How we stack up

Firmware comparison.

The full 133-feature comparison against Bruce, HaleHound, and nyanBOX.

45+ boards, full wireless suite, LVGL UI, and companion apps
Built on ESP-IDF, not Arduino or PlatformIO
GPL-licensed and fully auditable, firmware, tools, and this website

This comparison is based on GhostESP's feature set and publicly available source for the listed projects. It is not a complete feature list for every firmware. HaleHound and nyanBOX are compared against the latest public source available to us; if newer releases are closed source, this table cannot be independently updated or verified against those builds.

Feature GhostESP Bruce HaleHound nyanBOX
Architecture
Current source available for audit ✓ ✓ Limited / older public source Limited / older public source
ESP-IDF-native architecture ✓ — — —
Arduino / PlatformIO architecture — ✓ ✓ ✓
Supported board targets 62 CI targets 42+ 4 1
Full LVGL graphical UI ✓ — — —
WiFi
Web dashboard / REST control ✓ ✓ — —
Captive portal web server ✓ ✓ ✓ ✓
AP / station WiFi scanning ✓ ✓ ✓ ✓
Deauth / disassoc testing ✓ ✓ ✓ ✓
Beacon spam ✓ ✓ ✓ ✓
Karma / probe response attack ✓ ✓ ✓ —
Handshake / EAPOL capture ✓ ✓ ✓ —
On-device PCAP browser / hc22000 export ✓ — — —
PMKID capture / export ✓ — ✓ —
Live Wireshark USB streaming ✓ — — —
WPA3 / SAE-specific testing ✓ — — —
WPA3 compliance checker ✓ — — —
EAPOL logoff attack ✓ — — —
Channel switch attack ✓ — — —
GTK abuse / client isolation testing ✓ — — —
DHCP starvation ✓ ✓ — —
ARP / port / SSH scanners ✓ ✓ — —
mDNS discovery ✓ — — —
NetBIOS scanner ✓ — — —
HTTP banner scanner ✓ — — —
SNMP probe ✓ — — —
WiFi OUI vendor lookup ✓ ✓ ✓ —
PineAP / Evil Twin detection ✓ — — ✓
WPS detection / reporting ✓ ✓ — —
Pwnagotchi-style automated capture mode ✓ ✓ — —
Pwnagotchi detector / spam — ✓ — ✓
Channel congestion analysis ✓ — — ✓
Live WiFi packet monitor / visualizer ✓ — ✓ ✓
WiFi Airspace Monitor ✓ — — —
DNS sinkhole / blocklist NXDOMAIN ✓ — — —
GPS WiFi wardriving ✓ ✓ ✓ —
BLE wardriving ✓ ✓ ✓ —
WiGLE upload integration ✓ ✓ — —
802.15.4 / Zigbee sweep export ✓ — — —
GhostLink dual-ESP control ✓ — — —
GhostLink BLE bridge to Android ✓ — — —
Split-channel wardriving helper ✓ — — —
GhostLink remote radio support ✓ — — —
Drone / OpenDroneID detect ✓ — — ✓
Drone / OpenDroneID spoof ✓ — — —
Bluetooth LE
BLE scanning ✓ ✓ ✓ ✓
Raw BLE scanner ✓ — — —
BLE spam modes ✓ ✓ ✓ ✓
AirTag scan / spoof ✓ ✓ ✓ ✓
BLE tracker detection tools ✓ — ✓ ✓
Flipper Zero finder ✓ — — ✓
GATT / service enumeration ✓ — ✓ —
BLE device tracking by RSSI ✓ — — —
BLE stream to Wireshark ✓ — — —
BLE skimmer detection ✓ — — ✓
FastPair / pairing exploit research — ✓ ✓ ✓
BLE HID injection / DuckyScript over BLE ✓ ✓ — —
BLE keyboard mode ✓ ✓ — —
BLE GATT honeypot / cloned peripheral — — ✓ ✓
BLE vulnerability profiling — ✓ — —
Flock / surveillance detector ✓ — ✓ ✓
NFC
PN532 NFC support ✓ ✓ ✓ —
