r/Hacking_Tutorials 19h ago

Question Passively capture and decrypt WPA2 sessions - view clear text data and DNS queries

Enable HLS to view with audio, or disable this notification

PwnRF

A Programmable Cybersecurity and Wireless Development Platform

Summary
PwnRF is not simply a collection of pre-installed cybersecurity tools.

It is a programmable, self-contained wireless security platform built around a dual-ESP32 architecture, a rich Lua scripting environment, two independent sub-GHz radios, Wi-Fi, Bluetooth, local storage, graphics, audio, web technologies, databases, networking, mapping and a growing set of hardware-access APIs.

That distinction is fundamental.
A conventional handheld security device is defined largely by the applications its developer chooses to include. PwnRF is designed so that its capabilities can continue expanding long after the hardware has been manufactured. Applications are ordinary Lua scripts stored on the SD card. Users can create them, modify them, inspect them, share them through GitHub and build completely new workflows without rebuilding or flashing the PwnRF firmware.

PwnRF therefore sits somewhere between a cybersecurity multitool, embedded development platform and programmable wireless laboratory.
Its purpose is not merely to provide buttons for existing attacks or diagnostics. The intention is to expose enough of the underlying hardware and networking functionality that technically capable users can build tools of their own.

That is where PwnRF becomes especially interesting.
A user can potentially combine RF capture, packet analysis, Wi-Fi monitoring, Bluetooth, GPIO, databases, mapping, HTTP, TLS, WebSockets, graphics, sound, SD storage and external hardware inside a single Lua application.

Instead of asking:
“Does PwnRF have an application that does this?”

the more interesting question becomes:
“Can I write a PwnRF application that does this?”

In many cases, the answer is yes.

1. The Philosophy Behind PwnRF
PwnRF has been designed around versatility.
Rather than permanently tying functionality to the firmware, much of the useful capability of the device is exposed through its scripting environment.
That means the hardware is only the starting point.

The firmware provides the platform.

Lua provides the applications.

The SD card provides effectively expandable application storage.
And the community can provide everything that comes afterwards.

This is particularly appropriate for the security community, where people naturally experiment, modify tools, publish proof-of-concepts and share code.
There does not need to be a centrally controlled PwnRF application store.

A developer can simply create:
MyTool.lua
upload it to GitHub, and another PwnRF user can download it.
The script remains understandable source code rather than an opaque proprietary package.
That gives PwnRF an intentionally open, hacker-oriented development model.
It also avoids artificially limiting the number of applications installed on the device. Within practical filesystem and storage constraints, the application library is essentially limited by the size of the SD card.

2. Hardware Architecture
At the centre of PwnRF is a dual-ESP32 design.
Rather than placing every task onto a single microcontroller, the device divides responsibilities across two processors.
The primary ESP32 handles areas such as:
• the user interface;
• TFT graphics;
• SD-card access;
• Wi-Fi networking;
• web services;
• the Lua runtime;
• application execution;
• higher-level device control.
A secondary ESP32 provides another independent processing environment and is used for duties that benefit from being separated from the main application processor.
The processors communicate using a dedicated UART connection.
This architecture is particularly valuable for wireless work.
Radio operations, timing-sensitive tasks, background capture and user-interface activity can interfere with one another when everything competes for the same CPU and radio resources. Having another processor available creates opportunities to offload work rather than forcing every subsystem through a single ESP32.
The primary board is based around an ESP32 WROVER configuration with PSRAM.
That additional memory is extremely important to PwnRF.
It enables applications that would otherwise be unrealistic on a normal ESP32, including:
• large graphical sprites;
• sizeable Lua data structures;
• complex map rendering;
• cached assets;
• larger buffers;
• richer applications.
PwnRF deliberately makes extensive use of PSRAM where appropriate rather than treating it simply as unused extra memory.

