Welcome to the Flipper Zero Hacking Toolkit repository! This collection of files and tools is designed to help you explore and experiment with various hardware hacking techniques using the Flipper Zero device. Before diving into the world of hardware hacking, please take a moment to read this README carefully.
- Introduction
- Included Tools and Definitions
- NFID
- NFC
- Sub-GHz
- IR/IR Fuzzer
- Brute Force Attack
- iButton/iButton Fuzzer
- Bad USB
- Tool Repositories
- Disclaimer
- Getting Started
- System Requirements
- Usage and Caution
- Contributing
- Credits
- Security Best Practices
- Updates and Maintenance
- License
The Flipper Zero is a versatile hacking and security tool designed for exploring and interacting with various electronic devices. This repository contains a collection of files and tools that can be used in conjunction with the Flipper Zero device to perform various hardware hacking tasks. It's important to use these tools responsibly and legally.
NFID refers to the process of identifying and interacting with nearby electronic devices using radio frequency communication. This can include devices like RFID cards, access control systems, and more.
NFC is a subset of NFID that allows for two-way communication between devices over short distances. It is commonly used for contactless payments, access control, and data transfer between smartphones and other devices.
Sub-GHz frequencies refer to radio frequencies that are below 1 GHz. These frequencies are commonly used for wireless communication in devices like remote controls, IoT devices, and industrial applications.
Infrared (IR) communication involves the use of infrared light to transmit data between devices. An IR fuzzer can be used to test and interact with IR-based systems such as remote controls and IR receivers.
A brute force attack is a method of trying all possible combinations or passwords systematically in order to gain unauthorized access to a system or device.
iButton is a brand of electronic tokens that can be used for various applications, including access control. An iButton fuzzer is a tool for testing and interacting with iButton-based systems.
Bad USB refers to a type of attack where a compromised USB device, such as a USB keyboard or flash drive, is used to exploit vulnerabilities in a target system.
The apps/ folder bundles 256 .fap applications (built for Momentum firmware). The
tables below map every app to its upstream source repository, grouped by the on-device
category.
Notes:
- Links are best-effort. Where an app's catalog manifest points to an aggregator mono-repo, that repo is listed (e.g. many apps live in xMasterX/all-the-plugins).
- Apps marked Bundled with firmware ship inside the firmware itself and have no separate standalone repo — see Next-Flip/Momentum-Firmware and flipperdevices/flipperzero-good-faps.
- A handful are marked Unknown where no source repo could be confidently identified.
Primary upstream sources:
- Next-Flip/Momentum-Firmware — the firmware these apps target
- flipperdevices/flipperzero-firmware — official firmware
- flipperdevices/flipper-application-catalog — official app catalog (manifests + source URLs)
- flipperdevices/flipperzero-good-faps — official bundled apps
- xMasterX/all-the-plugins — community aggregator mono-repo
- djsime1/awesome-flipperzero — curated index of everything Flipper Zero
| App | Repository |
|---|---|
| ble_spam.fap | Bundled with firmware (official good-faps / Momentum) |
| bt_trigger.fap | xMasterX/all-the-plugins |
| findmy.fap | MatthewKuKanich/FindMyFlipper |
| hid_ble.fap | fidian/flipper-hid-app |
| pc_monitor.fap | TheSainEyereg/flipper-pc-monitor |
| App | Repository |
|---|---|
| fuzzer_ibtn.fap | DarkFlippers/Multi_Fuzzer |
