The open-source ESP32 firmware that turns your device into the ultimate multi-tool.
Debug your gear, probe the airwaves, and learn how wireless really works. All from your pocket.
True open-source · Cross-platform · Pocket-sized.
WiFi (2.4/5GHz) · BLE · Sub-GHz · nRF24 · NFC / RFID · IR · LoRa · GPS · FM · iButton · BadUSB
Bruce is a versatile ESP32 firmware packed with offensive-security tooling, built to make Red Team operations fast, portable, and open. One firmware, dozens of boards, from a keychain-sized M5StickC to our own RF Reaper dev board.
Everything here is open source: the firmware, the apps, the app store, the tooling, and the PCBs.
Bruce runs on donations. No ads, no telemetry, no paywalled features, just people who chip in. If Bruce saved you a day of work, buy us a coffee or grab a board. Both keep the firmware free for everyone.
bruce.computer/donate · one-off or monthly
We also design and sell some hardware built for Bruce from the ground up.
|
|
|
Community hardware lives in BruceDevices/PCBs, including the Bruce Ultramarines (M5Stick-compatible) and the Pirata PCB (M5StickC Plus with nRF24 and CC1101).
Bruce runs on a growing family of boards. The Web Flasher always has the current builds.
| Vendor | Boards |
|---|---|
| M5Stack | Cardputer · StickC-Plus 1.1 · StickC-Plus 2 · StickS3 · Core (4MB / 16MB) · Core2 · CoreS3 · DinMeter |
| LILYGO | T-Deck · T-Deck Pro · T-Display-S3 (+ Touch / MMC) · T-Display-S3 Pro · T-Display TTGO · T-Embed · T-Embed CC1101 · T-HMI · T-LoRa Pager · T-Watch-S3 |
| CYD (Cheap Yellow Display) | 2432S028 · 2432W328C · 2432W328R / S024R · 2USB · 3248S035C · 3248S035R · NM-CYD-C5 |
| Elecrow | 24B · 28B · Advance 3.5" S3 |
| Seeed Studio | XIAO ESP32S3 · XIAO ESP32S3 Sense (headless, runs from the WebUI) |
| ESP32-C5 | ESP32-C5 · ESP32-C5 TFT |
| Marauder | Mini · V4–V6 · v61 · v7 |
| Bruce / Community | RF Reaper · Smoochiee (Bruce PCB V2) · Phantom S024R · WaveSentry R1 · Awok Mini · Awok Touch · Arduino Nesso N1 · ESP32-S3 DevKitC |
WiFi: port/host scanning, AP mode, deauth, beacon spam, evil portal, packet sniffing, ARP spoof, LLMNR Poisoning, SSH/Telnet, WireGuard, Raw TCP Socket Client/Listener, Brucegotchi
BLE: scanning, BadBLE scripts, keyboard emulation, device spam (iOS / Windows / Samsung / Android)
Sub-GHz (RF): scan, copy, replay, spectrum analysis, jam PoC, CC1101, rolling codes, replay from file flipper format
RFID / NFC: read, clone, NDEF write, Amiibo, emulation of tags, brute-force
IR: TV-B-Gone, custom protocols (NEC, SIRC, Samsung32, RC5/RC6), load files also flipper format .ir
More: FM broadcast, nRF24 jam PoC, iButton, BadUSB, QR codes, SD manager, WebUI, and a full JavaScript interpreter with its own app store
- Plug your board in and open the Web Flasher, no toolchain needed
- M5Stack users can OTA via M5Launcher / m5burner
- Read the Wiki and the FAQ
- Join our communities
- Build your own apps with bruce-js-tooling
| Repo | What it is |
|---|---|
| firmware | The core ESP32 firmware (C++) |
| App · App-IOS | Companion apps for Android & iOS |
| Wiki | Documentation |
| App-Store · App-Store-Apps | The JS app store and its apps |
| bruce-js-tooling | Types & tools for building Bruce apps |
| Compile-JS | Compiles Bruce JS into bytecode |
| PCBs | Open hardware designs |
Discord · YouTube · Reddit · Instagram · Matrix · Forum · contact@bruce.computer
Code, docs, board support, bug reports and app ideas are all welcome. Start with the firmware repo or say hi on Discord.
Can't code? Donating or starring the repos helps just as much.
Firmware licensed AGPL-3.0 · Most of Hardware licensed CERN-OHL-P-2.0
For authorized security testing and education only. You are responsible for how you use it.
