Bruce firmware
Open-source ESP32 offensive-security toolkit for supported handheld boards, intended for authorized testing and education.
View original project ↗What you’re building
Bruce is an AGPL-licensed ESP32 firmware suite for authorized offensive-security and red-team work. Its repository lists Wi-Fi, Bluetooth, infrared, RF, RFID/NFC, GPS, BadUSB, storage, WebUI, and utility functions, with availability varying by board and attached modules. The supported-device table includes M5Stack Cardputer and multiple M5Stack, LilyGO, CYD, and ESP32 variants; some functions need external CC1101, NRF24, PN532, GPS, or SD hardware. The simplest outcome is a handheld menu-driven toolkit flashed from the official Bruce web flasher, a release binary via esptool, or OTA through M5Launcher. This is not general consumer firmware: capabilities differ per target, add-on wiring must match the project documentation, and use is explicitly restricted to legal, authorized testing.
Key steps
- Check the repository’s device-specific support table and identify which Bruce functions are available on the exact board and optional modules.
- Open the official Bruce web flasher, select the matching supported device build, and connect the board over a data-capable USB cable.
- Flash the selected build; alternatively download the matching release binary and write it locally with esptool, or install it by OTA from M5Launcher.
- Boot Bruce and verify its menu and storage access before enabling any hardware-specific feature.
- Use Wi-Fi, radio, USB, and credential-testing functions only on systems for which explicit authorization has been obtained.
Original project and code
Original project pages, manufacturer documentation and repositories used while preparing this page. Last reviewed .


