Bruce: predatory ESP32 security firmware on an M5Stack Cardputer Adv
Bruce is a portable ESP32 offensive-security toolkit (Wi-Fi, BLE, Sub-GHz, RFID, IR, BadUSB and more). Flash it onto an M5Stack Cardputer Adv from the browser and keep it in a pocket.
What it is
A pocket ESP32 security toolkit: flash Bruce onto an M5Stack Cardputer Adv and you get Wi-Fi, BLE, Sub-GHz, RFID, IR and BadUSB tools on a 56-key keyboard.
What you need
How hard
Beginner for the Cardputer itself: open bruce.computer/flasher, pick Cardputer and flash over USB-C. Adding a CC1101 or PN532 means wiring those modules (the wiki has pinouts).
Photos
Photos: M5Stack
Key Facts
- Firmware: Bruce (AGPL-3.0), ~7,000 GitHub stars
- Tools: Wi-Fi, BLE, Sub-GHz (CC1101), RFID/NFC, IR, BadUSB, FM, NRF24, WebUI
- Hardware focus: M5Stack Cardputer Adv (ESP32-S3), also Stick, Core, LilyGO T-Embed/T-Deck and more
- Install: browser web flasher at bruce.computer/flasher, or esptool / M5Burner
- Cardputer Adv: $29.90 on the M5Stack store (Oct 21, 2026), SKU K132-ADV
- Safety: security research only — networks and devices you own or have permission to test
About This Project
Bruce is open-source ESP32 firmware aimed at red-team and security research work: Wi-Fi attacks and scanning (beacon spam, deauth, evil portal, wardriving, WireGuard), BLE spam and Bad BLE, Sub-GHz RF with a CC1101, RFID/NFC with a PN532, IR TV-B-Gone and replay, BadUSB and USB keyboard, FM transmit, NRF24 jamming, a JavaScript interpreter and a WebUI for files. The README lists many more boards (StickC Plus2, CoreS3, LilyGO T-Embed CC1101, T-Deck, CYD and Bruce's own RF Reaper), and the device table marks M5Stack Cardputer (and ADV) as fully supported for the main radio modules. Install it from the official web flasher at bruce.computer/flasher, or burn a release binary with esptool or M5Burner. The Cardputer Adv is a card-sized ESP32-S3 computer with a 1.14in IPS screen, a 56-key keyboard, Stamp-S3A, a larger ~1,750 mAh battery, a BMI270 IMU, ES8311 audio with a 3.5 mm jack, Grove, microSD and a 14-pin expansion header; M5Stack listed it at $29.90 on October 21, 2026 (SKU K132-ADV). Optional CC1101, PN532 or NRF24 modules plug in for RF and RFID features the bare board doesn't ship with. License is AGPL-3.0. This is a security-research toolkit: use it only on networks and devices you own or have permission to test.
Source & Attribution
Parts Needed
- M5Stack Cardputer Adv
- USB data cable
- microSD card (optional)
- CC1101 Sub-GHz transceiver module (optional)
- PN532 NFC / RFID module (optional)
- NRF24L01+ module (optional)
Steps
- 1
Get the board
Buy an M5Stack Cardputer Adv (SKU K132-ADV). Any of the other boards in the Bruce device table also work; this page focuses on the Cardputer Adv.
- 2
Flash
Open https://bruce.computer/flasher in Chrome or Edge, connect the board over USB-C, pick the Cardputer build and flash. Or download a release binary and flash with esptool.py write_flash 0x00000 Bruce-<device>.bin, or use M5Burner and search for Bruce.
- 3
First boot
The shark splash and main menu should appear on the 1.14in screen. Use the keyboard to move through WiFi, BLE, RF, RFID, IR, BadUSB and Config.
- 4
Optional modules
For Sub-GHz, wire a CC1101 (the wiki and the repo's media/connections photos show Cardputer pinouts). For NFC, add a PN532 over I2C or SPI. Put portals, .sub and .ir files on a microSD card and manage them from the WebUI.
- 5
Stay legal
Bruce is for security research. Use it only on networks and devices you own or have written permission to test.
Available as a complete kit
Cardputer Adv listed at $29.90 on the M5Stack store (Oct 21, 2026), SKU K132-ADV
Part details in our parts libraryRelated Projects