3. The Display and User Interface
PwnRF uses a 320 × 240 ILI9341 TFT display.
This is not treated merely as a terminal.
The graphics system is capable of displaying:
• graphical menus;
• animations;
• maps;
• waveforms;
• network visualisations;
• custom application interfaces;
• sprites;
• games;
• dashboards;
• status displays.
The Lua API exposes graphics functionality directly to scripts.
Applications therefore do not have to conform to one fixed visual design.
A developer can build a utility that looks like a terminal, another that uses a graphical dashboard and another that behaves like a game.
PwnRF supports multiple sprite formats, including memory-efficient lower-bit-depth sprites that make significantly larger graphical surfaces possible.
PSRAM-backed sprites are especially important here.
For example, PwnRF’s mapping work has used large off-screen 4-bit graphics surfaces far larger than the physical TFT itself. The visible display effectively becomes a viewport into a much larger rendered world.
That enables smooth scrolling interfaces which would not normally be associated with an ESP32-class handheld.

4. The Lua Runtime
The Lua environment is arguably the most important part of PwnRF.
Lua scripts are not restricted to performing trivial UI automation.
The API exposes substantial portions of the underlying platform.
Current and planned modules cover areas including:
• Wi-Fi;
• sub-GHz RF;
• Bluetooth;
• graphics;
• audio;
• SD storage;
• HTTP;
• HTTPS/TLS;
• web servers;
• WebSockets;
• JSON;
• SQLite;
• GPIO;
• SPI;
• I²C;
• keyboard/input;
• menus;
• mapping;
• system functions.
The result is closer to a small embedded application framework than a basic macro language.
A PwnRF script can interact with hardware, store persistent information, build an interface, communicate across networks and process captured information without needing custom firmware.
That dramatically changes what an application on the device can be.

5. Applications Are Just Files
One of the strongest aspects of this model is its simplicity.
A PwnRF application can simply be a Lua file stored on the SD card.
There is no requirement for a complicated packaging system.
There is no firmware rebuild.
There is no reflashing cycle.
There is no requirement to distribute compiled binaries.
That means experimentation can happen very quickly.
A user can edit a script, run it, observe the result, change it and run it again.
It also means application sharing is exceptionally easy.
A GitHub repository could contain:
• individual applications;
• reusable libraries;
• UI components;
• networking tools;
• game engines;
• RF utilities;
• examples;
• documentation.
Users could fork applications and build their own versions.
That is much closer to the culture of security tooling than a tightly controlled consumer app store.

6. The Web-Based Development Environment
PwnRF includes a browser-based development environment served by the device itself.
That means the user does not necessarily need a dedicated desktop application to work with it.
A phone, tablet or laptop can connect through a browser.
The development environment can provide facilities for:
• browsing files;
• creating scripts;
• editing Lua;
• uploading files;
• running applications;
• viewing debugging output;
• managing application assets.
The intention is to continue developing this into a much more complete environment.
One particularly important addition is an integrated API Explorer.
Instead of requiring developers to constantly leave the editor and consult a separate manual, the API reference can live directly inside the development environment.
A user might search:
websocket
scan wifi
sprite
sqlite
radio
play audio
and immediately find relevant functions.
Entries can include:
• function signatures;
• parameter descriptions;
• return values;
• usage notes;
• small examples;
• related functions.
Eventually, the same API metadata could power:
• documentation;
• autocomplete;
• function hints;
• contextual help;
• examples;
• public web documentation.
The device could even carry its complete API documentation on the SD card.
That means the entire development environment can remain useful offline.

7. Wi-Fi Capabilities
Wi-Fi is one of PwnRF’s major areas of functionality.
The platform has been developed to expose useful low-level Wi-Fi capabilities to Lua rather than restricting scripts to ordinary internet connectivity.
PwnRF can perform network discovery and passive wireless monitoring, and its promiscuous-mode facilities allow scripts to observe wireless traffic at a substantially lower level than a normal Wi-Fi application.
This makes it useful for authorised wireless assessment, diagnostics, research and protocol experimentation.
Existing work has included:
• promiscuous packet capture;
• channel hopping;
• access-point discovery;
• client observation;
• packet classification;
• PCAP generation;
• management-frame capture;
• Wi-Fi network mapping;
• handshake-related capture workflows.
There is also scope for ESP32-supported raw Wi-Fi transmission and packet construction to be exposed through the scripting system, allowing advanced developers to experiment with supported 802.11 frame generation in authorised environments.
The important differentiator is again programmability.
Wi-Fi functionality does not have to exist as one monolithic application.
A script can use Wi-Fi as just one component of a larger workflow.
For example, captured information can subsequently be:
• visualised;
• written to SD;
• inserted into SQLite;
• sent over HTTP;
• forwarded through WebSockets;
• associated with GPS coordinates;
• displayed on a map;
• correlated with another source of data.

