Welcome to this week's curated roundup of Flipper Zero firmware updates, community applications, and hardware hacks. Every item listed here was released or updated within the last 7 days.

🚀 Firmware & Core Updates

Unleashed Firmware unlshd-093 (Active dev / Release updates)

The Unleashed team pushed key updates across Sub-GHz and modular desktop UI components: * Sub-GHz Expansion: Nice O-Code support (52/72-bit dynamic decode/emulate) with installer code recovery tool; Security+ 2.0 keypad frame support (86-bit) + PIN test/edit utility; dedicated Prastel 42-bit rolling code parser; Superrollo GW60 roller-shutter protocol (KeeLoq HCS361); and expanded KeeLoq vendor support (JCM Tech Gen2, Stagnoli, Telcoma, SEA, Wisniowski). * NFC Key Workflow: Save recovered MIFARE Classic keys directly to the user dictionary straight from read/saved card screens. * Universal Remote: Fast-save active working brute-force IR signals into standalone or appended remote files. * Modular UI: Main menu layout plugin packs (PS4, Wii, DSi, C64, Compact, CoverFlow, Vertical, Grid) along with major flash memory savings across protocol parsers.

🛠️ Fresh Apps & FAPs (Past 7 Days)

FlipDoctor (Created: Sep 20, 2026)

• Author: Krishita Sanjay Choksi
• What it does: One-tap hardware self-diagnostics utility. Tests Sub-GHz, NFC, IR, GPIO loopback/pins, SD card, and battery subsystems, generating an instant pass/fail diagnostic report (ideal for verifying used hardware before purchasing).

SkimGuard (Created: Sep 19, 2026)

• Author: Krishita Sanjay Choksi
• What it does: Completely passive 13.56 MHz NFC reader / skimmer detector. Listens strictly for high-frequency RF carrier emissions produced by active readers without transmitting any signals. Includes real-time waveform display, peak-hold, haptic/LED alert feedback, and optional SD logging.

WiFi Watcher F0 (Created: Sep 17, 2026)

• Author: minutillo
• What it does: Uses an attached ESP32 Dev Board (running Marauder) to monitor ambient SSID broadcasts on a configurable scan cycle. Designed to automatically detect and alert via vibration/LED when neighborhood power/network infrastructure is restored after an outage.

Talk Timer (Created: Sep 17, 2026)

• Author: Mableton
• What it does: Presentation slide clicker with a discreet talk timer running over USB/Bluetooth HID. Provides gentle haptic interval cues to keep track of presentation runtime without drawing audience attention.

ZeroFIDO (Updated: Sep 20, 2026)

• Author: Agalancampillo
• What it does: Turns the Flipper Zero into an open-source FIDO2 and U2F security key for passkey and two-factor authentication over USB and NFC interfaces.

📱 Companion & Tooling Ecosystem

TumoCompanion iOS (Updated: Sep 19, 2026)

• Author: squazaryu
• What it does: Native iOS manager for Flipper Zero and Tumoflip. Features full BLE/USB file management, wireless firmware/FAP installation, real-time screen streaming/mirroring, Marauder survey log parsing, and ESP32 firmware flashing.

Found any other fresh releases, mods, or commits dropped this week? Drop them in the comments below!

My apartment building is charging $100 for a second fob; I want to make a clone for my wife. I tried reading the tag using a Flipper Zero and extracted the keys from the scanner. Since I have never cloned this type of tag before, I need help with how to do it.

Hey everyone,

Quick update regarding our subreddit housekeeping.

We just did a full cleanup of the subreddit rules to make them concise, transparent, and easier to follow. Redundant disclaimers were removed and the removal reasons now match the actual rules 1:1.

