Features

Clone a target AP's SSID with a captive portal; optional deauth and real-time password verification

Custom hotspot with optional DNS spoofing, captive portal, web file manager, and WiFi QR code

Capture WPA2 handshakes — pick one target AP from a 10 s scan or sweep every visible AP on all 13 channels; crack passwords offline with a wordlist

Lure devices with a fake open AP matching their saved SSID and capture credentials via captive portal

Capture WPA2 handshakes via fake AP deployed on a paired Karma Support device; M1+M2 saved for offline cracking

Detect rogue APs responding to probes by broadcasting fake probe requests across channels and monitoring responses

Passive promiscuous monitor — deauth events, probe leaks, beacon flood detection, and evil twin detection across five views

Flood the area with fake SSIDs — Spam mode (random, built-in dictionary, or SD-loaded SSID list, rate-limited on ch 1/6/11) or Flood mode targeting a specific AP

Man-in-the-middle with DHCP starvation, deauth burst, rogue DHCP, DNS spoofing, and web file manager

Discover network cameras, identify brands, test credentials, and stream live video

Discover DIAL-capable smart TVs / Chromecasts on the LAN and push a YouTube video at one or all of them

Flood the LAN with phantom mDNS targets — Spotify Connect, AirPlay, Google Cast, Printer, SMB Workstation

Discover SSDP-advertised network printers and send short joke jobs over JetDirect (port 9100)

LLMNR/NBT-NS name poisoning + fake SMB that captures NetNTLMv2 hashes (hashcat -m 5600) to SD — under WiFi → Network; 8/16 MB boards only

Turn the device into a SOCKS4/4a TCP proxy on port 1080 so a laptop tunnels through its WiFi — under WiFi → Network; 8/16 MB boards only

Manage device files from a browser over WiFi; verify and save WPA passwords against captured handshakes; browser-side crack.wasm engine

Over-the-air downloader — Web File Manager assets, firmware samples, Flipper-IRDB, BadUSB scripts, and Lua scripts from unigeek-lua

Browse Wikipedia over WiFi — paged search, Random Article, On This Day, cached articles, and cross-language favorites; long-press for Open / Favorite / Share QR; 21 Latin-script editions transliterated to ASCII for the TFT

Passive BLE scanner that detects Flipper Zero, AirTags, skimmers, BitChat users, and BLE spam

Tests Google Fast Pair devices for CVE-2025-36911 — forged KBP handshake via ECDH key exchange

Scan nearby BLE devices; tap any result for a full info view with vendor ID, RSSI, distance estimate, manufacturer data, services, and a scrollable detail drill-down

BLE client for ChameleonUltra / ChameleonLite — 8-slot manager, MF dict, static + weak-PRNG nested attacks, MFKey32, T5577 write

BLE desk pet for Claude Desktop on macOS / Windows — shows session status, running tasks, and lets you approve permission prompts from the device

Manage on-device files wirelessly from the browser over BLE (Nordic UART) — no WiFi; enable Bluetooth → Remote Device (advertises as UniGeek Remote); the same https://unigeek.xid.run/app/files page also connects over USB serial via HID → USB Remote

Run script files from storage to automate keystrokes over BLE or USB HID — variables, IF/WHILE, functions, expressions (DuckyScript 3.0 subset)

Send small periodic mouse movements over BLE or USB HID to keep the host awake

Send HID consumer-control keys — camera shutter, play/pause, track skip, volume, brightness, lock, eject

Deterministic vault — entries derive via SHA256 (Local) or HMAC keyed by the device's WebAuthn master.bin (binds the password to this physical device); auto-type via HID with one press

Act as a USB FIDO2 / WebAuthn passkey — full CTAP 2.1 (resident creds, ClientPIN, hmac-secret/PRF, largeBlob, GetNextAssertion, CredentialManagement, AuthenticatorConfig) + U2F register/authenticate; BIP-39 seed backup/restore; ESP32-S3 only

Expose the SD card to a host as a removable USB drive (card-reader mode) over USB MSC; single-claim USB profile; ESP32-S3 boards with an SD card only

MIFARE Classic card reader and key recovery — default-key probe, dictionary, static-nested, weak-PRNG nested, and darkside attacks

PN532 / PN532Killer over HSU — ISO14443A, ISO15693, EM4100, MIFARE Classic, Ultralight, and magic-card tools

PN532 over I2C — ISO14443A, ISO15693, EM4100, MIFARE Classic, Ultralight, and magic-card tools; auto-detects external or internal I2C bus

Live GPS view, WiFi/BLE wardriving with Wigle CSV export, and Wigle upload integration

Capture, replay, and manage IR signals — compatible with Flipper Zero and Bruce formats

Capture, replay, and jam Sub-GHz RF signals — 38 brand/manufacturer protocol decoders, peak frequency detector, live RAW/Code receive filter, continuous RAW waveform recorder (Bruce-style, records until stop with live wave/RSSI animation), scrollable Signal Info view, KeeLoq auto-decode + counter-step (Replay +1) rolling-code replay; compatible with Flipper Zero .sub format

Capture, replay, and jam 433.92 MHz signals via the M5 RF433T/R two-pin GPIO modules — no CC1101 needed; KeeLoq auto-decode + Replay +1; shares .sub files with Sub-GHz

2.4 GHz spectrum analyzer, multi-mode jammer, and MouseJack wireless keyboard injection

Configure GPIO pins for GPS, I2C, CC1101, NRF24, PN532, and CoreS3 Grove 5V direction — defaults per board, with safety notes

Browse, view (text or hex), rename, copy, cut, paste, and delete files on device storage

Mirror the device screen in a browser and control it over USB serial or Bluetooth — navigate, type, and tap from https://unigeek.xid.run/app/remote; needs HID → USB Remote (or Bluetooth → Remote Device) on

Native Android app for Remote, File Manager, and Firmware Update over USB-OTG or Bluetooth — same wire protocol as the web tools; download the .apk from the Install page

244 achievements across 13 domains; set any unlocked entry as your Agent Title

Time-based OTP authenticator; add accounts by Base32 secret, view live 6/8-digit codes with countdown, hold to view or delete

Serial terminal over configurable GPIO pins; text/hex send modes, background receive, Log Mode picks Off / File / Stream AP / Stream Network (Telnet TCP-23, up to 4 clients)

Top-level main menu item; run Lua 5.1 scripts from SD with display + sprite graphics, button + touch input, modal text/number/select/confirm prompts, JSON, path/time/config helpers, SD CRUD, WiFi/HTTP, Sub-GHz RF (auto-detect CC1101 / M5 RF433), and toast notifications

Classic side-scrolling game with randomized pipes and scoring

Guess a 5-letter word — English and Indonesian; top 5 high scores per difficulty

Wordle-style game using hex characters — top 5 high scores per difficulty

Simon Says-style memory game across 4 difficulty levels with high score tracking

Higher/lower guessing game — 4 difficulties (1-99 to 1-9999); top 5 high scores

Nokia-style RTTTL step editor for boards with a speaker — 64 steps × MIDI pitch / rest / length, per-song BPM, audition on UP/DOWN, save .rtttl to SD; 7 built-in demos

Device name, display timeout, brightness, volume, navigation sound, theme color, WFM password, PIN, hidden modules, and device status (the USB Remote / Screen-mirror services moved to the HID menu)

Configure GPIO pins for GPS, I2C, CC1101, NRF24, PN532, and CoreS3 Grove 5V direction — defaults per board, with safety notes