🦈 Bruce

Bruce is a versatile ESP32 firmware packed with offensive-security tools, built to make Red Team operations fast and portable.

It also supports M5Stack, LILYGO , RockBase IoT and Elecrow products, and works great with the Cardputer, Sticks, M5Cores, T-Decks and T-Embeds.

⚡ Get Our Official DevKit!

RF REAPER

RF REAPER is our custom PCB devkit, purpose-built for Bruce!

Every major feature works natively, right out of the box. Sub-GHz, NFC/RFID, IR, 2.4GHz(NRF), GPS-ready, and a microSD, all driven by a beefy ESP32-S3 (16MB Flash / 8MB PSRAM). Tons of GPIOs via the AW9523 expander plus Flipper Zero & iButton header compatibility mean you can hack, mod, and build on it endlessly. Want a specific function? Ask us with an issue, we'll check it.

👉 Buy the RF REAPER and official boards

Check our fully open-source hardware too: https://bruce.computer/boards

More custom devkit boards coming soon! Stay across our communities!

🏗️ How to install

The easiest way to install Bruce is using our official Web Flasher!

Check out: https://bruce.computer/flasher

Alternatively, you can download the latest binary from releases or actions and flash locally using esptool.py

esptool.py --port /dev/ttyACM0 write_flash 0x00000 Bruce-<device>.bin

For m5stack devices

If you already use M5Launcher to manage your m5stack device, you can install it with OTA

Or you can burn it directly from the m5burner tool, just search for 'Bruce' (My official builds will be uploaded by "owner" and have photos.) on the device category you want to and click on burn

⌨️ Discord Server

Contact us in our Discord Server!

📑 Wiki

For more information on each function supported by Bruce, read our wiki here. Also, read our FAQ

💻 List of Features

WiFi

• Connect to WiFi
• WiFi AP
• Disconnect WiFi
• WiFi Atks
  • Beacon Spam
  • Target Atk
    • Information
    • Target Deauth
    • EvilPortal + Deauth
  • Deauth Flood (More than one target)
• Wardriving
• TelNet
• SSH
• RAW Sniffer
• TCP Client
• TCP Listener
• Evil Portal
• Scan Hosts (with TCP Port scanning)
• Responder
• Arp Spoofing
• Arp Poisoning
• Wireguard Tunneling
• Brucegotchi
  • Pwnagotchi friend
  • Pwngrid spam faces & names
    • [Optional] DoScreen a very long name and face
    • [Optional] Flood uniq peer identifiers

BLE

• BLE Scan
• Bad BLE - Run Ducky scripts, similar to BadUsb
• BLE Keyboard - Cardputer and T-Deck Only
• iOS Spam
• Windows Spam
• Samsung Spam
• Android Spam
• Spam All

RF

• Scan/Copy
• Custom SubGhz
• Spectrum
• Jammer Full (sends a full squared wave into output)
• Jammer Intermittent (sends PWM signal into output)
• Config
  • RF TX Pin
  • RF RX Pin
  • RF Module
    • RF433 T/R M5Stack
    • CC1101 (Sub-Ghz)
  • RF Frequency
• Replay

RFID

• Read tag
• Read 125kHz
• Clone tag
• Write NDEF records
• Amiibolink
• Chameleon
• Write data
• Erase data
• Save file
• Load file
• Config
  • RFID Module
    • PN532
    • PN532Killer
• Emulate tag

IR

• TV-B-Gone
• IR Receiver
• Custom IR (NEC, NECext, SIRC, SIRC15, SIRC20, Samsung32, RC5, RC5X, RC6)
• Config - [X] Ir TX Pin - [X] Ir RX Pin

FM

• Broadcast standard
• Broadcast reserved
• Broadcast stop
• FM Spectrum
• Hijack Traffic Announcements
• Config

NRF24

• NRF24 Jammer
• 2.4G Spectrum
• Mousejack

Scripts

• JavaScript Interpreter Credits to justinknight93

Others

• Mic Spectrum
• QRCodes
  • Custom
  • PIX (Brazil bank transfer system)
• SD Card Mngr
  • View image (jpg)
  • File Info
  • Wigle Upload
  • Play Audio
  • View File
• LittleFS Mngr
• WebUI
  • Server Structure
  • Html
  • SDCard Mngr
  • Spiffs Mngr
• Megalodon
• BADUsb (New features, LittleFS and SDCard)
• USB Keyboard - Cardputer and T-Deck Only
• iButton
• LED Control

Clock

• RTC Support
• NTP time adjust
• Manual adjust

Connect (ESPNOW)

• Send File
• Receive File
• Send Commands
• Receive Commands

Config

• Brightness
• Dim Time
• Orientation
• UI Color
• Boot Sound on/off
• Clock
• Sleep
• Restart

Specific functions per Device, the ones not mentioned here are available to all.