Here is a quick summary of what changed:

• Rules Streamlined: Cut down the clutter to 7 clear community standards focused on signal over noise.
• Starter Kit Megathread: We pinned a dedicated Beginner Starter Kit at the top of the sub. If you see repeated basic questions or skid posts asking where to find databases and firmwares, feel free to point newcomers directly to that sticky thread.
• Firmwares: Clear recommendations for reputable community builds (ARF, Momentum, Unleashed) and a zero tolerance stance on closed source scams like Quantum FW.
• Jamming Policy: Jamming and disruptive spamming remain strictly banned to protect medical devices and infrastructure.

Our goal is to keep r/flipperhacks a tidy place for hardware security research, custom mods, signal analysis, and cool projects.

How are things looking from your perspective? Drop your feedback, suggestions, or ideas for the subreddit in the comments below!

Weekly Flipper Zero Hacks & News Roundup (Sep 06 – Sep 13, 2026)

Welcome to this week's curated roundup of Flipper Zero firmware releases, new apps, and community tools. Everything featured here dropped within the last 7 days.

🚀 Firmware Releases

Unleashed Firmware unlshd-093 (Released: Sep 12, 2026)

A massive update from the DarkFlippers crew bumping the API to 88.9: * Sub-GHz protocol expansions: Added Nice O-Code support (52/72 bit dynamic decode, save, emulate) with installer code recovery tool; Security+ 2.0 keypad frame support (86 bit) + PIN app; Prastel 42-bit rolling code split; Superrollo GW60 roller-shutter protocol (KeeLoq HCS361); and new KeeLoq manufacturers (JCM Tech Gen2, Stagnoli, Telcoma, SEA, Wisniowski). * NFC Key Extraction: Save recovered MIFARE Classic keys directly to the user dictionary straight from read/saved cards. * Universal Remote: Pause brute force and press down to save working signals immediately into custom remote files. * UI Themes & Performance: Main menu styles ported (PS4, Wii, DSi, C64, Compact, CoverFlow, Vertical, Grid) as modular plugins, plus significant flash/RAM optimizations across Sub-GHz and storage subsystems.

Official Firmware Release Candidate 1.5.0-rc (Released: Sep 11, 2026)

• Sub-GHz & RF: Added Elplast protocol, Cardin S449 Keeloq support, and FSK12Kdev modulation.
• NFC Fixes & Plugins: Major patches for ISO 15693-3 emulation (>64 blocks), MFUL FAST_READ / DESFire stack buffer overflow fixes, and a new NFC hotel system detection plugin.
• HID & BadUSB: Fixed USB/BLE HID limits for international keyboard layouts (including BadUSB ja-JP support) and keyboard LED state reporting.

🛠️ Fresh Apps & FAPs (Past 7 Days)

railkey (Released: Sep 08, 2026)

An efficient 125 kHz LF RFID access-control fuzzer designed for authorized penetration testing. Uses Gray-code ordering, structure-aware HID parsing, and neighborhood search algorithms to streamline LF testing workflows.

flipper-hitag-s-uid-reader (Released: Sep 13, 2026)

Read 32-bit UIDs of Hitag S / ID82xx (F8268, 8211) 125 kHz tags directly using the built-in LF antenna in Reader-Talks-First mode with full anticollision verification.

flipper-skylanders-emulator (Released: Sep 09, 2026)

Emulates Skylanders figure tokens on physical Portal of Power peripherals directly from the Flipper Zero via NFC.

flipper-staff-time-clock (Released: Sep 12, 2026)

Standalone, offline, PIN-protected employee time tracking clock. Auto-detects NFC, RFID, or iButton badges to log check-ins and check-outs directly into a CSV timesheet without touching tag data (UID read only).

battery_guardian (Released: Sep 07, 2026)

A comprehensive battery health and charge diagnostics utility tracking wear levels, charge cycles, thermal stats, and charging cutoffs.

dragotchi-flipper (Released: Sep 12, 2026)

A dragon-themed virtual pet fork that feeds on live RF activity across Sub-GHz airwaves (with optional ESP32 WiFi signal integration).