ST25R3916 NFC support ✓ ✓ — —
Chameleon Ultra support ✓ ✓ — —
Chameleon Ultra BLE control ✓ ✓ — —
Flipper `.nfc` import/export ✓ — — —
Flipper NFC parser set ✓ — — —
MIFARE Classic default-key attack ✓ ✓ ✓ —
MIFARE Classic full embedded dictionary ✓ — — —
MIFARE Classic user dictionary file ✓ ✓ — —
MIFARE Classic session key reuse / sector sweep ✓ — — —
MIFARE Classic hardnested recovery ✓ — — —
PicoPass / iCLASS reading ✓ — — —
MIFARE DESFire application / file tree reads ✓ — — —
EMV / payment card reader ✓ ✓ — —
BadUSB / HID
BadUSB / DuckyScript ✓ ✓ — —
USB keyboard host mode ✓ — — —
USB HID keyboard output mode ✓ ✓ — —
Remote keyboard over dual-device link ✓ — — —
BadUSB VID/PID identity options ✓ ✓ — —
BadUSB mouse jiggler / trackpad ✓ — — —
Infrared
IR learn / capture / replay ✓ ✓ — —
Flipper `.ir` file support ✓ ✓ — —
Universal IR library transmit ✓ ✓ — —
SubGHz / RF
CC1101 SubGHz scan / replay ✓ ✓ ✓ —
CC1101 waterfall spectrum analyzer ✓ ✓ ✓ —
Flipper `.sub` compatibility ✓ ✓ — ✓
SubGHz protocol decoders ✓ ✓ ✓ —
NRF24 spectrum analyzer ✓ ✓ ✓ ✓
NRF24 MouseJack — — ✓ —
Passive jamming detection ✓ — ✓ —
Active RF jamming shipped Not shipped ✓ ✓ ✓
Zigbee / 802.15.4 packet capture ✓ — — —
Ethernet
Ethernet W5500 support ✓ ✓ — —
Ethernet ARP poisoning / MITM tools ✓ ✓ — —
Ethernet fingerprint / port / ping tools ✓ — — —
Ethernet DNS / NTP / HTTP / trace tools ✓ — — —
TLS SNI / HTTP / FTP credential capture over Ethernet ✓ — — —
Miscellaneous
Camera streaming / motion detection ✓ — — —
Motion alerts with webhook support ✓ — — —
Network printer / PJL output ✓ — — —
DIAL / Chromecast testing ✓ — — —
On-device setup wizard ✓ — — —
Wired screen mirroring ✓ — — ✓
Web screen mirroring ✓ ✓ — —
SD config backup / restore ✓ — — —
Battery monitoring / fuel gauge support ✓ ✓ ✓ —
Sensor / RTC hardware support ✓ ✓ — —
M5 Cardputer keyboard support ✓ ✓ — —
Android companion app ✓ — — —
LoRa support — ✓ — —
FM radio support — ✓ — —
Platform & Apps
PIN / password lock ✓ — ✓ ✓
On-device OTA / SD firmware update ✓ — ✓ —
Firmware verification / rollback protection ✓ — — —
GhostLink peer firmware update ✓ — — —
SD file manager / browser ✓ ✓ ✓ —
Native SD app/plugin system ✓ — — —
Native app SDK / build tooling ✓ — — —
Sandboxed on-device scripting runtime Lua 5.4.8 JavaScript — —
Cloud app / script / asset store ✓ — — —
Apps gallery / launcher ✓ — — —
Ghostchi / virtual pet ✓ ✓ — —
Audio player ✓ ✓ — —
Microphone spectrum / visualizer ✓ ✓ — —
RGB LED visualizer modes ✓ ✓ — —
Clock / RTC screen ✓ ✓ — —
Compass screen ✓ — — —
Accelerometer screen ✓ — — —
ENV-III temperature / humidity / pressure ✓ — — —
Accessibility modes / reduced motion ✓ — ✓ —
Custom theme / UI palette system ✓ ✓ ✓ —
Custom SD asset packs ✓ — — —

GhostESP does not ship active jamming features. Distribution, promotion, sale and use of jamming devices or firmware is illegal in many jurisdictions.