| ibutton_converter.fap | Leptopt1los/ibutton_converter |
| ibutton.fap | Bundled with firmware (official good-faps / Momentum) |
| App | Repository |
|---|---|
| flame_rng.fap | OrionW06/Flame-RNG |
| flipper_xremote.fap | kala13x/flipper-xremote |
| hitachi_ac_remote.fap | dogtopus/flipperzero-hitachi-ac-remote |
| infrared.fap | Bundled with firmware (official good-faps / Momentum) |
| ir_intervalometer.fap | Nitepone/flipper-intervalometer |
| ir_remote.fap | Hong5489/ir_remote |
| ir_scope.fap | xMasterX/all-the-plugins |
| lidar_emulator.fap | regaly/flipperzero-lidar_emulator |
| midea_ac_remote.fap | xakep666/flipperzero-midea-ac-remote |
| mitsubishi_ac_remote.fap | achistyakov/flipperzero-mitsubishi-ac-remote |
| xbox_controller.fap | gebeto/flipper-xbox-controller |
| xremote.fap | leedave/flipper-zero-cross-remote |
| App | Repository |
|---|---|
| bpm_tapper.fap | xMasterX/all-the-plugins |
| etch.fap | Unknown |
| flizzer_tracker.fap | LTVA1/flizzer_tracker |
| fmatrix.fap | misterwaztaken/fmatrix |
| fzspground.fap | alanfortlink/fzspground |
| image_viewer.fap | polioan/flipper-zero-image-viewer |
| metronome.fap | xMasterX/all-the-plugins |
| morse_code.fap | xMasterX/all-the-plugins |
| music_player.fap | flipperdevices/flipperzero-good-faps |
| paint.fap | xMasterX/all-the-plugins |
| text2sam.fap | xMasterX/all-the-plugins |
| tuning_fork.fap | besya/flipperzero-tuning-fork |
| usb_midi.fap | kribesk/flipper-zero-usb-midi |
| video_player.fap | LTVA1/flipper-zero-video-player |
| wav_player.fap | xMasterX/all-the-plugins |
| App | Repository |
|---|---|
| cyborg_detector.fap | RocketGod-git/Flipper-Zero-Cyborg-Detector |
| metroflip.fap | luu176/Metroflip |
| mfc_editor.fap | TollyH/flipper-apps |
| mfkey.fap | Bundled with firmware (official good-faps / Momentum) |
| mifare_fuzzer.fap | spheeere98/mifare_fuzzer |
| nfc_apdu_runner.fap | SpenserCai/nfc_apdu_runner |
| nfc_eink.fap | RebornedBrain/nfc_eink |
| nfc_magic.fap | Bundled with firmware (official good-faps / Momentum) |
| nfc_maker.fap | Next-Flip/Momentum-Apps |
| nfc_playlist.fap | acegoal07/FlipperZero_NFC_Playlist |
| nfc.fap | Bundled with firmware (official good-faps / Momentum) |
| passy.fap | bettse/passy |
| picopass.fap | bettse/picopass |
| seader.fap | bettse/seader |
| seos.fap | bettse/seos_compatible |
| weebo.fap | bettse/weebo |
| App | Repository |
|---|---|
| em4100_generator.fap | Milk-Cool/fz-em4100-generator |
| fuzzer_rfid.fap | DarkFlippers/Multi_Fuzzer |
| lfrfid.fap | Bundled with firmware (official good-faps / Momentum) |
| simultaneous_rfid_reader.fap | haffnerriley/Simultaneous-UHF-RFID-FlipperZero |
| t5577_multiwriter.fap | xMasterX/all-the-plugins |
| t5577_writer.fap | zinongli/T5577_Raw_Writer |
| uhf_rfid.fap | xMasterX/all-the-plugins |
| App | Repository |
|---|---|
| chief_cooker.fap | denr01/FZ-ChiefCooker |
| esubghz_chat.fap | twisted-pear/esubghz_chat |
| flipper_share.fap | lomalkin/flipper-zero-apps |
| fmf_to_sub.fap | jamisonderek/flipper-zero-tutorials |
| hc11_modem.fap | Giraut/flipper_zero_hc11_wireless_modem |
| meal_pager.fap | leedave/flipper-zero-meal-pager |
| pocsag_pager.fap | xMasterX/flipper-pager |
| protoview.fap | antirez/protoview |
| radio_scanner.fap | RocketGod-git/Flipper-Zero-Radio-Scanner |
| rolling_flaws.fap | jamisonderek/flipper-zero-tutorials |
| spectrum_analyzer.fap | jolcese/flipperzero-firmware |
| sub_analyzer.fap | Bundled with firmware (official good-faps / Momentum) |
| subghz_bruteforcer.fap | DarkFlippers/flipperzero-subbrute |
| subghz_fap.fap | Bundled with firmware (official good-faps / Momentum) |
| subghz_playlist_creator.fap | Bundled with firmware (official good-faps / Momentum) |
| subghz_playlist.fap | darmiel/flipper-playlist |