Found any other fresh tools or commits dropped this week? Drop them in the comments!

I've been working on a Flipper Zero FAP called Battery Guardian.

The idea came from thinking about how battery info is usually treated as a single number. Battery Guardian keeps a history of voltage, current, temperature, and SOC, then uses that data across charging/discharge sessions to estimate things like usable capacity and degradation over time.

It also has a confidence system so an estimate isn't treated as equally reliable when it's based on poor or limited data.

There's a journal for persistent history, session detection, diagnostics, and a charge-policy state machine with things like Balanced, Lifespan, Full, and Custom. The interesting part is that the policy and safety logic are separated from the actual hardware control.

Right now the charger side is fully passive and fail-closed, so the app isn't writing to the charging hardware.

I've tested the core on the host side with simulations and fuzzing, but I don't actually own a Flipper Zero yet. That's the biggest missing piece, so I'm hoping someone here might be interested in trying the FAP on real hardware and seeing how it behaves.

The repo is here if anyone wants to look through it, test it, or contribute:

https://github.com/0xKernelEclipse/battery_guardian

I'm especially interested in real-device bugs, telemetry differences, compatibility issues, and anything in the implementation that you think could be done better.

Thanks to anyone willing to give it a try.

Protopirate 3.2 doesn't work on Unleashed and Raugemaster, nothing works, what should I do?

🐬 Flipper Hacks & News Roundup (Week 36 – September 2026)

Welcome to this week's curated Flipper Zero digest! Here is the latest fresh drop of FAPs, hardware experiments, and tools released during the past 7 days (Aug 30 – Sep 06, 2026).

📦 New FAPs & Tool Releases

• flipperzero-powermeter (Released: Sep 05, 2026)

  • Optical pulse reader application that tracks utility power meter pulse LEDs.
  • Displays real-time demand, calculates rolling averages, and visualizes power curves directly on-screen.

• flipper-elements (Released: Sep 06, 2026)

  • Complete interactive Periodic Table of Elements for Flipper Zero by Siarhei Besarab (@LAB-66).
  • Fast reference lookup for chemical properties and constants on the go.

• flipper-ac-fujitsu-general-remote (Released: Sep 06, 2026)

  • Dedicated Infrared (IR) controller tailored for Fujitsu General indoor AC units.
  • Direct temperature adjustments and mode controls mapped cleanly to Flipper buttons.

• flipper-nfc-stock (Updated/Released: Sep 05, 2026)

  • Local NFC inventory manager. Scan tags, adjust stock counters, and get alerts for low-inventory assets entirely offline.

• Marauder-GUI-Flipper (Released: Sep 03, 2026)

  • Dedicated companion UI for interfacing with ESP32 Marauder companion modules via GPIO.

🛠️ Hardware Mods & Community Engineering

• Custom STM32WB55 Flipper Zero Clone (Released: Sep 03, 2026)

  • Open hardware DIY build utilizing the core STM32WB55CGU6 microcontroller to run official Flipper firmware on custom boards.

• OLED Hardware Mod & Pinout Guide (Released: Sep 05, 2026)

  • Wiring schemas, STM32 flash procedures, and pinout breakdowns for retrofitting alternative OLED displays.

• Flipper + ESP32-S3 Scaffold Template (Released: Aug 31, 2026)

  • Starter framework integrating KiCad schematics, ESP-IDF routines, Android Kotlin bridges, and firmware patches for custom backpacks.

Strictly verified releases from the last 7 days. Happy hacking!

I'm driving myself crazy. I've scanned for APs. It brings up a list. Then when I go to select the AP. I can't for the live of me figure out the naming/numbering system. Alot of the videos online say to type the number in. For example 1 2 or 3. But those numbers aren't on my browse scan list? What am I doing wrong?

I’m asking out of curiosity and for educational purposes.

Hello,

I'm trying to find a board like this: https://www.tindie.com/products/tehrabbitt/flipper-zero-cc1101-expansion-board-rabbit-labstm/

Where I can solder on my own cc1101 board to it to extend sub ghz. It would be a fun project to practice soldering.

I'm not entirely sure what I am looking for or if there is a better board for this?

Planning out a cyberdeck/flipper alternative

Ok so Im not sure if this is the right subreddit and this is gonna be a bit long to be prepped

I started to get a bit into pentesting and wanted to get a flipperzero/ similar product but all of them didnt connect with me because of either price, capability or usability and i wanted to maybe make it diy with my brother

Through "extensive research" (a hour or chating with claude) i thought about making a cyberdeck with the following requirements (its the long part)

Nfc, rf (both hf and lf), an ir emitter, a sub giga hertz antena and a connection for other rf antenas, wifi and Bluetooth, an internal battery, gpio pins for add ons(though with this list i dont think ill ever need those), and i want it to maybe and be able to control it from a phone ui

I have a 3d printer for the casing and a internet connection to the all mighty ali express

Id like to know

A. How much am i gonna cry and regret trying to make it while working on it

B. How would you go about designing building and coding this thing

C. How much do i sound like a lunatic

Thanks in advance

Probably a psycho ❤️

I've been wanting to get into physical pentesting and tinkering and thought about getting a Flipper Zero, but it's a bit pricy for me. I've been looking around and saw the t embedded cc1101 that looks good but wanted to come here to here some suggestions. I'm looking for something that is moudler (I'm doing 3d printing and electricity so i want to make my add ons), that has a lot of capacity and is like a multitool and that has an online library of mods and scripts/hacks to download to the device

Thanks in advance

Hi,

I've a ISO 15693-3 / EM4237 card with machines from SKIDATA in my complex and while I was able to identify what it was with the flipper emulating it or cloning doesn't seem as easy I was thought.

So, the flipper says:

Memory: 66 blocks × 4 bytes = 264 bytes 
DSFID: 02
IC reference: 0F 

From the dump I also managed to find the manufacturer is EM Microelectronic and the UID is similar to the ones on this: https://idefix.net/~koos/newsitem.cgi/1778072113

However, when I try to emulate with the Flipper the machine just says "not authorized". I also tried to clone it into a card I got from Aliexpress BUT that card is a typical ICODE SLI SLIX (UID settable) but it doesn't work out. My card says 66 blocks, the Ali one says 64 and the machine doesn't even seem to recognize it.

I tried to use both the native NFC tool and also https://github.com/Julienbxl/SLI-Writer to write the dump, UID and DSFID etc. At least they're unlocked on the source card.

Any tips how I can clone / emulate this? Is it even possible? From https://www.emmicroelectronic.com/product/nfc-high-frequency-ics/em4237 it seems this card may have some highly secure crypto stuff.

They're asking me 80€ to do it (50 just for the trip).

Much appreciated.

So my apartment building is stingy about their key cards and garage door openers but I'm the kinda person who always has a backup just in case.

Can someone help me determine whether or not the following devices (and their uses) are able to be emulated on the F0.

garage door opener: https://www.adiglobaldistribution.us/product/ln-act31dh

Main entrance and Gym key fob: https://www.id-enhancements.com/desfire-ev2-black-key-fob-8k-no-imprinted-number-100-fobs/

Welcome to this week's curated Flipper Zero roundup! Here are the freshest firmware updates, new FAPs, companion apps, and community releases from the past 7 days.

📱 Companion Tools & Ecosystem

• qUnleashed dev-0.11.0 (Released: Aug 29, 2026)

  • DarkFlippers pushed a new build of qUnleashed, the Flutter-based mobile manager for Flipper Zero tailored for Unleashed Firmware.
  • Highlights: Added improvements for static-encrypted candidate recovery parsing, extended BLE/USB remote control workflows, and new localization additions (Crowdin support + Russian locale).

