Flipper Zero

[NOT Sword Fighter Super]

Any of you get one of these as well?


It seems to have an impressive array of capabilities, but I'm not sure what to really do with it yet.

So far I've managed to install the unleashed custom firmware and I've been turning all the TVs off in stores and I've spammed the customer service buttons at Lowe's but this is all kid shit.

Any suggestions? The badusb feature seems like it has some potential.

 

[REGENDarySumanai]

I've been wanting one, but no money.

 

[byuu]

Just seems like an expensive toy to me.
It can't really do anything that I can't achieve with some cheap 5$ module.

 

[888Flux]

It's a Portapack for tiktok retards. Completely useless gimmick toy that's a $10 alibaba ESP32 in plastic housing with firmware pulled from Github. It's success as a product is from an aggressive shilling campaign which is why you see it on the Internet everywhere

 

[Whatevermancer]

How could a normie like me benefit from this device?

 

[Uncle Sid]

Book as many cheap Carnival cruise trips as you can as soon as you can - show up early, and you can clone every room's key because they just leave them hanging on each cabin door for when the guests arrive. Each key you clone is basically an unlimited spending account onboard, as well as offering room access. Can also clone keys to get into secure (staff) locations, access pretty much whatever you want.

 

[TracdacianTortoise]

It’s an STM32 chip in a nice case and some functionality built in. The main thing you’d be doing with it is fucking with shit, unless you’re already doing embedded electronics where a cheap tool to debug IR, Bluetooth or NFC would be quite useful, it’s mostly a gimmick product to fuck with peoples TVs. It’s evidently aping the early 2000s kids toys that use 433 MHz to send messages to each other, sort early, gimped version of texting for kids, like the Cybiko, which hackers later used as cheap test platforms for various 433 MHz tricks.

 

[Ultrapenguin]

It was apparently funded from kickstarter, which means naturally it's someone reinventing something that already existed and was entirely functional, but with a new coat of paint and more expensive.

You can tell just from the pointless gay-shit retro video game aesthetic and vaguely Asiatic looking writing that this was made to target a specific demographic of consoomers who love Nintendo, cyberpunk, and probably post a lot on Reddit.

Of course looking it up also demonstrates the futility of trying to find actual critical analysis of anything these days, because it's all obvious marketing bullshit and the usual suspects doing the usual.

 

[Car Won't Crank]

Looks like some Tamagochi clone nostalgia bait.

 

[Epic Fail Man]

What even is this thing? Can I use it to hack into bank atms or is it just a useless novelty pretend device?

 

[NOT Sword Fighter Super]

Looks like some Tamagochi clone nostalgia bait.

I never had or wanted one but I think they specifically reference those as design inspiration.

It’s an STM32 chip in a nice case and some functionality built in. The main thing you’d be doing with it is fucking with shit, unless you’re already doing embedded electronics where a cheap tool to debug IR, Bluetooth or NFC would be quite useful, it’s mostly a gimmick product to fuck with peoples TVs. It’s evidently aping the early 2000s kids toys that use 433 MHz to send messages to each other, sort early, gimped version of texting for kids, like the Cybiko, which hackers later used as cheap test platforms for various 433 MHz tricks.

I am going to use the NFC function, I just haven’t had a chance yet.

 

[Coolio55]

I've got one but by the time it arrived I moved into the middle of nowhere and now haven't got any fun things to do with it.
Still useful if I need to turn off the TV in some horrible waiting room though.

 

[Cpt. Stud Beefpile]

How could a normie like me benefit from this device?

What even is this thing? Can I use it to hack into bank atms or is it just a useless novelty pretend device?

I'm going to give a genuine attempt to answer this question while not taking up an entire page's worth of turbonerding.

1. The MicroSD card, Dpad and minimalist GUI make it able to easily remote-control anything that has an infrared receiver, giving you the ability to have a TRULY universal remote. Not just TV's - AC's, air filters, fans, industrial machinery, etc. Anyone with 6th grade computer skills can get new IR codes and share them.
2. Bank ATM's have dye packs and now GPS trackers (after multiple thefts of the whole ATM) so you ain't robbing one of those anyway.
3. BUT - with custom firmware it can pick locks! Source: https://github.com/DarkFlippers/unleashed-firmware/blob/dev/documentation/SentrySafe.md
4. You can also copy rolling code-based devices such as garage door openers and car key fobs. Not posting the sources for that one, don't misuse them if you find them.
5. The direct circuit access enables a massive array of possibilities to a serious maker/hacker, most common one is a WiFi de-authentication/handshake capture module. I made a decent flashlight with 5v LED's running out the 5v rail, will post a picture if someone wants to see it.
6. Flipper can copy/emulate both high-frequency and low-frequency access badges/cards, getting you into anything from a secured building to a subway turnstile. From experience I made a backup of someone's apartment-access keyfob with their permission and it worked flawlessly. You could even bump on someone with the Flipper in "read" mode and capture their keycard without their knowledge. Obviously - don't. https://blog.flipperzero.one/rfid/
7. The "detect reader" function - where you put the Flipper up against the big black plastic card reader itself - creates a logfile on the flipper, with it you can calculate the card password. WARNING: Doing this without explicit written permission can get you arrested for lockpicking, breaking & entering, etc..

