The open-source ESP32 firmware that turns your device into the ultimate multi-tool.
Debug your gear, probe the airwaves, and learn how wireless really works. All from your pocket.
True open-source · Cross-platform · Pocket-sized.
WiFi (2.4/5GHz) · BLE · Sub-GHz · nRF24 · NFC / RFID · IR · LoRa · GPS · FM · iButton · BadUSB
Bruce is a versatile ESP32 firmware packed with offensive-security tooling, built to make Red Team operations fast, portable, and open. One firmware, dozens of boards, from a keychain-sized M5StickC to our own RF Reaper dev board.
Everything here is open source: the firmware, the apps, the app store, the tooling, and the PCBs.
We also design and sell some hardware built for Bruce from the ground up.
|
|
|
Community hardware lives in BruceDevices/PCBs, including the Bruce Ultramarines (M5Stick-compatible) and the Pirata PCB (M5StickC Plus with nRF24 and CC1101).
Bruce runs on a growing family of boards. The Web Flasher always has the current builds.
| Vendor | Boards |
|---|---|
| M5Stack | Cardputer · StickC-Plus 1.1 · StickC-Plus 2 · StickS3 · Core (4MB / 16MB) · Core2 · CoreS3 · DinMeter |
| LILYGO | T-Deck · T-Deck Pro · T-Display-S3 (+ Touch / MMC) · T-Display-S3 Pro · T-Display TTGO · T-Embed · T-Embed CC1101 · T-HMI · T-LoRa Pager · T-Watch-S3 |
| CYD (Cheap Yellow Display) | 2432S028 · 2432W328C · 2432W328R / S024R · 2USB · 3248S035C · 3248S035R · NM-CYD-C5 |
| Elecrow | 24B · 28B · Advance 3.5" S3 |
| ESP32-C5 | ESP32-C5 · ESP32-C5 TFT |
| Marauder | Mini · V4–V6 · v61 · v7 |
| Bruce / Community | RF Reaper · Smoochiee (Bruce PCB V2) · Phantom S024R · WaveSentry R1 · Awok Mini · Awok Touch · Arduino Nesso N1 · ESP32-S3 DevKitC |
WiFi: port/host scanning, AP mode, deauth, beacon spam, evil portal, packet sniffing, ARP spoof, LLMNR Poisoning, SSH/Telnet, WireGuard, Raw TCP Socket Client/Listener, Brucegotchi
BLE: scanning, BadBLE scripts, keyboard emulation, device spam (iOS / Windows / Samsung / Android)
Sub-GHz (RF): scan, copy, replay, spectrum analysis, jamming, CC1101
RFID / NFC: read, clone, NDEF write, Amiibo
IR: TV-B-Gone, custom protocols (NEC, SIRC, Samsung32, RC5/RC6)
More: FM broadcast, nRF24 jamming, iButton, BadUSB, QR codes, SD manager, WebUI, and a full JavaScript interpreter with its own app store
- Plug your board in and open the Web Flasher, no toolchain needed
- M5Stack users can OTA via M5Launcher / m5burner
- Read the Wiki and the FAQ
- Join our communities
- Build your own apps with bruce-js-tooling
| Repo | What it is |
|---|---|
| firmware | The core ESP32 firmware (C++) |
| App · App-IOS | Companion apps for Android & iOS |
| Wiki | Documentation |
| App-Store · App-Store-Apps | The JS app store and its apps |
| bruce-js-tooling | Types & tools for building Bruce apps |
| Compile-JS | Compiles Bruce JS into bytecode |
| PCBs | Open hardware designs |
Discord · YouTube · Reddit · Instagram · Matrix · Forum · contact@bruce.computer
Bruce is free and open source, built by the community. If it is useful to you, please consider supporting continued development.
bruce.computer/donate
Firmware licensed AGPL-3.0 · Most of Hardware licensed CERN-OHL-P-2.0
For authorized security testing and education only. You are responsible for how you use it.
