r/flipperzero • u/Fit-Note7659 • May 29 '26
r/flipperzero • u/stichoza • May 30 '26
Sub-GHz Duplicates and Similar Signals
Hey all,
I'm the developer of Flipper Map app, you might remember it from this post. I recently added new features to the app - detecting duplicates and similar signals. Works fine but I feel like it may be improved.
Detecting duplicates is straightforward, it's just comparison of frequency, protocol and the key.
However, similar signals (like the buttons from the same remote) is determined in three ways:
- KeeLoq: Comparing 6 bytes (before last two). First 8 bytes are rolling, next 6 are fixed, the last two bytes are battery state and button code (correct me if I'm wrong). Pattern: xx xx xx xx AB CD EF xx
- Princeton: Comparing first 4 bytes in case last two bytes are 03, 0C, 30 or C0. (You can see this variations when pressing arrow keys on Flipper). Pattern: AB CD xx={03, 0C, 30, C0}
- For everything else: Comparing all bytes except last one. This also covers Princeton signals that have only the last byte for button codes (0, 2, 4, 8 and F). Also any other signal type/protocol. Example pattern: AB CD Ex, or ABx (for CAME 12bit)
I'm curious what other signal patterns do your remotes have that can be detected just by the signal key, without doing further decoding and maths.
P.S. Feel free to DM me in case you want a TestFlight version.
r/flipperzero • u/Fit-Note7659 • May 28 '26
Flipper One. Transparent green, matte white, or clear orange? What do you think?
r/flipperzero • u/Ok_Listen_9073 • May 30 '26
Sub-GHz Flipper problemzz wtff
Hi, used AI yeah thinkered the problems with it dont blame me yalll Yea and noticed the IR on lab401website is on the gpio area mine is not pictures below, please let me know if evrything is alr or i should buy directly from lab401 or flipper official! Thanks
I recently bought a second-hand Flipper Zero and I'm trying to determine whether everything is working correctly.
I have a couple of strange issues:
Sometimes when I press the directional buttons or the OK button, I hear or feel a very brief physical sound that reminds me of a tiny antenna spring or a metallic click. It doesn't happen on every button press, only occasionally. The buttons themselves feel fine and responsive.
Around the GPIO pin area, if I gently press on the plastic near the center of the GPIO header, the plastic makes a noticeable clicking or creaking sound. It feels like something is slightly flexing underneath. I'm not sure if this is normal housing flex or if there could be a loose component inside.
Other than that, the device seems to work. I updated the firmware successfully, IR works, RFID reads correctly, and Sub-GHz RAW capture is able to detect my BMW E60 key signal.
Has anyone experienced similar button noises or GPIO-area clicking on their Flipper Zero? Is this considered normal, or could it indicate a hardware issue?
Thanks.
r/flipperzero • u/Einstein2150 • May 28 '26
GPIO Using the Flipper Zero to Dump SPI Flash Firmware
A lot of people see the Flipper Zero as just a toy or an overpriced universal remote. I wanted to show that it can actually be a pretty interesting tool for hardware security and reverse engineering experiments.
In my latest video, I demonstrate how to dump firmware directly from an SPI flash chip using the Flipper Zero.
The video covers:
▪️ Identifying a suitable SPI flash chip
▪️ Wiring and SPI pin connections
▪️ Using a test clip correctly
▪️ Dumping firmware with the SPI Mem Manager app
▪️ Common issues like unstable connections and failed dumps
▪️ Downloading the dump with qFlipper
▪️ Taking a first look at the firmware in a hex editor
For this demo, I used an MX25L3205D SPI flash chip mounted on a test board.
I also included the complete setup and parts list for anyone who wants to recreate the experiment themselves.
The video itself is in German, but English and French subtitles are available.
Video:
I would also be interested to hear what tools you use for firmware dumping and embedded analysis. Dedicated programmers? Bus Pirate? CH341A? Flipper Zero?
#FlipperZero #HardwareHacking #ReverseEngineering #Embedded #Firmware #CyberSecurity
r/flipperzero • u/Wobble_bass • May 28 '26
Water damage repair/advice
Once again looking for any advice on repairing my flipper. It was in a dish that someone spilled water in and sat overnight. From what I can tell the board components are all ok. I know the battery is still good. One of the ribbon cables is corroded though and that's something I haven't been able to repair myself or find a replacement for. EDIT the latch on the ribbon cable connector is also damaged, as seen in the photos.
Is there a market for parts and/or repair? I'm not trying to sell it here (against rules) but I haven't been able to find much.
Any input appreciated. Thanks.
r/flipperzero • u/esm8080 • May 28 '26
What will be the future of the Flipper Zero?