 

[Cpt. Stud Beefpile]

So funny relevant story:

Today I got observed by a complete rando trying to use my Flipper to see if it could pick up the signal from the wireless microphone he was using. Turns out it can't; it uses a frequency range just above 464 Mhz and well below 779 Mhz.

After an extensive friendly Q&A on what it can and cannot do (he'd seen a tech news article and was hella curious), Mr. Rando made a very good comparison: the Flipper is a digital wand no more inherently good or evil than the person using it.

In the hands of a novice, it's an expensive cute toy, like an Apple device, good for pranks and parlor tricks like turning off a lobby TV or the station on your sister's stereo to a talk radio show.

In the hands of a knowledgeable user a Flipper is an incredibly useful tool; a digital Swiss army knife. Make a backup employee card, use it to run your Powerpoint slide.

And a Flipper in the hands of someone with bad intent as well as knowing the technological 'Deep Magic' is a serious threat. Loading up a BadUSB script that gives you remote access to any computer you can get close enough to, stealing a Wifi network's handshake to crack at one's leisure, or copying a the badge of a distracted zoo employee with access to the venomous snake enclosures are merely a FEW of the possibilities.

 

[888Flux]

-

Flipper can copy/emulate both high-frequency and low-frequency access badges/cards, getting you into anything from a secured building to a subway turnstile. From experience I made a backup of someone's apartment-access keyfob with their permission and it worked flawlessly. You could even bump on someone with the Flipper in "read" mode and capture their keycard without their knowledge. Obviously - don't.

So can most phones. https://f-droid.org/en/packages/se.anyro.nfc_reader/

You can also copy rolling code-based devices such as garage door openers and car key fobs. Not posting the sources for that one, don't misuse them if you find them.

This isn't true at all. For any RF device using a rolling code you first must block the original carrier from arriving at the receiver. This is how you obtain the rolling code. The Flipper Zero doesn't have the ability to do that. It can execute babby's first replay attack on maybe your neighbors IR remote for their garden lights but outside of that it's a toy.

The hackerman LARP is really getting on my nerves. I am jealous that whoever came up with the idea of this gimmicky bullshit is making millions off a $30 toy sold to manchildren.

 

[byuu]

Seems like a good tool to LARP as a hacker.
I connected a LED to a power source - ph43r my l33t sk1llz.

Just get a cheap microcontroller board unless you really like that dolphin sprite.

 

[REGENDarySumanai]

Sounds like it would go well with the rings from Dangerous Things.

 

[Dr. Isaac Kleiner]

So this thing is pretty much like the multitool from Deus Ex. Cool!

 

[Cpt. Stud Beefpile]

Sounds like it would go well with the rings from Dangerous Things.

Wow, thanks for the rabbit hole! Never much heard of 'biohacking' before.

And yeah this would work well - pair an Id on a ring, pick from a whole list if you like. Even in a secure place that won't allow any personal electronics, you can take your ring in.

So this thing is pretty much like the multitool from Deus Ex. Cool!

It's probably as close as you're likely to see in the near future. It could definitely use a few more built-in gizmos, though. Notably built-in WiFi, a short-range camera, some more frequency ranges...I just found a working POCSAG broadcast and there's a community decoding app, but it's way outside the three bands the Flipper can use.

 

[Ebonic Tutor]

lol if you got wifi marauder here is a TND Beacon spam.... Think like the rick roll, but TND.

I'm running xtreme firmware

If you got that much figured out add the file to SD Card/apps_data/marauder/scripts



It doesn't do anything else other than spam the beacons, and I wont add anything else... I would consider a TTD version no prob though. Just let me know the messages.

EDIT... oh shit wouldn't let me add the json.

here is a link, just save as a .json and add to the directory I think?

https://small.fileditchstuff.me/s5/TxwTbZttrkXqmYpKsxMl.json