Flipper Zero - multifunctional penetration testing tool

Flipper Zero is a fully self-contained device and can be controlled using a 5-position D-pad without additional devices such as computers or smartphones. Typical scripts and functions useful during use are available from the menu.

You can also connect to Flipper via USB. The display uses an LCD screen, which provides excellent visibility in sunlight and is characterized by extremely low power consumption when the backlight is turned off.

The Sub-1 GHz transceiver used is based on the CC1101 chip from Texas Instruments. The Sub-1 GHz frequency is the operating range of a wide class of wireless devices and access control systems, such as garage door remote controls, barriers, IoT sensors and remote keyless systems. Flipper has an integrated 433 MHz antenna, which makes it a powerful tool with a range of up to 50 meters.

CC1101 is a universal transceiver designed for very low power wireless applications. It supports various types of digital modulation such as 2-FSK, 4-FSK, GFSK and MSK, as well as OOK and ASK flexible shaping. The module also uses the 433 MHz frequency to communicate with other Flippers.

RFID cards are widely used in legacy access control systems around the world. It is quite simple, it only stores an N-byte ID and has no authentication mechanism, so it can be read, cloned and emulated by anyone. The 125 kHz antenna is located on the bottom of the Flipper - it can read EM-4100 and HID Prox cards, save them to memory for later emulation. It also allows you to emulate cards by manually entering their IDs or exchange card IDs remotely.

Flipper Zero has a built-in NFC module (13.56 MHz). Together with the 125 kHz module, it turns Flipper into an excellent RFID device operating in both the low frequency (LF) and high frequency (HF) ranges. The NFC module supports all the most important standards. It works almost the same as the 125 kHz module, allowing interaction with NFC-enabled devices - reading, writing and emulating HF tags.

One of the most important protocols supported by Flipper Zero is Bluetooth Low Energy. As with other wireless features, the manufacturer provides an open source library for adding to community-created applications. Full BLE support allows it to function as a peripheral, allowing you to connect Flipper to your smartphone. The product comes with official apps for iOS and Android, making it easier to use Flipper on mobile devices.

The infrared transmitter can transmit signals to control electronic devices such as televisions, air conditioners, stereo systems and more. Flipper has a built-in library of command sequences from popular TV vendors for power and volume adjustments. This library is constantly updated by community users.

Flipper Zero also has an IR receiver that can receive signals and save them to a library, so you can store any of your existing remotes for later transfer of commands and upload them to the public IR Remote database to share them with other users.

To use its full capabilities, Flipper must store a lot of large data: remote control codes, signal databases, images, logs, etc., which can be stored on an SD card. Flipper supports any microSD card formatted in FAT32. The card is not required for Flipper Zero to operate and is not included in the kit.

Flipper Zero is a comprehensive hardware examination, firmware flashing and debugging tool. You can connect it to any piece of hardware via GPIO to control it with buttons, run your own code, and print debug messages on the LCD. It can also be used as a regular USB to UART/SPI/I2C/etc adapter.

The built-in 1-Wire connector can be used to read iButton contact keys (aka DS1990A, Touch Memory or Dallas Key). This old technology is still widely used around the world. It uses the 1-Wire protocol, which does not have any authentication. Flipper can easily read these keys, store the IDs in memory, store the IDs in empty keys, and emulate the key itself.

Flipper Zero has a unique contact design on the corner - its shape serves as a reader and probe, simultaneously enabling connection to iButton sockets. This mode is also useful for silently capturing 1-Wire data lines.