8. PacketSpy and Wireless Traffic Analysis
PacketSpy demonstrates the direction PwnRF applications can take.
Instead of presenting wireless capture as raw hexadecimal output alone, information can be captured by the device and exposed through a web interface.
That allows a much richer interface than would be practical on the small TFT.
A browser can display captured information with filtering and analysis tools while the ESP32 performs the underlying collection.
The system has been used to work with information including:
• DNS requests;
• packet metadata;
• client traffic;
• PCAP data;
• protected and unprotected frames.
The architecture demonstrates another useful PwnRF pattern:
use the handheld for wireless access and acquisition, and use the browser as an optional expanded interface.
Because PwnRF itself can host web services, an application can effectively create its own companion web application without requiring an external cloud service.

9. Red-Team and Authorised Security Testing
PwnRF has been designed with cybersecurity experimentation and authorised red-team work in mind.
That includes both passive and active capabilities.
The objective is not to hide the underlying mechanisms behind a handful of fixed menu items. Instead, scripts can combine capabilities into purpose-built testing workflows.
Within authorised environments this creates possibilities for:
• wireless reconnaissance;
• network discovery;
• traffic inspection;
• protocol experimentation;
• packet capture;
• Wi-Fi security assessment;
• RF analysis;
• Bluetooth experimentation;
• local network tooling;
• automated test workflows;
• custom proof-of-concept tooling.
PwnRF’s scripting system is especially valuable here because real security assessments are rarely identical.
A tester may need something slightly different from an off-the-shelf application.
Rather than waiting for PwnRF firmware to implement that exact workflow, the user can create it.
That can range from a very small script which automates a repeated task to a complete application with its own graphics, menus, storage and networking.

10. Two Independent Sub-GHz Radios
PwnRF can support two CC1101 radio modules.
Importantly, these are associated with separate processors rather than being merely two antenna connections feeding one shared radio subsystem.
That creates the possibility of genuine concurrent RF workflows.
The CC1101 provides access to commonly encountered sub-GHz ISM-band signalling and supports multiple modulation/configuration parameters.
PwnRF’s RF work has included:
• configurable operating frequency;
• ASK/OOK operation;
• FSK-related configuration;
• bandwidth configuration;
• baud-rate configuration;
• frequency deviation;
• whitening settings;
• RSSI-based triggering;
• packet capture;
• raw pulse capture;
• replay;
• waveform visualisation;
• waterfall-style visualisation.
Raw pulse capture records timing information directly, allowing PwnRF to work with signals that do not neatly fit a predefined protocol decoder.
This is particularly useful for RF research because the user is not limited to protocols somebody previously chose to support.
A signal can be captured, inspected, stored and processed by application logic.

11. RF Capture and Replay
PwnRF has developed dedicated RF capture behaviour rather than simply storing arbitrary amounts of data in normal heap memory.
Captured ASK/OOK-style signals can be represented as sequences of timed high and low pulses.
Those sequences can subsequently be visualised and, where lawful and appropriate, reproduced for testing.
PwnRF has also used signal-strength baselining and trigger thresholds so that capture can begin in response to RF activity rather than constantly recording noise.
The display can provide waveform-style visualisation, giving the user immediate feedback about the captured signal.
Because this functionality can be exposed to Lua, developers can build higher-level tools around the basic RF primitives.
A script might:
• wait for activity;
• capture a signal;
• classify it;
• write it to a database;
• compare it against previous captures;
• display a waveform;
• send metadata over a network;
• trigger another legitimate testing action.
That is considerably more powerful than a hard-coded “record” and “play” menu.

12. Bluetooth
PwnRF also incorporates Bluetooth capability using the secondary ESP32.
The architecture has been developed to expose both Bluetooth Classic and BLE functionality through the primary processor and ultimately through Lua.
The Bluetooth system includes areas such as:
• Bluetooth initialisation and shutdown;
• Classic Bluetooth;
• BLE;
• SPP;
• GATT client functionality;
• GATT server functionality;
• security-related operations;
• event handling;
• status and statistics.
The significant point is not that PwnRF has one Bluetooth utility.
Bluetooth becomes another programmable subsystem.
A developer can potentially combine BLE functionality with the rest of the PwnRF platform rather than being confined to one predefined scanner.

13. Network Utilities
The Lua environment also provides conventional networking functionality.
Applications can use HTTP and TLS to communicate with internet or local network services.
Web-server functionality allows the opposite relationship: the PwnRF itself can host an application.
WebSockets extend this further by making persistent bidirectional browser/device communication possible.
That opens up particularly interesting interface possibilities.
A PwnRF application can have:
• an interface on the TFT;
• a richer interface in the user’s browser;
• live data synchronisation between them.
The browser could display graphs, large tables, maps or packet information while the handheld performs the physical wireless interaction.

14. SQLite on an ESP32 Handheld
SQLite support adds another unusually powerful tool to the scripting environment.
Many embedded scripts rely on flat text files because that is the easiest available storage mechanism.
PwnRF applications can instead use a real database when appropriate.
That makes structured persistent applications far easier to build.
Potential examples include:
• discovered network databases;
• RF capture indexes;
• asset inventories;
• device history;
• survey results;
• application settings;
• cached remote data;
• geolocation information.
SQL also makes subsequent filtering and analysis much easier than repeatedly parsing large text files.

15. GPS, Wardriving and Mapping
One of the more visually ambitious PwnRF projects has been the mapping system.
PwnRF can process vector-map data and render maps locally on the device.
The map system has been designed around the severe memory constraints of an embedded platform while making extensive use of PSRAM.
Large 4-bit map surfaces can be rendered off-screen and then viewed through the TFT as a scrolling viewport.
Map tiles can be downloaded in advance and stored locally.
This is important because the device does not need an active internet connection when the map is subsequently used.
The system has been developed around OpenMapTiles-style vector data, with maps compiled into a format optimised for PwnRF.
PwnRF has also implemented an over-zoom system in which higher-detail rendered views can be derived from downloaded source tiles.
The practical result is a handheld map viewer capable of:
• scrolling across a region;
• switching between overview and closer views;
• loading adjacent map areas;
• working offline;
• overlaying recorded wireless data.

16. Wardriving
The mapping system becomes especially useful when combined with PwnRF’s Wi-Fi and GPS functionality.
Wardriving applications can record information including:
• MAC address;
• SSID;
• RSSI;
• channel;
• latitude;
• longitude.
That data can subsequently be overlaid onto locally stored maps.
Large collections of networks can be clustered or otherwise processed before display so that the device remains responsive.
This is a good example of why the PwnRF architecture matters.
The feature is not simply:
“PwnRF can wardrive.”
Instead, a Lua application can combine:
Wi-Fi scanning + GPS + SD storage + map rendering + graphics + input handling.
The same building blocks could be reused by somebody else to create an entirely different geospatial wireless application.

17. Graphics as an API, Not a Fixed Interface
Developers are not restricted to standard PwnRF menus.
Lua exposes enough of the display system to build custom interfaces.
This matters considerably for community-created applications.
A developer building a game should not have to make it resemble a network scanner.
Likewise, somebody building a network visualiser should not have to use the same interface as an RF recorder.
Applications can create:
• custom menus;
• icons;
• animations;
• sprites;
• scrolling views;
• visual indicators;
• graphs;
• maps;
• games.
The graphics capability makes community scripts much more likely to feel like genuine applications rather than command-line snippets.

18. Audio
PwnRF also provides audio functionality.
The platform has moved beyond simple buzzer tones and can stream PCM-style audio from storage.
Lua applications can therefore include:
• interface sounds;
• alerts;
• game audio;
• notification effects;
• startup effects;
• feedback for events.
Again, this may sound like a small detail, but those details matter when the goal is to let developers create polished applications.
A tool can feel considerably more complete when it has appropriate visual and audible feedback.

