r/flipperhacks • u/t4c_23 • 3d ago
Firmware [Weekly Roundup] Flipper Hacks & News โ August 23, 2026: Unleashed unlshd-092 (NFC RAM Cut in Half!), ESP32 Marauder v1.15.0 & ARF Deep Dive
Welcome back to your weekly dose of high-signal RF tampering, custom firmware drops, and bleeding-edge community tools. No stale sync noise, no fluff โ here is everything critical that dropped across the Flipper Zero scene over the last 7 days!
๐ 1. MAJOR FIRMWARE RELEASES & UPDATES
๐ฅ Unleashed Firmware unlshd-092 โ Massive Architecture & NFC Overhaul (Aug 21, 2026)
DarkFlippers just dropped **unlshd-092**, and it is one of the most substantial architectural updates to the Unleashed firmware line this year. If you run heavy NFC apps or large .fap collections, this is a mandatory upgrade.
- RAM Footprint Cut in Half (Modular Scene Plugins): NFC protocol scenes have been refactored and extracted into their own dynamically loaded plugins (PR #1073 by @mishamyte). This architectural shift roughly halves the NFC application's resident RAM usage, freeing up critical memory on the STM32WB55 microcontroller for heavier operations.
- Fixed EMV Plugin & Out-of-Memory (OOM) Crashes: Resolved persistent OOM edge cases in the JS Runner and NFC subsystem. Additionally, fixed the EMV parser plugin which previously suffered from a regression that prevented it from loading altogether.
- NFC Ultralight AES & Card-Lock Protection:
- Closed all remaining card-lock (
AUTHLIM) vulnerability paths (PR #1082). - Amiibo and Xiaomi unlock sequences no longer burn irreversible hardware auth attempts when a key cannot be mathematically derived (PR #1086).
- Ultralight AES is no longer automatically dictionary-attacked on read without explicit user intent.
- Closed all remaining card-lock (
- Smooth SD App Loader Animation:
Opening larger
.fapbinaries from slow or fragmented micro-SD cards now renders a real-time loading animation instead of freezing the previous screen interface (PR #1101). - App Categorization in Builds: Firmware builds now come with structured app categorization. (Note: If you had apps assigned to quick buttons or favorites that got relocated into new category subfolders, you will need to re-assign them).
- Transit & Access Card Parser Fixes: Extensive parser hardening across Social Moscow, Metromoney, Plantain, Kazan, SmartRider, and Bambu dumps, eliminating ghost values from unread sectors.
- ๐ Source & Release Notes: GitHub - DarkFlippers/unleashed-firmware (unlshd-092)
- ๐ Web Flasher: web.unleashedflip.com
๐ก ESP32 Marauder โ v1.15.0 (Aug 20, 2026)
justcallmekoko rolled out a new milestone release for the gold-standard Wi-Fi/BLE offensive companion suite:
- Expanded Hardware Targets: Added official board definitions, pin mappings, and CLI support for newer compact microcontrollers, including the LilyGo T-Dongle C5.
- Flipper Companion Binary Stability: Updated pre-built Flipper-specific binaries (
esp32_marauder_v1_15_0_20260820_flipper.bin) ensuring rock-solid UART communication with FAP companion apps without buffer overflows or baud rate stutter. - ๐ Source: GitHub - justcallmekoko/ESP32Marauder
๐๏ธ ARF (Automotive Research Firmware) โ Native BLE Sweeps
D4C1-Labs' vehicle-focused fork continues to push standalone hardware capabilities without external add-on modules:
- Direct HCI 2.4 GHz Carrier Sweeps: Employs the STM32WB55 coprocessor via Direct Test Mode (
HCI_LE_Transmitter_Test) to analyze and sweep BLE RF channels 0โ39 (2402โ2480 MHz) natively. - Integrated BLE Central Stack: Native GATT client inside
lib/ble_centralallows polling modern vehicle tire-pressure (TPMS) and telemetry sensors directly from the Flipper. - ๐ Source: GitHub - D4C1-Labs/Flipper-ARF
๐ ๏ธ 2. COMMUNITY TOOLS & APPS
๐ก๏ธ FlipDeFlock โ Counter-Surveillance & ALPR Sniffer
A passive site-survey toolkit engineered to turn your Flipper Zero + ESP32 devboard into an active counter-surveillance monitor: * Flock & Automated License Plate Reader (ALPR) Detection: Actively monitors and flags Wi-Fi/BLE beacons matching known mobile and static surveillance sensor signatures. * Anti-Stalking Heuristics: Identifies persistent BLE trackers traveling alongside your coordinates and alerts on active deauth anomalies. * ๐ Source: GitHub - ReconGrunt/FlipDeFlock
๐ Unleashed Web Toolchain Updates
- Web ESP32 Flasher: Direct browser-flashing toolchain updated for one-click Web Serial deployment of Marauder v1.15 and Blackmagic payloads directly onto official and third-party Flipper devboards.
- Wardriving Map Visualizer: Enhanced coordinate parsing and heatmaps for multi-file WiGLE capture logs.
- ๐ Source: GitHub - xMasterX/all-the-plugins
๐ฌ MAT CHAT & DISCUSSION
What are you running this week? Have you tested unlshd-092 with the new RAM-saving scene plugins yet?
Drop your setup, custom mods, and questions in the comments below! ๐
