Bruce Firmware — Multi-Tool Security Platform
A feature-packed ESP32 security multi-tool firmware with sub-GHz RF capture/replay, IR, NFC, WiFi attacks, BLE, and BadUSB — often called the open-source Flipper Zero alternative with 5,000+ GitHub stars.
Overview
Bruce is the most popular open-source security multi-tool firmware for ESP32 devices, with over 5,000 GitHub stars and an extremely active community. It transforms hardware like the LILYGO T-Embed CC1101 into a comprehensive RF analysis and penetration testing platform — often described as a "Flipper Zero killer" at a fraction of the cost.
Key Features
- Sub-GHz RF (CC1101): Signal capture, replay, brute-force for known protocols, RAW signal analysis, and Flipper Zero .sub file compatibility
- NFC/RFID (13.56 MHz): Read, clone, and emulate MIFARE and NTAG tags
- Infrared: TV-B-Gone, custom IR signal capture and replay
- WiFi: Beacon spam, deauth detection, evil portal, packet monitor, wardriving
- BLE: Apple/Android/Windows BLE spam, BLE scanning
- BadUSB: HID keyboard injection scripts
- Polished UI: Menu-driven interface with rotary encoder navigation on T-Embed CC1101
Getting Started
Flash via the Bruce web flasher at the project website — no development environment needed. Select your board (T-Embed CC1101, T-Deck, etc.), click flash, and the firmware installs over USB. An SD card is recommended for storing captured signals and scripts.
Why This Project
Bruce has the largest community of any ESP32 security firmware, with frequent releases (v1.14+), extensive documentation via its wiki, and active development. The T-Embed CC1101 is the ideal hardware match, combining all the radios Bruce supports (CC1101 + WiFi + BLE + IR + RFID) in a compact, pocketable form factor.