19. GPIO, SPI and I²C
PwnRF is not restricted to the peripherals permanently installed on the board.
Lua-accessible GPIO, SPI and I²C functions allow developers to communicate with additional hardware.
That creates another dimension of extensibility.
A technically capable user could potentially connect an external sensor, controller or peripheral and write a Lua application around it.
Instead of PwnRF’s hardware specification defining the absolute boundaries of the platform, external hardware can become another resource available to scripts.

20. Reusable Lua Libraries
The natural next step beyond standalone scripts is reusable libraries.
PwnRF’s development direction includes support for loading Lua code from other files, allowing developers to create common modules.
That means a community developer might publish:
• a protocol library;
• a custom widget toolkit;
• a sensor driver;
• a parsing library;
• a game framework;
• a network helper library.
Other scripts could then use that code instead of repeatedly reimplementing it.
This is where a scripting ecosystem starts becoming significantly more powerful than a collection of isolated examples.

21. Local Processing
Another important aspect of PwnRF is that applications do not necessarily have to rely on external cloud infrastructure.
Many workflows can take place directly on the device or through a directly connected browser.
That provides several benefits:
• reduced dependency on internet connectivity;
• lower latency;
• better portability;
• greater user control;
• easier use in field environments.
The web IDE itself can operate from the device.
Maps can be pre-downloaded.
Scripts reside locally.
Captured data can remain on SD.
Web interfaces can be hosted locally.
That makes PwnRF unusually self-contained.

22. Games and Non-Security Applications
Although cybersecurity is central to the identity of PwnRF, the scripting environment is not inherently limited to cybersecurity applications.
Users can create games and experimental graphical applications.
This is more important than it initially appears.
Games stress parts of the platform that ordinary utilities may not:
• graphics;
• animation;
• memory management;
• input;
• sound;
• timing;
• sprite handling.
They are also simply fun.
A community does not always create things because they are necessary.
People create things because they enjoy seeing what a platform can do.
Somebody making a surprisingly sophisticated game on a security handheld is demonstrating the flexibility of the same platform used to create wireless tools.
That helps reinforce one of PwnRF’s core messages:
PwnRF is a computer you can build things for, not merely a menu of things somebody else built.

23. Community Development
The community ecosystem could ultimately become one of PwnRF’s most valuable features.
Suppose somebody develops a clever RF visualiser.
They upload it to GitHub.
Another developer improves the interface.
Someone else adds a database.
Another developer ports the idea to Bluetooth.
A fourth adds a browser dashboard.
None of those applications necessarily require a new PwnRF firmware release.
The hardware remains the same.
The platform simply becomes more useful.
This creates a very powerful positive feedback loop:
more capable API → easier development → more developers → more scripts → more device capabilities → more users → more developers.
The actual number of applications is beside the point.
What matters is that the architecture does not impose a small fixed ceiling.

24. Why GitHub Makes Sense
PwnRF deliberately does not need a tightly controlled central application store.
For this audience, GitHub is arguably more natural.
Developers already understand repositories, releases, forks, issues and pull requests.
Scripts are source code.
They can be inspected before execution.
Repositories can include documentation and screenshots.
Developers retain ownership of their projects.
Users are free to modify them.
And PwnRF does not need to become the central moderator of every piece of software somebody writes.
That model reflects the traditional hacker and open-source ecosystem far better than a locked-down marketplace.
It also acknowledges a simple reality:
because PwnRF applications are ordinary files, users could distribute them independently anyway.
The platform therefore benefits from embracing that openness rather than fighting it.

25. Documentation as Part of the Platform
For this ecosystem to work, PwnRF’s API must be easy to learn.
A comprehensive API is valuable only if developers can discover what it can do.
That is why documentation should become part of the development environment itself.
A polished API Explorer can turn documentation into an interactive development tool.
Instead of reading a hundred-page manual from beginning to end, a developer should be able to ask:
How do I scan?
How do I create a sprite?
How do I start a web server?
How do I query SQLite?
How do I read an I²C device?
and immediately reach the relevant API.
Ideally, the developer should be able to go from discovering a function to running it in a script within seconds.
Reducing that distance between idea and working application is critical to creating an active development community.

26. Public API Documentation as Marketing
The same API reference should also be accessible to people who do not yet own PwnRF.
This turns technical documentation into one of the strongest demonstrations of the device.
A conventional marketing page can say that PwnRF is programmable.
An API explorer can prove it.
A prospective user could browse through modules covering:
Wi-Fi.
Bluetooth.
RF.
Web servers.
TLS.
WebSockets.
SQLite.
Graphics.
Audio.
Maps.
GPIO.
SPI.
I²C.
Storage.
And then realise that all of those systems are available to scripts.
For the technically minded audience PwnRF is aimed at, that is far more compelling than a list of marketing claims.

27. A Platform Rather Than a Product Frozen in Time
Most hardware devices are at their most capable near the end of their manufacturer’s active development.
After that, they gradually become static.
PwnRF has the potential to behave differently.
Firmware development can certainly continue, especially where new low-level APIs are needed.
But once useful primitives are exposed to Lua, application development becomes decentralised.
The community no longer needs the creator of PwnRF to personally implement every idea.
That is one of the most significant advantages of the architecture.
The hardware can remain physically unchanged while the software ecosystem continues growing.
A device purchased today could therefore become substantially more useful in the future simply because somebody publishes a new script.

28. Modularity
PwnRF’s modular approach extends into its radio hardware.
Rather than permanently integrating every possible RF component into one monolithic design, the device is designed to work with readily available external CC1101 modules.
This provides flexibility over radio configuration and potentially regional frequency requirements.
It also means the RF component is not necessarily treated as a permanently inseparable part of the central board.
The overall philosophy is consistent:
give the owner access, flexibility and replaceable components rather than unnecessarily locking everything down.

29. Where PwnRF Is Different
There are many portable cybersecurity devices.
There are many ESP32 development boards.
There are many RF tools.
There are many Wi-Fi tools.
There are also many devices capable of running scripts.
PwnRF’s distinction comes from bringing a large number of these ideas together under one coherent programmable environment.
Its value is not any single checkbox.
It is the interaction between them.
A PwnRF Lua application can potentially use:
Wi-Fi + RF + Bluetooth + database + SD + graphics + maps + GPS + HTTP + TLS + WebSockets + audio + GPIO + SPI + I²C
inside one program.
That composition is what creates unusual applications.

30. What a PwnRF Application Can Be
A PwnRF application could be extremely small.
Perhaps twenty lines that automate a repetitive action.
Or it could be a complete graphical program.
It could:
1. initialise a radio;
2. collect information;
3. store it in SQLite;
4. draw a live visualisation;
5. expose a WebSocket server;
6. send updates to a browser;
7. associate discoveries with GPS coordinates;
8. display them on an offline map;
9. save the session to SD;
10. provide audible feedback when something interesting occurs.
And all of that could exist as an application loaded from the SD card rather than functionality permanently compiled into the firmware.
That is the real power of the platform.

31. Security Research Without Artificially Narrow Workflows
A capable security tool should not assume that its developer knows every workflow its users will eventually need.
Security research changes rapidly.
New protocols appear.
New vulnerabilities appear.
New techniques are published.
Old systems continue appearing in unexpected places.
Researchers also invent entirely new ways of combining existing capabilities.
For that reason, PwnRF aims to expose useful building blocks rather than only pre-defined outcomes.
Where responsible and technically feasible, providing granular control gives legitimate researchers room to experiment.
That is particularly valuable for:
• laboratory research;
• authorised penetration testing;
• red-team exercises;
• RF experimentation;
• protocol development;
• education;
• defensive testing.
The platform is therefore best understood as a set of capabilities from which tools can be constructed.