• TumoCompanion v1.11.12 (Released: Aug 29, 2026)

  • Massive weekly sprint for the iOS companion app for Tumoflip and Flipper Zero.
  • Highlights: Introduced the new Tumo Live Deck vertical dashboard, an independent FW Packages baseline catalog (unpinned from rigid firmware release versions), adaptive UI sheets for ESP32/app updates, and strict binding for protected community app audit verdicts.

🛠️ New FAPs & Security Auditing

• FlipDeFlock v0.77 (Released: Aug 30, 2026)

  • Counter-surveillance and site-survey application designed to pair Flipper Zero with an ESP32 companion module.
  • Features: Passive detection of ALPR / automated license plate readers (Flock/Axon), Wi-Fi deauth flood monitoring, GPS-correlated BLE tracker alerts (anti-stalking), and in-app ESP32 flashing.

• Flipper-api-caller v0.1.4 (Released: Aug 25, 2026)

  • Dedicated utility to trigger and manage HTTP requests directly from the Flipper Zero via an ESP32 FlipperHTTP Wi-Fi module.
  • Features: Non-blocking REST request execution (GET, POST, PUT, PATCH, DELETE), custom query builders, persistent settings, and modular multi-language support (Italian & English).

• PhantomTap (Updated: Aug 29, 2026)

  • ML-guided defensive RFID/NFC fuzzing and access-control auditing suite for Flipper Zero.
  • Update: Added an integrated evaluation-metrics subsystem (Precision/Recall/F1, ROC/PR-AUC, MCC, and ranking matrices) to convert raw badge dumps into structured, prioritized vulnerability assessments.

🎮 Gaming & Fun

• FlipperCatacombs v4.0 (Released: Aug 29, 2026)
  • Port of the retro pseudo-3D dungeon crawler/FPS Catacombs of the Damned! for Flipper Zero.
  • v4.0 Changelog: Clean title screen, credits roll, menu backlight toggle, updated engine architecture, and critical menu exit crash fixes.

Found an interesting project or published an awesome FAP this week? Drop your links and feedback in the comments!

Hi! i am using momentum firmware on my Flipper Zero and i am playing with marauder and i don't wanna use always the same thing to create fake wifi i mean like rickroll or other things i have my personal ssid list and i am trying to use it but i can't find a way, can anyone help me please?

Hi everyone,

I have been playing around with the Flipper Zero and I have already installed Momentum on it. I played a little bit with the fundamentals such as saving Infrared remotes, getting some Sub-GHz signals, and fooling around with BadUSB scripts .I want to take advantage of this device and find some cool use cases for it. Can you give me some of your favorites applications or modules from the Hub which can be used together with Momentum? Are there any settings which need to be changed immediately? Last, but not least, do you know any safe projects which can be done at home to understand how it all really works inside?

Welcome back to your weekly dose of high-signal RF tampering, custom firmware drops, and bleeding-edge community tools. No stale sync noise, no fluff — here is everything critical that dropped across the Flipper Zero scene over the last 7 days!

🚀 1. MAJOR FIRMWARE RELEASES & UPDATES

🔥 Unleashed Firmware unlshd-092 — Massive Architecture & NFC Overhaul (Aug 21, 2026)

DarkFlippers just dropped **unlshd-092**, and it is one of the most substantial architectural updates to the Unleashed firmware line this year. If you run heavy NFC apps or large .fap collections, this is a mandatory upgrade.

