Complete Hardware Guide
Build Your Marauder
Every compatible board, purchase links, firmware mapping, and flashing instructions. From $12 CYD builds to 5GHz dual-band rigs.
I make zero commission on any of the products linked below. All links are provided purely for convenience — I am not affiliated with any seller or manufacturer.
Featured Picks
Not sure where to start? These two cover opposite ends of the spectrum — the best of the best and the best bang for your buck.
Official Marauder v8
The latest official Marauder from JustCallMeKoko. ESP32-C5 with true WiFi 6 dual-band (2.4 + 5 GHz), Bluetooth 5, 2.8" touchscreen, 18650 battery slot with onboard charging, built-in GPS (antenna-upgradeable), SMA antenna connectors. The most capable Marauder ever made.
What you get: 5GHz scanning & deauth, GPS wardriving, all-day battery, external antenna support, OTA updates, touchscreen UI — everything in one device.
CYD 2.8" (ESP32-2432S028R)
The most popular Marauder board for a reason. Full touchscreen with resistive touch, microSD slot, USB-C — all for as low as $12 on AliExpress. Just flash and go. The best-documented, most-supported build in the entire Marauder ecosystem.
Also supports: Bruce, GhostESP, HaleHound
What you get: Full touchscreen Marauder for the price of a coffee. The trade-off vs flagship: 2.4GHz only, no GPS, no battery (but mods available).
Quick Start — Cheapest Build
The CYD 2.8" is the most popular Marauder board. Pre-assembled, touchscreen, microSD, under $15. Just flash and go.
ESP32-2432S028R — CYD 2.8"
The "Cheap Yellow Display." 2.8" ILI9341 resistive touchscreen with XPT2046 touch controller, microSD slot, RGB LED, USB-C (or Micro-USB depending on version). The most documented and supported Marauder build.
Flash via: Headless Marauder GUI or Universal Flasher
Also supports: Bruce, GhostESP, HaleHound
Pre-Assembled Boards
Buy the board, flash firmware, done. No soldering, no wiring, no assembly. These are the easiest builds.
Other CYD Variants
CYD 2.4" (ESP32-2432S024)
Smaller sibling of the 2.8". Same chip, smaller screen. Good for compact builds.
CYD 3.2" (ESP32-2432S032)
Larger display with built-in Li-ion charger (IP5306). Great for portable battery-powered builds without external charging circuits.
CYD 3.5" (ESP32-3248S035)
Largest CYD. 3.5" ST7796 display at 480x320 resolution. More screen real estate for data tables and menus.
M5Stack Cardputer
M5Stack Cardputer ADV
Card-sized computer with a 56-key mechanical keyboard, 1.14" LCD, 1750mAh battery, audio codec, IMU, IR transmitter. The most feature-packed portable Marauder. Flash Marauder, Bruce, or GhostESP.
_m5cardputer_adv.binFlash via: Universal Flasher or M5Burner
Also supports: Bruce, GhostESP, MinigotchiV3, Pigtail
M5StickC Plus 2
M5StickC Plus 2
Tiny watch-sized form factor with 1.14" TFT, 200mAh battery, IR transmitter, buzzer, IMU. Ultra-portable Marauder that fits in your pocket. Now EOL — grab one while stock lasts.
_m5stickc.binFlash via: M5Burner or Universal Flasher
LILYGO T-Display S3
LILYGO T-Display S3
Compact S3 board with 1.9" ST7789 LCD. Excellent for OUI-Spy, Bruce, and surveillance detection firmware. Multiple variants including AMOLED.
Best for: Bruce, OUI-Spy, GhostESP, Willy FW
LILYGO T-Deck
LILYGO T-Deck
BlackBerry-style QWERTY keyboard with trackball, 2.8" IPS touchscreen, optional LoRa module. Runs Marauder, Bruce, Meshtastic, and more. The most versatile multi-firmware board.
Supports: Marauder, Bruce, Meshtastic, GhostESP
Bare DevKits (Headless / Serial Only)
ESP32 WROOM-32 DevKit
The cheapest possible Marauder. No display — control via serial (use Headless Marauder GUI). Or wire up an external ILI9341 display for the full experience.
_lddb.bin (headless serial)Control via: Headless Marauder GUI (serial controller)
Lonely Binary ESP32 Gold
Premium gold-finish ESP32 with IPEX antenna connector for external antennas. Better range than PCB antenna boards. The community standard for headless Marauder builds.
_lddb.bin (headless serial)Control via: Headless Marauder GUI
Flipper Zero Add-On Boards
ESP32-based boards that plug into the Flipper Zero GPIO. Run Marauder via the Marauder Companion app on the Flipper.
Flipper Zero WiFi DevBoard
The official Flipper WiFi board. ESP32-S2 with BOOT + RESET buttons for easy flash mode. PCAP capture to Flipper SD. The most documented Flipper Marauder setup.