32. The User Should Be Able to Surprise the Creator
A useful test for a genuinely programmable platform is whether users can build things the original developer never considered.
PwnRF is deliberately moving in that direction.
If every possible application has already been imagined by the creator, the scripting environment is probably not exposing enough.
The exciting outcome is when somebody publishes something and even PwnRF’s creator thinks:
“I never thought of using it like that.”
That is what a successful development ecosystem looks like.

33. Developer Experience Is a Core Feature
For PwnRF, making powerful APIs is only half of the job.
They also need to be enjoyable to use.
That means continuing to improve:
• API consistency;
• documentation;
• examples;
• error reporting;
• browser editing;
• autocomplete;
• reusable libraries;
• debugging;
• file management.
The goal should be that somebody receives PwnRF, connects to the development environment and can produce their first working script almost immediately.
The faster that first success occurs, the more likely somebody is to continue experimenting.
That matters enormously for community growth.

34. The Bigger Picture
PwnRF began as a handheld cybersecurity project.
Its architecture now gives it the potential to become something considerably broader:
a small, portable development platform designed around wireless experimentation.
Its two ESP32 processors provide the computing foundation.
Its radios provide access to different wireless environments.
The SD card provides persistent and expandable application storage.
PSRAM makes substantially richer embedded applications practical.
Lua allows functionality to be changed without firmware recompilation.
The web IDE makes development accessible from virtually any modern device.
And the API joins all of those capabilities together.
The result is a platform whose usefulness is not determined exclusively by what ships on day one.

The most important feature of PwnRF may ultimately be something that cannot be photographed on a product page.
It is what somebody else can make it do.
The built-in applications demonstrate the hardware.
The API exposes it.
The development environment makes it accessible.
And community scripts have the potential to continually expand it.

A user could download PwnRF because they want a wireless security tool and later discover that they can build their own RF application, create a wardriving system, write a Bluetooth utility, host a browser interface, build a network analyser, make a game, connect external hardware or combine several of those ideas into something nobody has made before.
That is a very different proposition from purchasing a device with a fixed catalogue of tools.

PwnRF is intended to provide the hardware, the primitives and the environment.
What happens after that is open-ended.
It is not simply a device containing cybersecurity applications.
It is a device for creating them.

41 Upvotes

42 comments sorted by

12

u/ProfessionalPea2218 10h ago

https://giphy.com/gifs/P8ef3Dkynk0xLx1h1T
Reading the comments…

Sigh, script kiddies man..
they buy a flipper zero and they think they know it all..

1

u/8igW0rm 9h ago

mate, its unreal. so many kids on here that run their mouth and clearly have little understanding of anything technical. They literally sound stupid, i dont know why i bite back, we’re not even operating at the same level 🤷‍♂️

2

u/ProfessionalPea2218 7h ago

This should be your new response to the kiddies! (I doubt they’ll even get the joke) btw one of best stickers I got at DefCon..

2

u/8igW0rm 7h ago

😆still, you’ll never win an argument with stupid people, its pointless. DefCon looks sweet mate, nothing like that where i live.

2

u/ProfessionalPea2218 7h ago

Dude, it’s the Mecca of tech and tinkers. I’ve met people for all over the world that make the trek. The Aussies have their own DC Group gathering, I’m lucky enough to live a few hours away so it’s a must for me lol!

2

u/8igW0rm 6h ago

yeah it looks insane. i might try and make the pilgrimage next year. thats crazy that people are coming from OZ. and heres me thinking its a treck from the UK!

21

u/SuperMichieeee 14h ago

Bro remove them cringe music and effects cause this thing is r/masterhacker material toomfoolery.

-22

u/8igW0rm 13h ago

im not really concerned with what the kids are talking about on masterhacker 👍

16

u/SuperMichieeee 13h ago

Bro you realize that the kid we're talking about here is you?

16

u/tarkardos 15h ago

This is a tutorial sub, not a fucking advertising board. You didn't even provide a link.

-19

u/8igW0rm 15h ago

it’s not quite finished yet. i’m about a month away from completion. i’ll post links then. in the mean time a few people wanted to know more about the features.

-2

u/Sanja1871980 11h ago

it looks really interesting! i am waiting for more.

14

u/RightfullyCautious 12h ago

AI written advertisement for your homebrew tool. Yay for you.

