base on Predatory ESP32 Firmware  # :shark: Bruce Bruce is meant to be a versatile ESP32 firmware that supports a ton of offensive features focusing on facilitating Red Team operations. It also supports m5stack products and works great with Cardputer, Sticks and M5Cores. ## :building_construction: How to install ### The easiest way to install Bruce is using our official Web Flasher! ### Check out: https://bruce.computer/flasher Alternatively, you can download the latest binary from releases or actions and flash locally using esptool.py ```sh esptool.py --port /dev/ttyACM0 write_flash 0x00000 Bruce-<device>.bin ``` **For m5stack devices** If you already use M5Launcher to manage your m5stack device, you can install it with OTA Or you can burn it directly from the [m5burner tool](https://docs.m5stack.com/en/download), just search for 'Bruce' (My official builds will be uploaded by "owner" and have photos.) on the device category you want to and click on burn ## :keyboard: Discord Server Contact us in our [Discord Server](https://discord.gg/WJ9XF9czVT)! ## :bookmark_tabs: Wiki For more information on each function supported by Bruce, [read our wiki here](https://github.com/pr3y/Bruce/wiki). Also, [read our FAQ](https://github.com/pr3y/Bruce/wiki/FAQ) ## :computer: List of Features <details> <summary><h2>WiFi</h2></summary> - [x] Connect to WiFi - [x] WiFi AP - [x] Disconnect WiFi - [x] [WiFi Atks](https://github.com/pr3y/Bruce/wiki/WiFi#wifi-atks) - [x] [Beacon Spam](https://github.com/pr3y/Bruce/wiki/WiFi#beacon-spam) - [x] [Target Atk](https://github.com/pr3y/Bruce/wiki/WiFi#target-atk) - [x] Information - [x] Target Deauth - [x] EvilPortal + Deauth - [x] Deauth Flood (More than one target) - [x] [Wardriving](https://github.com/pr3y/Bruce/wiki/Wardriving) - [x] [TelNet](https://github.com/pr3y/Bruce/wiki/WiFi#telnet) - [x] [SSH](https://github.com/pr3y/Bruce/wiki/WiFi#ssh) - [x] [RAW Sniffer](https://github.com/pr3y/Bruce/wiki/WiFi#raw-sniffer) - [x] [DPWO-ESP32](https://github.com/pr3y/Bruce/wiki/WiFi#dpwo-esp32) - [x] [Evil Portal](https://github.com/pr3y/Bruce/wiki/WiFi#evil-portal) - [x] [Scan Hosts](https://github.com/pr3y/Bruce/wiki/WiFi#evil-portal) - [x] [Wireguard Tunneling](https://github.com/pr3y/Bruce/wiki/WiFi#wireguard-tunneling) - [x] Brucegotchi - [x] Pwnagotchi friend - [x] Pwngrid spam faces & names - [x] [Optional] DoScreen a very long name and face - [x] [Optional] Flood uniq peer identifiers </details> <details> <summary><h2>BLE</h2></summary> - [X] [BLE Scan](https://github.com/pr3y/Bruce/wiki/BLE#ble-scan) - [X] Bad BLE - Run Ducky scripts, similar to [BadUsb](https://github.com/pr3y/Bruce/wiki/Others#badusb) - [X] BLE Keyboard - Cardputer and T-Deck Only - [X] iOS Spam - [X] Windows Spam - [X] Samsung Spam - [X] Android Spam - [X] Spam All </details> <details> <summary><h2>RF</h2></summary> - [x] Scan/Copy - [x] [Custom SubGhz](https://github.com/pr3y/Bruce/wiki/RF#replay-payloads-like-flipper) - [x] Spectrum - [x] Jammer Full (sends a full squared wave into output) - [x] Jammer Intermittent (sends PWM signal into output) - [x] Config - [X] RF TX Pin - [X] RF RX Pin - [X] RF Module - [x] RF433 T/R M5Stack - [x] [CC1101 (Sub-Ghz)](https://github.com/pr3y/Bruce/wiki/CC1101) - [X] RF Frequency - [x] Replay </details> <details> <summary><h2>RFID</h2></summary> - [x] Read tag - [x] Read 125kHz - [x] Clone tag - [x] Write NDEF records - [x] Amiibolink - [x] Chameleon - [x] Write data - [x] Erase data - [x] Save file - [x] Load file - [x] Config - [X] [RFID Module](https://github.com/pr3y/Bruce/wiki/RFID#supported-modules) - [x] PN532 - [ ] Emulate tag </details> <details> <summary><h2>IR</h2></summary> - [x] TV-B-Gone - [x] IR Receiver - [x] [Custom IR (NEC, NEC42, NECExt, SIRC, SIRC15, SIRC20, Samsung32, RC5, RC5X, RC6)](https://github.com/pr3y/Bruce/wiki/IR#replay-payloads-like-flipper) - [x] Config - [X] Ir TX Pin - [X] Ir RX Pin </details> <details> <summary><h2>FM</h2></summary> - [x] [Broadcast standard](https://github.com/pr3y/Bruce/wiki/FM#play_or_pause_button-broadcast-standard) - [x] [Broadcast reserved](https://github.com/pr3y/Bruce/wiki/FM#no_entry_sign-broadcast-rerserved) - [x] [Broadcast stop](https://github.com/pr3y/Bruce/wiki/FM#stop_button-broadcast-stop) - [ ] [FM Spectrum](https://github.com/pr3y/Bruce/wiki/FM#ocean-fm-spectrum) - [ ] [Hijack Traffic Announcements](https://github.com/pr3y/Bruce/wiki/FM#car-hijack-ta) - [ ] [Config](https://github.com/pr3y/Bruce/wiki/FM#bookmark_tabs-config) </details> <details> <summary><h2>NRF24</h2></summary> - [X] [NRF24 Jammer](https://github.com/pr3y/Bruce/wiki/BLE#nrf24-jammer) - [X] 2.4G Spectrum - [ ] Mousejack </details> <details> <summary><h2>Scripts</h2></summary> - [X] [JavaScript Interpreter](https://github.com/pr3y/Bruce/wiki/Interpreter) [Credits to justinknight93](https://github.com/justinknight93/Doolittle) </details> <details> <summary><h2>Others</h2></summary> - [X] Mic Spectrum - [X] QRCodes - [x] Custom - [x] PIX (Brazil bank transfer system) - [x] [SD Card Mngr](https://github.com/pr3y/Bruce/wiki/Others#sd-card-mngr) - [x] View image (jpg) - [x] File Info - [x] [Wigle Upload](https://github.com/pr3y/Bruce/wiki/Wardriving#how-to-upload) - [x] Play Audio - [x] View File - [x] [LittleFS Mngr](https://github.com/pr3y/Bruce/wiki/Others#littlefs-mngr) - [x] [WebUI](https://github.com/pr3y/Bruce/wiki/Others#webui) - [x] Server Structure - [x] Html - [x] SDCard Mngr - [x] Spiffs Mngr - [x] Megalodon - [x] [BADUsb (New features, LittleFS and SDCard)](https://github.com/pr3y/Bruce/wiki/Others#badusb) - [x] USB Keyboard - Cardputer and T-Deck Only - [x] [Openhaystack](https://github.com/pr3y/Bruce/wiki/Others#openhaystack) - [x] [LED Control](https://github.com/pr3y/Bruce/wiki/Others#led-control) </details> <details> <summary><h2>Clock</h2></summary> - [X] RTC Support - [X] NTP time adjust - [X] Manual adjust </details> <details> <summary><h2>Connect (ESPNOW)</h2></summary> - [X] Send File - [X] Receive File </details> <details> <summary><h2>Config</h2></summary> - [x] Brightness - [x] Dim Time - [x] Orientation - [X] UI Color - [x] Boot Sound on/off - [x] Clock - [x] Sleep - [x] Restart </details> ## Specific functions per Device, the ones not mentioned here are available to all. | Device | CC1101 | NRF24 | Interpreter | FMRadio | PN532 | Mic_SPM1423 | BadUSB | RGB Led | Speaker | LITE_MODE | | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Cardputer | :ok: | :ok: | :ok: | :ok: | :ok: | :ok: | :ok: | :ok: | NS4168 | :x: | | StickCPlus2 | :ok: | :ok: | :ok: | :ok: | :ok: | :ok: | :ok:¹ | :x: | Tone | :x: | | StickCPlus 1.1 | :ok: | :ok: | :x: | :ok: | :ok: | :ok: | :ok:¹ | :x: | Tone | :x:² | | Core | :x: | :x: | :x: | :x: | :x: | :ok: | :ok:¹ | :x: | Tone | :x: | | Core2 | :x: | :x: | :x: | :x: | :x: | :ok: | :ok:¹ | :x: | :x: | :x: | | CoreSe/SE | :x: | :x: | :ok: | :x: | :x: | :x: | :ok: | :x: | :x: | :x: | | CYD-2432S028 | :ok: | :ok: | :ok: | :x: | :ok: | :x: | :ok:¹ | :x: | :x: | :x:² | | Lilygo T-Embed CC1101 | :ok: | :x: | :ok: | :x: | :ok: | :ok: | :ok: | :x: | :x: | :x: | | Lilygo T-Embed | :x: | :x: | :ok: | :x: | :ok: | :ok: | :ok: | :x: | :x: | :x: | | Lilygo T-Deck (and pro) | :x: | :x: | :ok: | :x: | :x: | :x: | :ok: | :x: | :x: | :x: | ² CYD and StickCPlus 1.1 have a LITE_VERSION version for Launcher Compatibility ¹ Core, CYD and StickCs Bad-USB: [here](https://github.com/pr3y/Bruce/wiki/Others#badusb) *LITE_MODE*: TelNet, SSH, DPWO, WireGuard, ScanHosts, RawSniffer, Brucegotchi, BLEBacon, BLEScan, Interpreter and OpenHaystack are NOT available for M5Launcher Compatibility ## :sparkles: Why and how does it look? Bruce stems from a keen observation within the community focused on devices like Flipper Zero. While these devices offered a glimpse into the world of offensive security, there was a palpable sense that something more could be achieved without being that overpriced, particularly with the robust and modular hardware ecosystem provided by ESP32 Devices, Lilygo and M5Stack products.     