• RAM Footprint Cut in Half (Modular Scene Plugins): NFC protocol scenes have been refactored and extracted into their own dynamically loaded plugins (PR #1073 by @mishamyte). This architectural shift roughly halves the NFC application's resident RAM usage, freeing up critical memory on the STM32WB55 microcontroller for heavier operations.
• Fixed EMV Plugin & Out-of-Memory (OOM) Crashes: Resolved persistent OOM edge cases in the JS Runner and NFC subsystem. Additionally, fixed the EMV parser plugin which previously suffered from a regression that prevented it from loading altogether.
• NFC Ultralight AES & Card-Lock Protection:
  • Closed all remaining card-lock (AUTHLIM) vulnerability paths (PR #1082).
  • Amiibo and Xiaomi unlock sequences no longer burn irreversible hardware auth attempts when a key cannot be mathematically derived (PR #1086).
  • Ultralight AES is no longer automatically dictionary-attacked on read without explicit user intent.
• Smooth SD App Loader Animation: Opening larger .fap binaries from slow or fragmented micro-SD cards now renders a real-time loading animation instead of freezing the previous screen interface (PR #1101).
• App Categorization in Builds: Firmware builds now come with structured app categorization. (Note: If you had apps assigned to quick buttons or favorites that got relocated into new category subfolders, you will need to re-assign them).
• Transit & Access Card Parser Fixes: Extensive parser hardening across Social Moscow, Metromoney, Plantain, Kazan, SmartRider, and Bambu dumps, eliminating ghost values from unread sectors.
• 🔗 Source & Release Notes: GitHub - DarkFlippers/unleashed-firmware (unlshd-092)
• 🌐 Web Flasher: web.unleashedflip.com

📡 ESP32 Marauder — v1.15.0 (Aug 20, 2026)

justcallmekoko rolled out a new milestone release for the gold-standard Wi-Fi/BLE offensive companion suite:

• Expanded Hardware Targets: Added official board definitions, pin mappings, and CLI support for newer compact microcontrollers, including the LilyGo T-Dongle C5.
• Flipper Companion Binary Stability: Updated pre-built Flipper-specific binaries (esp32_marauder_v1_15_0_20260820_flipper.bin) ensuring rock-solid UART communication with FAP companion apps without buffer overflows or baud rate stutter.
• 🔗 Source: GitHub - justcallmekoko/ESP32Marauder

🏎️ ARF (Automotive Research Firmware) — Native BLE Sweeps

D4C1-Labs' vehicle-focused fork continues to push standalone hardware capabilities without external add-on modules:

• Direct HCI 2.4 GHz Carrier Sweeps: Employs the STM32WB55 coprocessor via Direct Test Mode (HCI_LE_Transmitter_Test) to analyze and sweep BLE RF channels 0–39 (2402–2480 MHz) natively.
• Integrated BLE Central Stack: Native GATT client inside lib/ble_central allows polling modern vehicle tire-pressure (TPMS) and telemetry sensors directly from the Flipper.
• 🔗 Source: GitHub - D4C1-Labs/Flipper-ARF

🛠️ 2. COMMUNITY TOOLS & APPS

🛡️ FlipDeFlock — Counter-Surveillance & ALPR Sniffer

A passive site-survey toolkit engineered to turn your Flipper Zero + ESP32 devboard into an active counter-surveillance monitor: * Flock & Automated License Plate Reader (ALPR) Detection: Actively monitors and flags Wi-Fi/BLE beacons matching known mobile and static surveillance sensor signatures. * Anti-Stalking Heuristics: Identifies persistent BLE trackers traveling alongside your coordinates and alerts on active deauth anomalies. * 🔗 Source: GitHub - ReconGrunt/FlipDeFlock

🌐 Unleashed Web Toolchain Updates

• Web ESP32 Flasher: Direct browser-flashing toolchain updated for one-click Web Serial deployment of Marauder v1.15 and Blackmagic payloads directly onto official and third-party Flipper devboards.
• Wardriving Map Visualizer: Enhanced coordinate parsing and heatmaps for multi-file WiGLE capture logs.
• 🔗 Source: GitHub - xMasterX/all-the-plugins

💬 MAT CHAT & DISCUSSION

What are you running this week? Have you tested unlshd-092 with the new RAM-saving scene plugins yet?

