# seemoo-lab/nexmon

The C-based Firmware Patching Framework for Broadcom/Cypress WiFi Chips that enables Monitor Mode, Frame Injection and much more

Repository: https://github.com/seemoo-lab/nexmon
Canonical: https://ross.abutalabs.com/products/nexmon
Language: C
License: GPL-3.0
License Family: copyleft
Topics: nexmon, broadcom, firmware, patching, framework, smartphone, rpi
Last push: 2026-07-13T17:06:43+00:00

## Health v2 (maintenance only)
Score: 64/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 92, release rhythm 8, longevity 100
- inputs: {"age_days": 3597, "days_push": 51, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2876, forks 505 (observed 2026-08-28T04:07:27.351830+00:00)

## What it is
Nexmon is a C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables custom firmware modifications such as monitor mode with radiotap headers and frame injection. It targets smartphones, Raspberry Pi devices, and other embedded hardware, and supports related projects like Wi-Fi CSI extraction and software-defined radio use.

## Use cases
- enable monitor mode on Broadcom WiFi chips
- inject WiFi frames from a smartphone or Raspberry Pi
- capture raw 802.11 packets with radiotap headers
- extract channel state information from WiFi transmissions
- use a WiFi chip as a software-defined radio
- patch WiFi firmware for wireless security research

## When to choose
- you need monitor mode or frame injection on unsupported Broadcom/Cypress hardware
- you are doing WiFi security research on Android devices or Raspberry Pi
- you want low-level firmware-level access to a WiFi chipset

## When to avoid
- you need a plug-and-play solution with no firmware flashing
- your WiFi chipset is not in the supported device list
- you cannot risk bricking hardware or voiding warranties

## Facets
- artifact type: framework
- maturity: maintenance
- function: security, networking, embedded, reverse-engineering
- domain: security, embedded-systems, networking, hardware
- platform: embedded, cpp
- tags: wifi, firmware-patching, monitor-mode, frame-injection, broadcom, cypress, software-defined-radio, wireless-security, android, linux

## Member repositories
- seemoo-lab/nexmon (main) score 64

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:27.351830+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:35:42.524747+00:00, confidence not recorded.
  - readme: https://github.com/seemoo-lab/nexmon (fetched 2026-08-28T04:07:27.351830+00:00, sha 3932b6464301)
- Data as of 2026-08-30T08:39:29.467469+00:00.