intermediate · Time varies

Bruce firmware

Open-source ESP32 offensive-security toolkit for supported handheld boards, intended for authorized testing and education.

View original project ↗

What you’re building

Bruce is an AGPL-licensed ESP32 firmware suite for authorized offensive-security and red-team work. Its repository lists Wi-Fi, Bluetooth, infrared, RF, RFID/NFC, GPS, BadUSB, storage, WebUI, and utility functions, with availability varying by board and attached modules. The supported-device table includes M5Stack Cardputer and multiple M5Stack, LilyGO, CYD, and ESP32 variants; some functions need external CC1101, NRF24, PN532, GPS, or SD hardware. The simplest outcome is a handheld menu-driven toolkit flashed from the official Bruce web flasher, a release binary via esptool, or OTA through M5Launcher. This is not general consumer firmware: capabilities differ per target, add-on wiring must match the project documentation, and use is explicitly restricted to legal, authorized testing.

Key steps

  1. Check the repository’s device-specific support table and identify which Bruce functions are available on the exact board and optional modules.
  2. Open the official Bruce web flasher, select the matching supported device build, and connect the board over a data-capable USB cable.
  3. Flash the selected build; alternatively download the matching release binary and write it locally with esptool, or install it by OTA from M5Launcher.
  4. Boot Bruce and verify its menu and storage access before enabling any hardware-specific feature.
  5. Use Wi-Fi, radio, USB, and credential-testing functions only on systems for which explicit authorization has been obtained.
Sources

Original project and code

Original project pages, manufacturer documentation and repositories used while preparing this page. Last reviewed .

  1. Project by pr3ypr3y