// the find
justcallmekoko/ESP32Marauder
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
ESP32 Marauder turns cheap ESP32 hardware into a handheld WiFi/Bluetooth auditing tool. It runs on a surprising number of targets — Flipper Zero dev boards, M5Stack devices, custom PCBs the author sells — and covers the classics: deauth, beacon spam, evil portal, PMKID capture, BLE scanning. This is for security researchers and hobbyists who want a $30 pocket radio for network auditing and don't want to write firmware from scratch.
The hardware support breadth is genuinely impressive — a single codebase with build variants for a dozen different devices, each with its own `User_Setup_*.h`, is a lot of integration work that most projects skip. The project ships pre-built binaries with hardware-specific Python flashers, so getting it onto a device is genuinely easy for non-Arduino users. The Flipper Zero integration is well-thought-out and has clearly been maintained long enough to track multiple board revisions. Active development is real — last push was yesterday, and the git history shows consistent releases going back to 2019.
The main `.ino` file with all those `configs.h` compile-time feature flags is classic Arduino spaghetti — there's no clean abstraction boundary between hardware HAL and attack logic, which makes it hard to add a new target or feature without touching everything. The README is essentially a storefront with a wiki link; actual documentation of what each attack does and what conditions make it effective lives elsewhere (or doesn't exist). Bundling binary blobs and ancient previous-version `.bin` files directly in the repo is poor hygiene — the repo is bloated and there's no obvious reason not to use GitHub Releases for all of it. The evil portal feature stores credentials somewhere, but there's no mention of how they're handled or cleared, which is the kind of thing that bites people who forget to wipe their SD card.