Ross ROSS = Recommend OSS · open-source software intelligence for agents

BruceDevices/firmware

Predatory ESP32 Firmware observed · 2026-08-28

github.com/BruceDevices/firmware · homepage · C++ · AGPL-3.0 (copyleft) observed · 2026-08-28

Health v2 · maintenance only

90/100

  • Activity 99
  • Release rhythm 97
  • Longevity 60
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: 21
  • age_days: 853
  • days_rel: 22
  • days_push: 7
  • n_releases_24m: 24

Full methodology

Adoption not part of the score

6570 stars · 2177 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Bruce is an open-source (AGPL-3.0) ESP32 firmware packed with offensive-security and Red Team tools such as WiFi attacks, Evil Portal, wardriving, Sub-GHz/RF, NFC/RFID, IR, and BadUSB. It runs on M5Stack, LILYGO, Elecrow, and custom ESP32-based boards like the Cardputer, Sticks, and the official RF REAPER devkit.

Use cases

  • flash offensive security firmware onto an ESP32 or M5Stack Cardputer
  • run WiFi deauth and beacon spam attacks for red team engagements
  • capture and replay Sub-GHz RF and NFC/RFID signals
  • do wardriving and WiFi network discovery with GPS
  • set up an evil portal captive page for phishing assessments
  • use a cheap Flipper Zero alternative for pentesting on the go
  • send BadUSB payloads from a portable device
  • capture EAPOL handshakes for WiFi auditing

When to choose

  • you want an open-source, community-driven alternative to Flipper Zero on affordable ESP32 hardware
  • you need a portable multi-tool for WiFi, RF, NFC, IR, and BadUSB testing
  • you own M5Stack, LILYGO, or compatible ESP32-S3 devices and want red team tooling
  • you want regular releases, a web flasher, and active community support

When to avoid

  • you need a legally safe tool for networks you do not own or have authorization to test
  • you want a polished consumer product rather than hacker firmware
  • your board is not ESP32-based or is not in the supported device list
  • you need enterprise-grade reporting or compliance features from a pentest platform

Facets

application · maturity active

security penetration-testing embedded iot networking nlp penetration-testing security iot embedded-systems hardware embedded iot cpp cross-platform esp32 red-team flipper-zero-alternative m5stack wifi-attacks subghz nfc rfid badusb wardriving evil-portal firmware

5 sources

Member repositories

RepositoryRoleHealth v2
BruceDevices/firmwaremain90

For agents

markdown · JSON · MCP: product_card(name="BruceDevices/firmware")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem