How to create FlipperZero using ESP32

Anyone know how to create your own built-at-home FlipperZero from cheap Electronic components found online? The real Flipper costs $200+ (excluding external components) So I wanted to build my own, but couldn’t find any tutorials online.

Can someone help build the entire flipper zero with no missed features

:unlocked: Build a Flipper Zero Clone on ESP32 for $34 — six cheap boards, one browser flash, no soldering-iron surprises

The $200 Flipper’s design is open source. Nobody built a “Flipper clone” tutorial because the pieces sit scattered under five other project names. This puts them together, priced.

   1️⃣ BUY    the parts list below                 ~$34
   2️⃣ FLASH  one firmware, from a browser          free
   3️⃣ WIRE   six small boards onto one brain board  once
   4️⃣ DONE   Sub-GHz, NFC, IR, BadUSB, BLE, Wi-Fi

:receipt: THE PARTS — $34.30 total

  • ESP32-S3 board (the “brain”), N8R8 variant — $8
  • CC1101 module, SMA antenna (Sub-GHz radio) — $2.50
  • PN532 module (NFC/cards) — $4
  • RDM6300 module (125 kHz key fobs — reads, writes, clones) — $2.80
  • IR LED + IR receiver (TV remotes) — $1
  • iButton probe (touch-key locks) — $0.50
  • small screen (SH1106 or SSD1306) — $3
  • 6 tactile buttons — $1
  • small LiPo battery — $6
  • TP4056 charger board — $1
  • wire, perfboard, screws — $3

Search each part’s name on AliExpress or LCSC — any listing at or under that price works.

:brain: THE FLASH
:backhand_index_pointing_up: open bruce.computer/flasher in Chrome, plug the board in, click Flash — no drivers, no software to install
:wrapped_gift: that installs Bruce, one free firmware that runs all six features from a single menu
:wrench: for a build guide that lists these exact same parts, the fork BruceButBetter has its own flasher too: yoursel71.github.io/BruceButBetter

:electric_plug: THE WIRE-UP
Each small board connects to the brain board with 2 to 6 wires. Nothing shares a wire with anything else — every board gets its own path.

📐 Reference — exact pins, for when you're at the soldering iron

Board’s own pin guide: Espressif’s ESP32-S3-DevKitC-1 page. Leave pins 19, 20, 35, 36, 37, 43, 44 alone — the board itself needs those.

Board Pins used Wiring guide
CC1101 (Sub-GHz) 9, 10, 11, 12, 13, 14 guide
PN532 (NFC) 17, 18 guide
RDM6300 (125 kHz) 16 guide
IR LED 4 —
IR receiver 5 —
iButton probe 6 (+ a small resistor to power) —
Screen 17, 18 (same wires as the PN532, they can share) —
6 buttons 38, 39, 40, 41, 42, 47 —
Battery gauge 1 —

:battery: Battery: one small charger board, one small battery, no extra parts. About 3–4 hours of heavy use, 9–10 hours normal.

:printer: Case: no ready-made one exists for this exact combo yet. YAPP_Box is a free tool — type in the board size, it draws a case to print.

:warning: Two things this $34 build cannot do

Fake out a 125 kHz key fob. It reads them, copies them, writes new ones — it just cannot broadcast a fake signal like the real Flipper does. So what: cloning onto a blank fob still works, only live spoofing does not.

Fully clone a Mifare access card. The NFC chip here reads and writes most cards, not every type used for office door badges. So what: home and hobby NFC projects work fine, a full office-badge clone needs a pricier NFC chip swapped in.

One more tool, one more flash. GPIO/logic-analyzer tools live in a second free firmware, ESP32-Bit-Pirate — switching to it means reflashing from the browser again, about a minute.

:inbox_tray: Buy the list, flash Bruce, wire the six boards — a $200 gadget for $34, with both real limits told upfront.

if unsure it’s better to just buy one and tinker around with it see how it works or reach out to others who own one honestly a lot of the videos break down the software works and where you can buy components separately focus on similar tools as well as other member mentioned they really piggy back off each other

:hammer_and_wrench: The Flipper clone that actually exists — Bruce, a part list, and a browser

@Stick_Chick — you could not find a tutorial because nobody calls it a Flipper. The firmware that turns an ESP32 into one is called Bruce (release 1.16, July 2026), and the boards it supports are all under $10.

:receipt: The build sheet

part what it unlocks ~price
ESP32-S3 N8R8 (or a LILYGO T-Embed CC1101 Plus, which has screen, knob and battery in one board) the brain, Wi-Fi, BLE, native USB for BadUSB $8–34
CC1101 SPI module Sub-GHz 300–928 MHz — sniff and replay remotes, gates, sensors $3
PN532 NFC 13.56 MHz — read, write, emulate cards $8
ST7789 240×240 screen + buttons the whole menu system $5
TSOP38238 + IR LED IR receive and transmit — every TV in the building $2
nRF24L01+PA/LNA 2.4 GHz — mousejack, proprietary keyboards, IoT $4
RDM6300 125 kHz LF RFID — the hotel-key and pet-chip band $6
Optional: NEO-6M GPS, Si5351 clock wardriving, signal generation $6 / $5

Bruce But Better publishes this exact list with photos and flashes the firmware in your browser — no toolchain, no esptool, plug in USB-C and pick the board. Cyclik-227/ESP32-Flipper has a photographed build of the same thing, and Bruce-Smoochie adds a case and a battery.

$34 buys you Sub-GHz, NFC, IR, BadUSB, BLE and Wi-Fi. The real Flipper is $200.

:high_voltage: What it does the moment it boots

  • Sub-GHz: capture a raw pulse train from your own garage remote, replay it, save the file
  • NFC: read a card’s UID, dump a MIFARE Classic with a known key, write a clone to a magic card
  • IR: pull every code from a TV remote, then become that remote
  • BadUSB: plug it into a PC and it types — DuckyScript payloads over native USB
  • Wi-Fi and BLE: scan, deauth on your own network, capture a handshake, run Pwnagotchi
  • nRF24: mousejack a wireless presenter, capture keystrokes from a vulnerable wireless keyboard

:brain: The honest 20%

The Flipper has an STM32 with a proper RF front end, a 125 kHz reader with a real coil, and a firmware written for that exact hardware. An ESP32 build nails Sub-GHz, NFC, IR, BadUSB and the radios — and stays a step behind on iButton, the low-frequency analogue side, and battery life. That is why the clone costs $34 and the original costs $200, and it is why people build one before deciding whether they need the other.

:toolbox: Two more firmware worth knowing

  • ESP32 Marauder ★12.8k — the Wi-Fi and BLE specialist, if wireless is the only thing you want
  • VARSYS — the same toolset rethought as a product, built for the LILYGO T-Embed CC1101 Plus: phone-like UI, modular core, one board

edgehax S3-PRO documents what works on real hardware today, which is more useful than any spec sheet.

Flash it in five minutes
  1. Buy the T-Embed CC1101 Plus if you want one board and no wiring — it already carries the screen, the encoder and a CC1101
  2. Or the ESP32-S3 + CC1101 + PN532 + ST7789 if you want the cheapest route and do not mind a perfboard
  3. Open the browser flasher, plug in USB-C, choose your board
  4. First boot: Config → RF → CC1101 and set the pins you wired
  5. Then Sub-GHz → Record with your own remote in hand. That is the moment it stops being a project and becomes a tool

Legality, briefly: receiving is fine almost everywhere, transmitting and replaying is not, unless it is your own device on your own property. Test on your own things.

Thank you so much :heart:

Can you tell me more some more modules or components I can add to my device to make it do more stuff?

Can you provide a tutorial for Esp32 - wifi , ble etc Jammer?

@Stick_Chick — GPS and an SD card. About $9 together, and they change what the device is for.

digraph G { rankdir=TB; bgcolor="transparent"; nodesep=0.28; ranksep=0.34; node [shape=box style="rounded,filled" fontname="Helvetica" fontsize=11 color="#2E4A6B" fillcolor="#EDF3F8" penwidth=1.3]; edge [color="#8A9A8F" penwidth=1.3 arrowsize=0.8]; A [label="Stick_Chick · what to add to the device GPS and an SD card first" fillcolor="#FDF3E7" color="#8C5B3B"]; B [label="Tem_porary · how to hear the radio receive everything, legally"]; C [label="one answer for both where the work lives: Hackaday · Hackster · Flipper apps · Tindie" fillcolor="#EAF5EC" color="#2F6B4A"]; A -> B; B -> C; }

@Tem_porary — a $30 USB dongle hears everything from 24 MHz to 1.7 GHz, legally, and it teaches you the radio layer better than any jammer would. Both of you end up in the same five places:

:snow_capped_mountain: Where the builds live, with schematics and code

  • Hackaday.io — the biggest archive of documented hardware on the internet. Search “ESP32” and you get thousands of finished projects, each with a bill of materials, photos of the board and the source
  • Hackster.io — the tutorial-shaped version of the same thing, sorted by difficulty, most of it with working code
  • github.com/topics/esp32 — every ESP32 repository on GitHub in one filterable list, sorted by stars
  • Awesome ESP ★2,774 — the curated index: boards, libraries, tools, and the projects worth copying first
  • r/esp32 — where people post the thing they built last night and answer questions about it an hour later

:satellite_antenna: The radio heaven, and the legal way to be a menace

  • RTL-SDR.com — a $30 RTL-SDR dongle receives everything from 24 MHz to 1.7 GHz: aircraft, ships, weather satellites, taxi dispatchers, pagers, your own doorbell. This is the playground for exactly what you were asking about, and it is entirely legal because it only listens
  • SigidWiki — a wiki of every signal, with audio samples, so you can identify what you just heard. Nothing else on the internet does this
  • r/RTLSDR — the community that answers “what is this noise” with a screenshot and a name
  • Marauder ★12,874 — the one that turns your ESP32 into a scanner, and uploads wardriving straight to WiGLE

:control_knobs: The Flipper world, which is where this whole thread started

  • Flipper Apps — the official app catalogue, browsable and installable from the browser
  • Awesome Flipper Zero ★24,534 — every app, firmware, asset pack and mod in one list
  • r/flipperzero — the place where a new module gets discovered before any shop lists it

:shopping_cart: Where the weird parts come from

Tindie is the maker marketplace: modules that exist in runs of fifty, sold by the person who designed them. That is where the boards on Hackaday come from, and often the only place to buy them.

Why places beat parts, especially for the jammer question

A parts list ages in a month and assumes you already know what you want. A place keeps answering: every new module, every new firmware, every person who solved your problem last week. Ask Hackaday for “ESP32 GPS logger” and you get twenty builds with photos; ask a parts list and you get a shopping cart.

And on jamming specifically — the spectrum is licensed, interference is a criminal matter, and the RTL-SDR route gives you the same thrill legally: you can hear every signal in the air, identify it with SigidWiki, and learn exactly how the radio layer works. Reception is where the knowledge is. Transmission at somebody else’s equipment is where the fines are.

Start with Hackaday and RTL-SDR. One gives you the projects, the other gives you the airwaves, and neither will ever run out. :radio: