Flipper Zero
Flipper Zero is a portable multi-tool for pentesters and geeks in Tamagotchi body. It loves to hack digital stuff around such as radio protocols, access control systems, hardware and more. It's fully open source and customizable so you can extend it in whatever way you like.
Tamagotchi for Hackers
Compatible with Arduino IDE
and PlatformIO
Based on STM32 MCU
Fully Open Source
firmware and hardware
Flipper Zero in hand
What is Flipper Zero
Flipper Zero is a tiny piece of hardware that has a curious personality of a cyber dolphin who really loves to hack. It can interact with digital systems in real life and grow while you are hacking. Flip any kind of access control system, RFID, radio protocol and perform any kind of hardware hacks using GPIO pins.






The main idea of Flipper Zero is to combine all the phreaking hardware tools that you could need for hacking on the go. Flipper was inspired by pwnagotchi project, but unlike all the other DIY boards for hackers, Flipper is designed with the convenience of everyday usage in mind — it has a robust case, handy buttons and shape, so there are no dirty PCBs or scratchy pins. Flipper turns hacking into a game, reminding you that hacking always should be fun.


Your hacking buddy
Flipper Zero top side GPIO pins
Flipper Zero back side USB Type-C port
Flipper Zero specification
1.4" monochrome LCD display
128x64 px, ultra-low power
Sunlight readable
5 button directional pad for menu navigation
Status LED
Exit/back button
3.3V and 5V power
Flipper Zero is completely autonomous and could be controlled from a 5-position directional pad without additional devices, such as a computer or smartphone. The main scripts and popular attacks are available from the menu.

For more control, you can connect Flipper to USB. We decided to build in a cool old-school LCD screen, not TFT / IPS / OLED, which is perfectly visible in sunlight and has an ultra-low power 400nA consumption with the backlight turned off.
GPIO pins
3.3V logic levels (5V tolerant)
Infrared transceiver
Hand strap hole
USB Type-C
Power and battery charging
Firmware update
433/868 MHz Transceiver

This is the operating range for a wide class of devices and access control systems, such as garage doors remotes, boom barriers, IoT sensors and remote keyless systems.

Flipper has a built-in CC1101 chip that can both transmit and receive, and an integrated 433MHz frequencies antenna, which makes it a powerful transceiver capable of up to 100 meters range.



Sub-1 GHz Range
Smart sockets & bulbs
IoT sensors & doorbells
Signal Analyzer
Flipper Zero has an integrated decoder for popular remote control algorithms: Keeloq, Came, Doorhan and others. So you can analyze an unknown radio system to figure out the underhood protocol.

It can record the samples of radio protocols to analyze it later on the computer, as well as replay saved samples. Many remotes and IoT devices such as doorbells, sensors and radio sockets don't use any encryption at all — in this case, Flipper can replay the signal, even if the protocol wasn't recognized.

Oh, and one more thing — Flipper uses 433 MHz to communicate with other Flippers out there as Tamagotchi, so you can make some cyber dolphin friends :)
Flipper Zero 433 MHz
CC1101 is a universal transceiver designed for very low-power wireless applications. It supports various types of digital modulations such as 2-FSK, 4-FSK, GFSK and MSK, as well as OOK and flexible ASK shaping. You can perform any digital communication in your applications such as connecting with IoT devices and access systems.
Customizable radio platform
Flipper Zero 433 MHz Sniffer Signal Analyzer
Flipper Zero CC1101 radio chipset
Garage doors & barriers
125kHz RFID
Low-frequency proximity cards
This type of card is widely used in old access control systems around the world. It's pretty dumb, keeps only N-byte ID and has no authentication mechanism, allowing it to be read, cloned and emulated by anyone. A 125 kHz antenna is located on the bottom of Flipper — it can read the EM-4100 and HID Prox cards, save them to memory and emulate any of the saved cards choosing it from the menu.

You can also emulate the card entering its ID manually, so you can easily send it to your friend in text format. Thus, Flipper owners can exchange card dumps with each other remotely.
EM-4100 cards reader / writer / emulator
Flipper Zero EM4100 emulator
Flipper Zero 125 khz proximity card reader and emulator
The infrared transmitter can transmit any signal to control electronics such as TV, air conditioners, stereo systems and others.

