Overview

The Ultra V3 by Sacred Labs is an 18-pin board that connects to the GPIO on top of the Flipper Zero device. This board features an ESP32-WROOM-32UE chip with Marauder firmware pre-loaded, a CC1101 for Sub-GHz operations, and an NRF24 for 2.4GHz device testing.

Key Features

  • ESP32-WROOM-32UE: Marauder firmware pre-loaded
  • NRF24: 2.4GHz wireless device testing
  • CC1101: Sub-GHz frequency extension
  • USB-C Port: Easy firmware updates
  • Micro SD Slot: Expandable storage for Marauder
  • 18-pin GPIO: Secure, flat connection

Important Requirements

You will need unofficial firmware on your Flipper Zero. We use and test devices using Momentum firmware, but you may choose another one that supports the required applications.

View Firmware Guide

Board Components

For a comprehensive guide covering all components and their functionality, visit our detailed components guide:

Component Guide

ESP32 with Marauder

Chip: ESP-WROOM-32UE

Primary Use: WiFi security testing and Bluetooth scanning

What is Marauder?

ESP32 Marauder by justcallmekoko is a comprehensive WiFi and Bluetooth testing suite that comes pre-loaded on FlipMods boards. It provides capabilities for:

  • WiFi network scanning and analysis
  • Deauthentication attacks on WiFi networks
  • Bluetooth device scanning
  • And many more which you could find in the wiki

Hardware Controls

USB-C Port: Used for uploading firmware to the ESP32 chip.

R/Reset Button: Resets the ESP32 chip. Use if the ESP32 becomes unresponsive or after firmware updates.

B/Boot Button: Puts ESP32 into boot/flash mode. Hold while connecting USB for firmware updates or troubleshooting.

How to Access Marauder

Navigate to: Apps > GPIO > ESP > [ESP32] WiFi Marauder

To learn more about how Marauder works and explore advanced features, visit the official documentation:

Marauder Wiki

Updating Marauder Firmware

Keep your ESP32 Marauder firmware up to date for the latest features and security improvements.

View Update Guide

Hardware Controls

USB-C Port: Used for uploading firmware to the ESP32 chip.

R/Reset Button: Resets the ESP32 chip. Use if the ESP32 becomes unresponsive or after firmware updates.

B/Boot Button: Puts ESP32 into boot/flash mode. Hold while connecting USB for firmware updates or troubleshooting.

2.4GHz Frequency Limitation

The ESP32-WROOM-32UE chip and antennas operate on 2.4GHz, so testing will work on 2.4GHz networks. Deauth attacks will not work on every network due to 5GHz frequency limitations or enhanced security protections.

NRF24 Module

Frequency: 2.4GHz

Primary Use: Wireless mouse/keyboard testing

What is NRF24?

The NRF24 module operates on the 2.4GHz frequency band and is designed to test the security of wireless mice and keyboards that use unencrypted communications.

Using NRF24

For Ultra V3: Set your board's switch to the NRF24 position. Use the [NRF24] Sniffer application to scan for vulnerable wireless mice and keyboards, then use [NRF24] Mouse Jacker to test connections.

Important Limitations

  • Only works with vulnerable devices
  • Not every wireless mouse/keyboard will work
  • Device must use insecure communication protocols
  • Modern devices with proper encryption won't be affected

CC1101 Module

Optimal Frequency: 433MHz

Primary Use: Sub-GHz range extension

What is CC1101?

The CC1101 is a sub-GHz transceiver that significantly extends the range and capabilities of your Flipper Zero's built-in Sub-GHz radio. It's designed for the 433MHz frequency band.

Key Benefits

  • Extended Range: Much greater transmission/reception distance
  • 433MHz Focus: Excellent performance on the most common frequency

Using CC1101

For Ultra V3: Set your board's switch to the CC1101 position. Open SubGHz application → Radio Settings → Change module from "Internal" to "External". The CC1101 module now enhances all SubGHz applications with extended range and better signal quality.

Important Limitations

CC1101 chips perform best on 433MHz due to the enhanced chip and antenna configuration. While other frequencies work, 433MHz provides the best range and signal quality.

Antennas

The Ultra V3 board requires specific antennas for optimal performance across all components. Look for frequency labels (433MHz or 2.4GHz) printed next to each antenna connector on the board.

2.4GHz Antennas (2 Required)

2.4GHz Antenna

Used for: ESP32 and NRF24

433MHz Antenna (1 Required)

433MHz Antenna

Used for: CC1101

Hardware Controls

Power Switch

Toggle between NRF24 and CC1101 modules. The ESP32 with Marauder remains powered regardless of switch position.

Setup Instructions

1

Install Unofficial Firmware

Flash your Flipper Zero with Momentum firmware for full compatibility.

View Guide
2

Prepare SD Card (Optional)

Use an SD card ≤32GB, initialized as FAT32. Some brands may not work with Marauder - ensure SD card is inserted before turning the board on.

3

Set Switch Position

Have the switch set to either CC1101 or NRF24 before turning on.

4

Connect Board Safely

Ensure the Flipper Zero is off when plugging the Ultra V3 in.

Video Tutorial

Legal Notice

Always ensure you are following the laws and regulations of your area when using all components. Only test on networks and devices you own or have explicit permission to test. The user is fully responsible for complying with all applicable laws and regulations.