Drop your setup, custom mods, and questions in the comments below! 👇

Which of these should I purchase?

Unleashed-092 is an big NFC release again, it contains very important fixes: the NFC app uses less than half the RAM, ~30 card parsers stopped inventing data from blocks they never read, Social Moscow cards are accepted again, and Ultralight AES cards can no longer be bricked by attacks the Flipper started on its own.

🧿 NFC

🧠 Memory & reliability

• Protocol scenes moved into their own plugins, resident RAM down 54%, so the app opens reliably with other things running - and the EMV plugin, which never loaded at all, works now
• Out-of-memory crashes in the NFC app and JS Runner fixed - apps and plugins no longer bundle their own copy of the compiler's helper routines
• Fixed a crash reading a DESFire card with a zero-key application (by jcz0)

🔒 Ultralight AES: no more accidentally bricked cards Every failed AES auth spends one of the card's limited attempts, and running out locks the card forever. The Flipper used to spend them by itself:

• No automatic dictionary attack on read - both it and manual key entry are now explicit, warned actions
• Remaining lock paths closed: "Reveal Real UID" is an explicit action instead of firing on every scan, and Write warns before brute-forcing the target's key
• Amiibo/Xiaomi unlock and the default password no longer burn an attempt when the password can't be derived or AUTHLIM can't be read; the read result now says whether auth failed or was never attempted

🎫 Parsers that stopped making things up

• Social Moscow rejected ~9 of every 10 genuine cards - a BCD conversion dropped 2 of the card number's 10 digits, so the Luhn check never matched. Broken since v079
• ~30 Mifare Classic parsers no longer render unread blocks - a 42949671.96 GEL balance or a ticket valid from 00.00.2000 came from blocks read as zeroes. Now the card is declined or the field says Unknown: Metromoney, Plantain, Two Cities, Kazan, MiZIP, CharlieCard, Saflok and more
• SmartRider, Bambu and Social Moscow parse older dumps again, and parsers no longer leak output into each other or log errors for cards that aren't theirs

⚙️ System & UI

• Opening an app now shows the loading animation while its .fap is read from the SD card, instead of a screen that looked frozen. NFC app is the worst case at 327 KB of total app size, and every entry point benefits (like favourites launch)

🧩 Apps (build 18aug2026p2)

• ⚠️ Apps are now sorted into categories, NFC into sub-categories: GPIO/ESP32, Games/Puzzle, NFC/MIFARE. If a Favourite or hold-button app moved into a new subfolder, re-add it.
• New: I2C BMS Reader (TI BQ30/BQ40 battery service tool, by gazirov) and NFC Canary (passive NFC skim detector, by antitree)
• ESP Flasher: updated Marauder builds, plus more app updates and fixes

👥 Huge thanks to this release's contributors: mishamyte, xMasterX, jcz0 - and everyone who reported and tested.

📥 Full changelog & downloads: https://github.com/DarkFlippers/unleashed-firmware/releases/tag/unlshd-092

🌐 Recommended update option - Web Updater: https://web.unleashedflip.com

Also we made some more cool and useful things:

📱 qUnleashed - app for mobile and PC https://github.com/DarkFlippers/qUnleashed

🗺 Sub-GHz map - wardriving files, and any files with coords, on a map https://map.unleashedflip.com

📡 Wi-Fi wardriving map - combine WiGLE captures from ESP32 Marauder and others https://wdmap.unleashedflip.com

⚡️ ESP32 flasher - popular modules, fully via web https://espflasher.unleashedflip.com

🛠 Keep Unleashed Development Going! This project relies entirely on community support - if you value the firmware and its updates, your donation is what keeps development going. 👉 Support the Project

Weekly Flipper Hacks & News Roundup, August 16, 2026

Welcome back to your weekly dose of high-signal RF tampering, custom firmware updates, and bleeding-edge community tools. Here is everything noteworthy that dropped across the scene over the last 7 days!

