// the find
Fr4nkFletcher/ESP32-Marauder-Cheap-Yellow-Display
ESP32Marauder Cheap Yellow Display
A port of the ESP32 Marauder WiFi/Bluetooth security testing firmware to the cheap ($10-20) ESP32 touchscreen displays sold on AliExpress and Amazon. It turns a commodity display module into a handheld tool for WiFi scanning, deauth testing, BLE analysis, evil portals, wardriving, and Flipper Zero-style BLE spam. For hardware hackers and pentesters who want a purpose-built device without paying for a Flipper Zero or Hak5 gear.
Covers an impressive hardware matrix — ten different CYD variants across resistive and capacitive touch, multiple display controllers (ILI9341, ST7789, ST7796), and both ESP32 and ESP32-S3. The web flasher is a genuine quality-of-life win: plug in, hold BOOT, click Program, done — no Arduino IDE required for most users. Active feature cadence: wardriving, AirTag sniffing/spoofing, Pwnagotchi detection, and BLE analyzer all landed in the last year. Vendoring libraries directly in the repo means the build doesn't break when upstream Adafruit pushes a breaking change.
The repo structure is a mess — each hardware variant gets its own top-level directory with a full copy of the source and all vendored libraries, so there's no shared codebase. A bug fix means patching it in multiple places and hoping the maintainer remembered all of them. No CI beyond the web flasher's GitHub Actions pages deployment, so there's no guarantee any given commit compiles across all targets. Documentation for building from source is thin: it points you at another repo's wiki and a third-party tutorial rather than owning the setup steps. The disclaimer 'for educational purposes only' does nothing — this is a deauth and evil portal tool, and anyone using it should understand the legal exposure in their jurisdiction before plugging it in.