| subghz_remote.fap | DarkFlippers/SubGHz_Remote |
| subghz_scheduler.fap | shalebridge/flipper-subghz-scheduler |
| tpms.fap | Bundled with firmware (official good-faps / Momentum) |
| weather_station.fap | flipperdevices/flipperzero-good-faps |
| App | Repository |
|---|---|
| hid_usb.fap | fidian/flipper-hid-app |
| ldtoypad.fap | SegerEnd/Flipper-Zero-LD-Toypad-Emulator |
| mass_storage.fap | flipperdevices/flipperzero-good-faps |
| portal_of_flipper.fap | sanjay900/portal_of_flipper |
| u2f.fap | Bundled with firmware (official good-faps / Momentum) |
| usb_ccb.fap | WithSecureLabs/usb-consumer-control |
| xinput_controller.fap | expected-ingot/flipper-xinput |
| App | Repository |
|---|---|
| about.fap | Bundled with firmware (official good-faps / Momentum) |
| bt_settings.fap | Bundled with firmware (official good-faps / Momentum) |
| clock_settings.fap | Bundled with firmware (official good-faps / Momentum) |
| desktop_settings.fap | Bundled with firmware (official good-faps / Momentum) |
| expansion_settings.fap | Bundled with firmware (official good-faps / Momentum) |
| input_settings.fap | Bundled with firmware (official good-faps / Momentum) |
| js_app.fap | Bundled with firmware (official good-faps / Momentum) |
| momentum_app.fap | Next-Flip/Momentum-Firmware |
| notification_settings.fap | Bundled with firmware (official good-faps / Momentum) |
| passport.fap | Bundled with firmware (official good-faps / Momentum) |
| power_settings.fap | Bundled with firmware (official good-faps / Momentum) |
| storage_settings.fap | Bundled with firmware (official good-faps / Momentum) |
| system_settings.fap | Bundled with firmware (official good-faps / Momentum) |
WARNING: The tools and techniques provided in this repository are intended for educational and research purposes only. Unauthorized or illegal use of these tools to hack into devices or systems without proper authorization is strictly prohibited and may have legal consequences. Always ensure that you have proper authorization before attempting any hardware hacking activities.
To get started with the Flipper Zero Hacking Toolkit, follow these steps:
- Clone or download this repository to your local machine.
- Ensure you have a Flipper Zero device.
The only system requirement for this toolkit is a Flipper Zero device.
While this toolkit provides a wide range of tools and resources, always exercise caution and follow ethical guidelines when using them. Only hack devices and systems for which you have explicit authorization. Unauthorized hacking activities can lead to legal consequences.
If you have additional tools, resources, or improvements to contribute to this toolkit, feel free to submit pull requests or open issues. We welcome contributions from the community to make this toolkit even more useful and safe.
We would like to give credit to the following individuals for their contributions to this toolkit:
When using the Flipper Zero Hacking Toolkit, always adhere to the following security best practices:
- Obtain proper authorization before attempting any hardware hacking activities.
- Respect the privacy and security of individuals and organizations.
- Report any security vulnerabilities you discover through responsible disclosure channels.
This repository will be regularly updated and maintained to improve its functionality and security. Check back for updates and improvements to the toolkit.
This repository is provided under the LICENSE file included with the toolkit. Make sure to review and adhere to the terms of the license when using these tools.
Remember to always act responsibly, ethically, and within the boundaries of the law when using the Flipper Zero Hacking Toolkit. Happy hacking, and stay safe!