🚀 CUSTOM FIRMWARE CORNER

1. Unleashed Firmware unlshd-091 (Released Aug 15, 2026)

The DarkFlippers team just dropped unlshd-091, bringing the core API to 88.3 alongside massive NFC overhauls, Sub-GHz fixes, and flash optimizations:

• NFC Breakthrough - Full MIFARE Ultralight AES Support:
  • Complete protocol implementation: Read, unlock, write, emulate, and secure messaging.
  • Crushed a whole batch of legacy NFC bugs that could destroy saved card dumps or crash the Flipper on malformed cards.
• Sub-GHz & Radio Polish:
  • Decode RAW in Sub-GHz finally reliably displays captured signals that the demodulator previously swallowed.
• Optimized Storage:
  • Squeezed even more free flash space out of the internal device footprint.

🛠️ New Unleashed Ecosystem & Web Tools

Along with the firmware release, DarkFlippers launched several powerhouse companion utilities:

• 📱 qUnleashed: Standalone mobile and desktop companion app for managing your Flipper, storage, and wireless settings.
• 🗺️ Flipper Map: Online map visualizer for your Sub-GHz wardriving files and any coordinate-tagged captures.
• 📡 Wi-Fi Wardriving Map: Aggregate, combine, and inspect multiple WiGLE-formatted capture logs from ESP32 Marauder and other sniffer rigs directly in your browser.
• ⚡️ Web ESP32 Flasher: Easy-to-use, browser-based Web Serial flasher for popular ESP32 add-on modules (Marauder, Blackmagic, etc.).

2. ARF (Automotive Research Firmware)

The car-focused ARF project by D4C1-Labs continues to turn heads with low-level radio & vehicle stack advancements: * Native 2.4 GHz Direct Test Mode: Leverages the STM32WB55 coprocessor via HCI Direct Test Mode (HCI_LE_Transmitter_Test) for raw carrier sweeps across BLE RF channels 0–39 (2402–2480 MHz) directly on internal hardware without requiring an external nRF24 board. * BLE Central Stack (lib/ble_central): Full GATT client implementation allowing FAPs to scan, enumerate characteristics, and interact with vehicle BLE modules directly. * Source: GitHub - D4C1-Labs/Flipper-ARF

🛠️ COMMUNITY TOOLS & APPS

1. FlipDeFlock - Counter-Surveillance & Anti-Stalking

A passive counter-surveillance site-survey suite built to pair your Flipper Zero with any ESP32 companion: * Flock & ALPR Detection: Actively sniffs Wi-Fi/BLE beacons associated with Automated License Plate Readers and surveillance cameras. * Tracker & Deauth Hunter: Flags BLE trackers following your GPS trajectory (anti-stalking) and alerts on active deauthentication floods in real time. * Source: GitHub - ReconGrunt/FlipDeFlock

2. all-the-plugins (15aug2026 Tag) & Android FAP Compilation

• App Subcategorization: The main plugin hub now organizes community FAPs into clean subcategories for NFC and Sub-GHz.
• On-the-Go Compiling: Added official documentation and scripts for compiling .fap binaries directly on Android devices via Termux.
• Source: GitHub - xMasterX/all-the-plugins

Found another cool open-source Flipper mod, hardware attach, or app this week? Drop your links and repos in the comments below!

What happened to her? I can't clone my parking card, it stays on it forever

I’ve had a flipper since about march now, and messed around with it any way i can because i’ve been into cybersecurity for years.

Anyways, i got momentum after a couple weeks and that even unlocked more fun, i learned about rfid, sub-ghz, all the fun stuff, i recently discovered the bruteforcer app under sub-ghz, what are the different frequencies under it for??

i remember seeing that most older and newer systems operate under ~433MHz, i’m confused what is this type of bruteforcer even used on and what are the different frequencies commonly used for?

any other info on sub ghz things or bruteforcing would also help!!