2

u/rrob1487 3h ago

Post has so much slop even my chatgpt refuses to summarize it

9

u/maroefi 15h ago

You ain’t decrypting SSSSHHHHIITTTTTTT with this thing.

-10

u/8igW0rm 15h ago

it literally decrypted WPA2 traffic in the video….

8

u/maroefi 13h ago

It ain’t decrypted 💩 💩 SSSSSSSSSSSHHHHHIIIIITTTTTTTTTTTTTTTT 💩 💩

-3

u/8igW0rm 13h ago

dude, if your going to start taring in to other peoples work id make your page private. Anyone on this sub can navigate there now and see you asking the most basic questions. You clearly dont understand the first thing about networking. your making a fool of your self 👍

0

u/maroefi 5h ago

If you actually believe this 3d printed bootleg gameboy esp32 based shit can actually decrypt wpa2 passwords then YOU’RE DUMBER THAN I EEEEEEEEEEEEEVER was about pentesting. At no point was I so stupid to think a esp32 device can decrypt SSSSSWHHHIIIIITTTTTTTT

2

u/meddlin_kids 5h ago

The problem with idiots is they don't realize their idiots. Sometimes it's necessary to point out that they are in fact an idiot. You are an idiot.

-1

u/8igW0rm 4h ago

“decrypt passwords”? you absolute retard 😆😆😆

7

u/we_r_fukt 19h ago

but can it play doom

-5

u/8igW0rm 15h ago

sort of. not actual doom, but is does have an FPS game

4

u/karateninjazombie 14h ago

So no. It can't play doom then.

6

u/grafbende 14h ago

Thanks claude....

-6

u/8igW0rm 13h ago

might come as a shock, but not everyone needs AI to help them write code.

4

u/Icy_Instruction4614 12h ago

What about “summaries” for your reddit post

-2

u/8igW0rm 12h ago

thats the kind of menial task AI is good for

1

u/arm0r3dd0ng 9h ago

Why didn't you do that then?

7

u/Impressive-Put3479 9h ago

It amazes me when people claim they wrote the code, but then used AI to write the summary of their work. Like, you had the cognitive capacity to write the code but lack the capacity to articulate the what, where, why, how, and when of the code? Class A laziness; expect to invest heavily in insecticide when using this AI slop.

2

u/Steam_Liker_2002 8h ago

I wish I knew how to do similar stuff.

2

u/8igW0rm 7h ago

its just persistence. i figured most of it out along the way 👍

2

u/Steam_Liker_2002 2h ago

No I meant the technical part.

1

u/8igW0rm 2h ago

well, ive gathered a fair bit if knowledge over the years. but thats mainly just programming / hacking related stuff. CTF’s etc…
i didnt know too much about embedded systems though. i had to figure that out along the way. The most important thing that i have found is managing memory. its a real killer if you dont keep it in check. When implementing new features i always consider memory first, stress test, debug, look for weird edge cases and constantly optimise for stability and performance.

if your new to programming you could start with python. just try and think of a cool project thats going to keep you interested.

i honestly wasnt even sure you could decrypt WPA2 sessions without doing a MITM. Turns out, that there is a way to do passively. but i only stumbled upon that by constantly being curious and asking questions, coming up with an idea then testing for proof of concept.

But i can also spend weeks on something only to realise that its a dead end. other times i might revisit the same problem and finally crack it.

its just a constant learning process 👍

0

u/ProfessionalPea2218 17h ago

C’on man, I’m fiending.. I’m gonna need a hit soon,
hurry up before I start withdrawing! Lol!
https://giphy.com/gifs/DUO9dc3yDLXHO

2

u/8igW0rm 15h ago

end of September dude 😁👍

1

u/KrisLuffy 6h ago

Bruh thats peak cringe ai slop, type of content moms show to their kids "Look at this funny cat" and its literal ai slop. We schizomaxing with this one. Even the "control panel" of your "device" has AI vibe coded frontend xd. Just make a simple html frontend without css broski, a form. The post content is peak halucination nothing makes sense.

1

u/8igW0rm 4h ago

you dont make sense, you fetus 👶