMods boards

Prerequisites

Before using any components, ensure you have Momentum firmware or another compatible unofficial firmware installed on your Flipper Zero.

Install Firmware

ESP32 with Marauder

Chip: ESP-WROOM-32UE

Primary Use: WiFi security testing and Bluetooth scanning

Boards: Ultra V3, Combo, Mini

What is Marauder?

ESP32 Marauder by justcallmekoko is a comprehensive WiFi and Bluetooth testing suite that comes pre-loaded on FlipMods boards. It provides capabilities for:

  • WiFi network scanning and analysis
  • Deauthentication attacks on WiFi networks
  • Bluetooth device scanning
  • And many more which you could find in the wiki

Hardware Controls

USB-C Port: Used for uploading firmware to the ESP32 chip.

R/Reset Button: Resets the ESP32 chip. Use if the ESP32 becomes unresponsive or after firmware updates.

B/Boot Button: Puts ESP32 into boot/flash mode. Hold while connecting USB for firmware updates or troubleshooting.

Using ESP32 Marauder

1. Access Marauder

When using unofficial firmware such as Momentum, the Marauder app will be included and you can access it using Apps > GPIO > ESP > [ESP32] WiFi Marauder.

2. Choose Function

Select from various Marauder functions like WiFi scan, Bluetooth scan, or advanced attacks.

Resources

Documentation

Visit the official Marauder Wiki for detailed documentation and advanced features

Marauder Wiki

Updates

Keep your Marauder firmware up to date with the latest features

Update Guide

Video Tutorial

Watch an excellent overview of ESP32 Marauder capabilities by Talking Sasquach

Watch Tutorial

2.4GHz Frequency Limitation

The ESP32-WROOM-32UE chip and antennas operate on 2.4GHz, so testing will work on 2.4GHz networks. Deauth attacks will not work on every network due to 5GHz frequency limitations or enhanced security protections.

NRF24 Module

Frequency: 2.4GHz

Primary Use: Wireless mouse/keyboard testing

Boards: Ultra V3, Hub

What is NRF24?

The NRF24 module operates on the 2.4GHz frequency band and is designed to test the security of wireless mice and keyboards that use unencrypted communications.

Important Limitations

  • Only works with vulnerable devices
  • Not every wireless mouse/keyboard will work
  • Device must use insecure communication protocols
  • Modern devices with proper encryption won't be affected

Using NRF24

1. Power the Module

For Ultra V3: Set your board's switch to the NRF24 position. For Hub: Connect the NRF24 module to power it.

2. Scan for Devices

Use the [NRF24] Sniffer application to scan for vulnerable wireless mice and keyboards that use insecure protocols.

3. Test Connection

If a vulnerable device is found, use [NRF24] Mouse Jacker to test the connection.

Applications

  • [NRF24] Sniffer: Scans for vulnerable 2.4GHz devices
  • [NRF24] Mouse Jacker: Attempts to connect to vulnerable devices

CC1101 Module

Optimal Frequency: 433MHz

Primary Use: Sub-GHz range extension

Boards: Ultra V3, Combo, Hub

What is CC1101?

The CC1101 is a sub-GHz transceiver that significantly extends the range and capabilities of your Flipper Zero's built-in Sub-GHz radio. It's optimized for the 433MHz frequency band.

Key Benefits

  • Extended Range: Much greater transmission/reception distance
  • 433MHz Focus: Excellent performance on the most common frequency

Using CC1101

1. Power the Module

For Ultra V3: Set your board's switch to the CC1101 position. For Combo: The CC1101 will stay on and doesn't need a switch. For Hub: Connect the CC1101 module to power it.

2. Configure SubGHz Settings

Open SubGHz application → Radio Settings → Change module from "Internal" to "External".

3. Use SubGHz Functions

The CC1101 module now enhances all SubGHz applications with extended range and better signal quality.

Optimal Performance

CC1101 chips perform best on 433MHz due to the optimized chip and antenna configuration. While other frequencies work, 433MHz provides the best range and signal quality.

GPS Module

Module: L80RE-M37

Primary Use: Location tracking and navigation

Boards: Combo

What is GPS?

The L80RE-M37 is a GPS module that enables location tracking and navigation capabilities. The brown cube antenna is pre-attached to your board. For best results, use outdoors with clear sky visibility and no obstructions.

Enabling GPS

To enable GPS functionality on your Combo board with Momentum firmware, open the "MNTM" app → "Protocols" → "GPIO Pins" → "NMEA GPS UART" and select "Extra 15,16".

Important Limitation

Don't use GPS switch while the board is on.

Antennas

Types: 2.4GHz and 433MHz

Primary Use: Signal transmission and reception

Antenna Types

FlipMods boards come with antennas designed for specific frequency ranges to ensure maximum performance and signal quality.

2.4GHz Antenna

2.4GHz Antenna

Used for: ESP32 WiFi/Bluetooth and NRF24 operations

Designed for: 2.4GHz frequency band

Components: ESP32, NRF24

433MHz Antenna

433MHz Antenna

Used for: CC1101 Sub-GHz operations

Designed for: 433MHz frequency band

Components: CC1101

Important Notes

  • Frequency Matching: Each antenna is designed for its specific frequency range
  • Performance: Using the correct antenna ensures optimal signal strength and range
  • Board Labels: Look for "433MHz" or "2.4GHz" labels printed next to each antenna connector on the board to identify where each antenna should be connected

Legal and Ethical Use

All components should be used responsibly and legally. Users are fully responsible for ensuring compliance with all applicable laws and regulations:

  • Only test on networks and devices you own
  • Obtain explicit permission before testing third-party equipment
  • Follow local laws and regulations
  • Use for educational and research purposes
  • Respect privacy and security of others
  • Users bear full responsibility for their actions and compliance with laws