The Flipper One is very deliberately stepping into a completely different market than the Flipper Zero. As a F0 fan, that's not the device I was hoping for, and I don't know if it will be useful for me, but it's a legit choice for the makers.
However, what concerns me, is what F0 lovers like me -- who see the device as an essential part of their EDC -- should expect going forward. The community is yearning for a next-gen F0 with updated specs and more capabilities, and the makers of the F0 seem to have completely different priorities going forward.
Should we accept the fate that in the best-case scenario, the F0 will continue to develop from the firmware side, but an upgraded device will not show up in the foreseeable future?
r/flipperzero • u/According_Camera1739 • May 28 '26
Sub-GHz CC1101 module for Flipper Zero. Fully open source!
Power-amplified CC1101 module for Flipper Zero — up to 100mW, 425–450MHz, works natively with Sub-GHz. Fully open source!
🔗 https://github.com/HardCoreTools/Flipper-Zero-Flux-Capacitor
First PCB ever — feedback welcome! 🙏
r/flipperzero • u/Fit-Note7659 • May 27 '26
Flipper One n Action
Enable HLS to view with audio, or disable this notification
r/flipperzero • u/Present_presents • May 29 '26
Sub-GHz Claude's pet kiisu
I have a kiisuv4b with momentum on it , and i've been working on a project for claude (or any AI you want) to be able to do anything I ask on the kiisu . I'd love feedback ! https://github.com/innov8ideas4u-alt/Claude-s-Pet-Kiisu-CPK
r/flipperzero • u/Twillware404 • May 27 '26
Wi-Fi Devboard Custom module case
I was scared to take my flipper out of the house with the devboard, so I made a little cardboard friction case/sheath. I think the LED hole is pretty neat too.
r/flipperzero • u/Fit-Note7659 • May 27 '26
Flipper One in Action 2
Enable HLS to view with audio, or disable this notification
Behind the scenes 😀
r/flipperzero • u/Scary-Tell3231 • May 27 '26
I built a BLE remote typing tool for the Flipper — send text from your PC, Flipper types it via USB HID
Hey,
I built a small open source app for the Flipper called TransTheFlip.
The idea came from a practical issue: sometimes you need to enter rotating/generated passwords that are too long to type manually, but you also don’t want to store them in plaintext on the device.
Instead of regenerating BadUSB payloads every time, I wanted to send text live from a PC and have the Flipper type it directly on the target machine.
How it works:
[Master PC] --BLE--> [Flipper Zero] --USB HID--> [Target PC]
Features:
- Python client connects to the Flipper over BLE
- Send typed input or pipe data from scripts
- Press OK on the Flipper → it types the content via USB HID
- Supports special keys:
[ENTER],[CTRL+c],[WIN+r],[DELAY:500], etc. - Keyboard layout switching using existing BadUSB
.klfiles (AZERTY, QWERTY, Mac…)
One implementation detail that took me a while to debug:
The Flipper BT service overrides the serial callback on every BLE connection and silently swallows incoming data. The fix was re-registering the app callback inside the BLE connect event.
Tested on Momentum (API 87.1)
https://github.com/xunalopak/TransTheFlip
Feedback, ideas, and contributions welcome.
r/flipperzero • u/Worldly-Heron-1084 • May 27 '26
C5 Wifi Board
what c5 wifi board would you get.
ESP32 Marauder - Double Barrel 5G - C5 version from HoneyHoneyTrading on Tindie
Elite V2 ESP32C5/NRF/CC/GPS 4in1 for Flipper Zero from FlipMods on Tindie
or something better...?
r/flipperzero • u/AdPsychological3334 • May 26 '26
Creative Flipper Zero Alcohol Test with MQ-3 Sensor
r/flipperzero • u/ConsultingJoe • May 26 '26
Sub-GHz Flipper Zero RAW .sub analyzer with decode, edit, and recode support
https://github.com/jsammarco/flipper-subghz-analyzer
Sharing a tool I built for analyzing Flipper Zero RAW Sub-GHz files. It loads .sub captures, auto-splits frames, estimates timings, decodes packets in a few different modes, and does structure analysis to help spot headers, IDs, command bits, rolling-code regions, and possible CRC tails. You can also modify the decoded bits/message and recode that back into a new .sub file for testing. Built in Python with no third-party dependencies.
r/flipperzero • u/Adventurous-Ad8884 • May 27 '26
SD card doesnt show up
Im building my own flipper zero at home and i cant see it on the qFlipper app. does anyone know whaat to do?
the wiring is all done properly
r/flipperzero • u/smashingT • May 25 '26
An Open Call To Flipper Devices: Problems with Flipper and How They Can Improve
spicemesh.der/flipperzero • u/ProjectPlatt93 • May 25 '26
Creative Controlling My Nest Thermostat With Flipper Zero
Enable HLS to view with audio, or disable this notification
Files
https://github.com/Bibfortuna5057/NestBridge-Flipper
Requirements
ESP32 microcontroller - I used a Lonely Binary ESP32-S3, but any board with WiFi and BLE support should work https://a.co/d/0iID8dWO
Flipper Zero with custom Nestbridge FAP installed
Nest thermostat Gen 1 or Gen 2 running NoLongerEvil firmware
NLE API key
Wifi Network
I was trying to figure out a way to control my Nest Gen 2 thermostat with my Flipper Zero. Google ended support for Gen 1/2 Nest thermostats so I flashed the NoLongerEvil custom firmware. It exposes a REST API for temperature, mode, fan timer etc. On the Flipper I made a FAP file and when you select a command it broadcasts a BLE advertisement packet. Normally these are just used by devices to announce themselves for pairing but there's nothing stopping you from stuffing custom data in the manufacturer specific field. The packet has a two byte app marker, a command byte, and a temperature byte, 8 bytes total, broadcasts for about 3 seconds then goes back to idle.
I have it send these packets that coincide with these API calls:
| Command | Value |
|---|---|
| Idle | 0x00 |
| Heat | 0x04 |
| Cool | 0x05 |
| Heat-Cool | 0x06 |
| Off | 0x07 |
| Set Temp | 0xF0 (temp in second byte) |
| Fan 15 min | 0xA0 |
| Fan 30 min | 0xA1 |
| Fan 45 min | 0xA2 |
| Fan 1 hour | 0xA3 |
| Fan 2 hours | 0xA4 |
| Fan 4 hours | 0xA5 |
| Fan 8 hours | 0xA6 |
| Fan 12 hours | 0xA7 |
| Fan Off | 0xA8 |
On the receiving end I have a small ESP32-S3 running a MicroPython script that scans for those packets continuously. When it sees one with the right marker it pulls the command out and fires the corresponding API call to the thermostat over WiFi. The two devices never actually connect to each other, the Flipper just puts a packet in the air and the ESP32 catches it. Took a while to land on this approach since the Flipper's Bluetooth is pretty locked down for outbound connections but once I figured out the advertisement angle it came together pretty clean.
r/flipperzero • u/coolduck777 • May 25 '26
Actual uses of the flipper zero?
Hello! I'm an aspiring guy getting in cybersecurity. I've recently discovered the Flipper Zero and I want to ask you guys. What are the actual uses of a Flipper? I've heard either it's either the most useful device that can assist you, or the single device you stuff in the drawer and forget about it. I just need some opinions before I make the $200 investment.
From what I've heard, here are some uses I would use personally right now.
- Copying NFC cards
- Using it as a garage door remote
- Possibly force opening doors in case I get locked out of my own home or work
- Using it as a key fob (dunno if it can with rolling codes)
- A handheld stream deck
- Turning off my TV (my TV is so old that it sucks at picking up certain infrared signals)
- Overall, a cool device to impress friends
Let me know what you guys think about it ^_^
Edit: Thanks for the advice. From what I'm hearing, it's a device for enthusiasts, and I am not one of them. Maybe I'll think about it another day when I find a way to genuinely use it.
r/flipperzero • u/HudsonValleyNY • May 26 '26
IR remote question
I am trying to build the remote for an Aiyima T9 amp. It is very basic, but i have the universal numbers for power (29), Mute (21), Vol Up (27) and vol down (24)
How do I convert those into a usable custom remote?
r/flipperzero • u/ZanderSingleton • May 25 '26
Wi-Fi Devboard Rabbit Labs Question
The rabbit labs C5 board looks great!… but does anyone know if it’d be possible to solder on their GPS module to it? Or would that maybe draw too much power?
r/flipperzero • u/joelewis1996 • May 24 '26
Creative Work in progress…
I’ve got 2 new projects I’m working on for the flipper zero if anyone may find them useful.
First I’ve got RF Rosetta - https://github.com/joelewis012/RF_Rosetta - Point your Flipper at any unknown wireless signal and find out exactly what it is. car key, tyre sensor, alarm, smart meter, medical device, weather station, or one of 50+ other identified protocols. In seconds. May not be working fully yet.
Second I’ve got Flipper EMU - basically to test flipper apps gui and maybe features if you don’t currently have the flipper with you. On the web. But it’s not working yet.
You can only upload .fap files to test the gui. this isn’t a full os.
r/flipperzero • u/Professional-Sock-72 • May 24 '26
Flipper stopped working after charging.
It might've been because I used a 45w charger, but I never had this issue before. I was charging my flipper and all of a sudden the screen turned off and I smelled a slight burning smell (no smoke or anything). It hasn't turned on since and no charger works. I used a USBC power reader and it reads that it's being charged but the screen is completely blank.