Flipper has a built-in library of common TV vendors commands like turning off, volume UP/DOWN and so on. This library is constantly updated by Flipper community users that upload new signals to IR remote Flipper database.
InfraRed transmitter
Flipper Zero infrared transmitter
Flipper Zero has an IR receiver that can receive signals and save it to the library, so you can store any of your existing remotes and transmit it later, as well as upload it to the public database to share with other Flipper users.
Flipper Zero infrared receiver
Infrared learning feature
InfraRed Transceiver
Infrared reciever
Flipper Zero Arduino IDE compatible
Arduino IDE Compatible
You can extend Flipper Zero functionality by writing your own code using familiar Arduino IDE or PlatformIO software. Uploading sketches is as easy as to the regular Arduino board.

All built-in Flipper hardware can be used in your programs, such as a built-in display to print text and draw images, buttons to navigate, radio module for Sub-1Ghz communication, RFID for proximity card, IR for infrared applications and GPIO for extending the functionality with your own modules.

And don't worry about bloating the memory — Flipper has four times more flash than Arduino Mega.
Extend with your own plugins
Flipper Zero plugins
Flipper Zero can run your code as a separate plugin without losing its own firmware, so unlike other basic Arduino boards, Flipper can store multiple programs at the same time without losing its main firmware. Thus, you can run any specific code from the plugins menu without uploading it every time you need it. And don't be afraid to break something — you can always reboot to original firmware if your code freezes.

Hand strap hole
Tool for Hardware Hacking
Flipper Zero — Tool for Hardware Hacking
Hand strap hole
Flipper Zero can be used as a versatile tool for hardware hacking, firmware flashing, debugging and fuzzing. You can connect it to any piece of hardware using GPIO and run your own code, control it with buttons and print debug messages to the LCD display. It can also be used as regular USB to UART/SPI/I2C/etc adapter connected to PC.
SPI/UART/I2C to USB converter
Communicate with hardware from your desktop application.
Firmware flasher
Use it to flash any kind of SPI memory, such as EEPROM.
Fuzzing tool
Test any protocols and signals.
Built-in 5V and 3.3V power source. Control from built-in buttons and display, no PC required.
Completely Autonomous
Flipper Zero bad usb attack toolkit
Bad USB Mode
Flipper Zero can emulate USB slave devices and connect to the computer like a regular input device, such as an HID keyboard or Ethernet adapter, just as USB Ducky. You can write your own payload for the keyboard to type any key sequence, as well as fuzzing USB stack on a target device.
Acting as USB slave device
Hand strap hole
Flipper Zero has a built-in 1-wire connector to read iButton (DS1990A) contact keys. This technology is quite old but still widely used around the world. It is also known as TouchMemory or Dallas keys. They work on the 1-Wire protocol and don't have any authentication, so they could be easily read. Flipper can read these keys, save IDs into the memory, write IDs to blank keys and emulate the key itself.

Flipper Zero has a unique contact pad design on the corner — its shape works as a reader and simulator at the same time. The central pad of iButton keys is positive contact and the outer ring is ground, so you need to lay the key in the correct position. The same contact pad can be used to simulate keys from the memory — just touch the reader with it. This mode could also be handy to silently intercept the 1-Wire data line.
iButton
Flipper Zero ibutton 1-wire reader
1-Wire
+
_
Flipper Zero iButton emulator
1-Wire keys (Touch Memory)
Flipper Zero on backpack
Flipper Zero fits in a pocket
Fits in your pocket
Flipper Zero on a keychain
What's inside
Flipper Zero technical specification and scheme
Pre-order
Crowdfunding June 2020
Flipper Zero crowdfunding campaign will launch June 2020.
Leave your e-mail and we will let you know when it starts so you can get your early-bird Flipper one of the first. We also share latest news and product updates to keep you informed on the progress, and don't worry — we won't spam you.
Сontact author
The best way to discuss Flipper is to use the forum. Contact me directly only for business inquiries.

Pavel Zhovner
pavel@zhovner.com
Made on
Tilda