_flipper.bin • Offsets: 0x1000 / 0x8000 / 0xE000 / 0x10000FlipMods Ultra V3
Triple-radio board: ESP32 Marauder + NRF24 (2.4GHz mousejacking) + CC1101 (433MHz sub-GHz). Ships pre-flashed with Marauder. USB-C for firmware updates, MicroSD slot.
Rek5 Lab QUAD Module
Four radios in one board: ESP32 WiFi/BT, CC1101 sub-GHz (400/900MHz bands), NRF24 2.4GHz, and GPS. 7 antennas included. Switches select active module. Ships with Marauder.
VoyagerRF v2
By Kashmir54 / Cyber Bros. ESP32-C3 with external 3dBi omnidirectional antenna via SMA connector. Significant range improvement over PCB-antenna boards.
VoyagerRF Pro
Premium VoyagerRF with GPS module, NRF24 radio, and MicroSD for logging. The most capable C3-based Flipper add-on.
CaracalDB ESP32/NRF24/CC1101
ESP32-S3 pre-flashed with Marauder + Evil Portal. NRF24L01 for mousejacking, CC1101 for 433MHz. USB-C updates, MicroSD, includes 3D printed case and pin protector.
5GHz / Dual-Band Builds
ESP32-C5 boards with WiFi 6 dual-band (2.4 + 5 GHz). The newest generation — scan and deauth on 5GHz networks.
Waveshare ESP32-C5
The go-to C5 dev board. RISC-V single-core at 240MHz. True 5GHz WiFi scanning and deauth. The cheapest way to get dual-band Marauder capabilities.
_esp32c5.binOffsets: 0x2000 (bootloader) / 0x8000 / 0x10000 — different from classic ESP32!
Flash via: Universal Flasher or esptool
Seeed XIAO ESP32-C5
Thumb-sized dual-band board. Same C5 chip in the smallest possible form factor. Perfect for embedding in custom builds or the cyberdeck.
HoneyHoney Apex 5 Module
The most feature-packed Flipper add-on. Dual-band WiFi 6, two sub-GHz CC1101 radios (868 + 433MHz), NRF24, GPS, Bluetooth 5.0, 802.15.4 (Zigbee/Thread), MicroSD. 5 antennas. Pre-loaded with Marauder.
Rabbit-Labs Poltergeist 5GHz
Compact C5 Flipper add-on with OLED display, IR blaster (switchable between Flipper and ESP32), wide-angle IR receiver, 8GB SD card included. Pre-flashed and QC tested.
Official Marauder Hardware
Boards designed and sold by JustCallMeKoko, the original Marauder creator. Premium builds with custom PCBs and full firmware support.
Official store: justcallmekokollc.com. Products restock in drops — follow JustCallMeKoko on social media for restock alerts.
Marauder v6 / v6.1
The previous-generation official Marauder. 2.8" ILI9341 touchscreen, full power management, SD card slot, battery management, external antenna options, OTA firmware updates. Retired in favor of the v8.
_v6.bin or _v6_1.binMarauder v8
The latest official Marauder. ESP32-C5 with WiFi 6 dual-band (2.4 + 5 GHz), Bluetooth 5, 2.8" touchscreen, 18650 battery slot with onboard charging, integrated GPS with dual SMA connectors (WiFi + GPS, antenna-upgradeable), SD card slot. Ships with enclosure, WiFi antenna, and ceramic GPS antenna.
Marauder Mini v3
Compact official Marauder with ESP32-C5 dual-band WiFi, 5-way tactile joystick navigation, multi-constellation GPS, SD card slot, LiPo charging circuit (820mAh 653042 battery recommended). Ships with 3D-printed enclosure.
_mini.bin (C5 variant)Dev Board Pro (Flipper)
Official Flipper add-on by JustCallMeKoko. ESP32-WROOM pre-flashed with Marauder, micro SD slot for PCAPs, bottom-mounted header pins for slim profile on Flipper, RGB LED, GPIO breakout. Requires Flipper Zero + Marauder Companion App.
_marauder_dev_board_pro.binBFFB (Bluetooth Fox Badgery)
Official JustCallMeKoko 4-in-1 Flipper board. Dual CC1101 radios (400MHz + 900MHz), NRF24L01+ with amplification, ESP32 running Marauder, GPS module, micro SD expansion. Ships with enclosure and 5 antennas (400MHz, 900MHz, GPS, 2x 2.4GHz). One module active at a time via switches.
_bffb.binThird-Party Standalone Units
Pre-built Marauder devices with custom enclosures, batteries, GPS, and antennas. Ready to use out of the box.
HoneyHoney Pocket Unit v2 + GPS
Standalone portable Marauder with 2.8" touchscreen, GPS, dual SMA antenna connectors (WiFi + GPS), dual 18650 batteries with USB-C charging, 8GB SD card included.