Other media can be [found here](./media/). ## :clap: Acknowledgements + [@bmorcelli](https://github.com/bmorcelli) for new core and a bunch of new features, also porting to many devices! + [@IncursioHack](https://github.com/IncursioHack) for adding RF and RFID modules features. + [@Luidiblu](https://github.com/Luidiblu) for logo and UI design assistance. + [@eadmaster](https://github.com/eadmaster) for adding a lot of features. + [@rennancockles](https://github.com/rennancockles) for a lot of RFID code, refactoring and others features. + Everyone who contributed in some way to the project, thanks :heart: ## :construction: Disclaimer Bruce is a tool for cyber offensive and red team operations, distributed under the terms of the Affero General Public License (AGPL). It is intended for legal and authorized security testing purposes only. Use of this software for any malicious or unauthorized activities is strictly prohibited. By downloading, installing, or using Bruce, you agree to comply with all applicable laws and regulations. This software is provided free of charge, and we do not accept payments for copies or modifications. The developers of Bruce assume no liability for any misuse of the software. Use at your own risk. ", Assign "at most 3 tags" to the expected json: {"id":"11363","tags":[]} "only from the tags list I provide: [{"id":77,"name":"3d"},{"id":89,"name":"agent"},{"id":17,"name":"ai"},{"id":54,"name":"algorithm"},{"id":24,"name":"api"},{"id":44,"name":"authentication"},{"id":3,"name":"aws"},{"id":27,"name":"backend"},{"id":60,"name":"benchmark"},{"id":72,"name":"best-practices"},{"id":39,"name":"bitcoin"},{"id":37,"name":"blockchain"},{"id":1,"name":"blog"},{"id":45,"name":"bundler"},{"id":58,"name":"cache"},{"id":21,"name":"chat"},{"id":49,"name":"cicd"},{"id":4,"name":"cli"},{"id":64,"name":"cloud-native"},{"id":48,"name":"cms"},{"id":61,"name":"compiler"},{"id":68,"name":"containerization"},{"id":92,"name":"crm"},{"id":34,"name":"data"},{"id":47,"name":"database"},{"id":8,"name":"declarative-gui "},{"id":9,"name":"deploy-tool"},{"id":53,"name":"desktop-app"},{"id":6,"name":"dev-exp-lib"},{"id":59,"name":"dev-tool"},{"id":13,"name":"ecommerce"},{"id":26,"name":"editor"},{"id":66,"name":"emulator"},{"id":62,"name":"filesystem"},{"id":80,"name":"finance"},{"id":15,"name":"firmware"},{"id":73,"name":"for-fun"},{"id":2,"name":"framework"},{"id":11,"name":"frontend"},{"id":22,"name":"game"},{"id":81,"name":"game-engine "},{"id":23,"name":"graphql"},{"id":84,"name":"gui"},{"id":91,"name":"http"},{"id":5,"name":"http-client"},{"id":51,"name":"iac"},{"id":30,"name":"ide"},{"id":78,"name":"iot"},{"id":40,"name":"json"},{"id":83,"name":"julian"},{"id":38,"name":"k8s"},{"id":31,"name":"language"},{"id":10,"name":"learning-resource"},{"id":33,"name":"lib"},{"id":41,"name":"linter"},{"id":28,"name":"lms"},{"id":16,"name":"logging"},{"id":76,"name":"low-code"},{"id":90,"name":"message-queue"},{"id":42,"name":"mobile-app"},{"id":18,"name":"monitoring"},{"id":36,"name":"networking"},{"id":7,"name":"node-version"},{"id":55,"name":"nosql"},{"id":57,"name":"observability"},{"id":46,"name":"orm"},{"id":52,"name":"os"},{"id":14,"name":"parser"},{"id":74,"name":"react"},{"id":82,"name":"real-time"},{"id":56,"name":"robot"},{"id":65,"name":"runtime"},{"id":32,"name":"sdk"},{"id":71,"name":"search"},{"id":63,"name":"secrets"},{"id":25,"name":"security"},{"id":85,"name":"server"},{"id":86,"name":"serverless"},{"id":70,"name":"storage"},{"id":75,"name":"system-design"},{"id":79,"name":"terminal"},{"id":29,"name":"testing"},{"id":12,"name":"ui"},{"id":50,"name":"ux"},{"id":88,"name":"video"},{"id":20,"name":"web-app"},{"id":35,"name":"web-server"},{"id":43,"name":"webassembly"},{"id":69,"name":"workflow"},{"id":87,"name":"yaml"}]" returns me the "expected json"