HoneyHoney Double Barrel 5G C5
Dual-ESP setup: ESP32 (2.4GHz touchscreen) + ESP32-C5 (5GHz). GPS, sub-GHz 433MHz CC1101, 800mAh battery, MicroSD, USB-C. Standalone or Flipper mode.
Rabbit-Labs Minion Marauder
Distinctive gold/black minion-shaped Flipper add-on. Stands upright on the Flipper. Runs Marauder or Evil Portal. From the EU-based Rabbit-Labs team.
_v6.binDIY Builds
Build from scratch with off-the-shelf components. Wire an ESP32 to a display, add GPS, battery, antenna — fully custom.
Classic: ESP32 + ILI9341 Display
The original DIY path. Wire a bare ESP32 dev board to a 2.8" ILI9341 TFT touchscreen via SPI. Add GPS, SD card module, battery, and antenna as desired. Full control over your build.
_lddb.bin for NodeMCU/LDDB/Wemos boardsOffsets: 0x1000 / 0x8000 / 0xE000 / 0x10000
Shopping List
2.8" ILI9341 TFT + Touch
SPI interface with XPT2046 resistive touch controller
Accessories
Upgrade any Marauder build with external antennas, GPS, batteries, cases, and RF modules.
Antennas & Pigtails
2.4GHz WiFi SMA Antenna
3dBi omnidirectional SMA antennas for ESP32 boards with IPEX/U.FL connectors. Significantly better range than PCB antennas.
IPEX to SMA Pigtail Cables
Connect SMA antennas to boards with IPEX/U.FL connectors. Get SMA Female pigtails for standard SMA Male antennas.
GPS Modules
GY-NEO6MV2 GPS Module (UART)
The standard GPS for ESP32 Marauder wardriving. Connects via TX/RX pins. Works with Marauder's wardriving mode for WiGLE-compatible CSV export.
CYD Battery + GPS Mod Kit (Solderless)
Zero-soldering mod kit for CYD boards. Adds LiPo battery support and GPS. Only works with resistive (R) CYD models, NOT capacitive (C).
Batteries
3.7V LiPo Batteries
For portable builds. Check connector type: JST 1.25mm (Heltec), JST PH 2.0mm (LILYGO, Chinese boards), JST SH 1.0mm (M5Stack).
RF Expansion Modules
CC1101 SubGHz Transceiver
Sub-1GHz radio for 315/433/868/915MHz. Used by HaleHound, ESP32-DIV, and multi-radio Flipper boards. Needs separate antennas for 315MHz and 915MHz bands.
NRF24L01+PA+LNA
2.4GHz wireless transceiver with power amplifier. 1100m+ range with external SMA antenna. Used for mousejacking and raw 2.4GHz packet work.
PN532 NFC/RFID Module
13.56MHz NFC reader/writer. Reads Mifare 1k/4k, Ultralight, DesFire, FeliCa. I2C/SPI/UART interfaces. Built-in PCB antenna is sufficient.
Cases & Enclosures
3D Printed Cases (Free STLs)
Community-designed cases for CYD, standalone Marauder, and portable builds. Supports battery + GPS mod kits.
Pre-Printed Cases (Buy)
Ready-made cases from Etsy sellers if you don't have a 3D printer.
USB Cables
USB-C DATA Cable
Many USB-C cables are charge-only and will NOT work for flashing. If your ESP32 doesn't appear as a COM port, the cable is power-only. Short cables (1–3ft) are more reliable.
Firmware Compatibility
Which firmware binary matches which board. Our tools (Universal Flasher and Headless Marauder GUI) handle the correct offsets automatically.
Marauder Firmware Variants
| Binary | Target Hardware | Chip |
|---|---|---|
_old_hardware.bin | Marauder v4 (OG) | ESP32 |
_v6.bin | Marauder v6, Minion, AWOK with screen | ESP32 |
_v6_1.bin | Marauder v6.1, AWOK V2/V3 with screen | ESP32 |
_mini.bin | Marauder Mini | ESP32 |
_lddb.bin | LDDB, NodeMCU-32S, Wemos D1 Mini, Gold Board | ESP32 |
_flipper.bin | Flipper Zero WiFi DevBoard, AWOK V2 Flipper | ESP32-S2 |
_marauder_dev_board_pro.bin | Dev Board Pro, AWOK V3 Flipper | ESP32-S3 |
_multiboardS3.bin | Generic ESP32-S3 boards, Flipper MultiBoard S3 | ESP32-S3 |
_m5stickc.bin | M5StickC Plus / Plus 2 | ESP32 |
_m5cardputer.bin | M5Stack Cardputer (original) | ESP32-S3 |
_m5cardputer_adv.bin | M5Stack Cardputer ADV | ESP32-S3 |
_bffb.bin | BFFB (Bluetooth Fox Badgery) | ESP32 |
_esp32c5.bin | ESP32-C5-DevKitC, Waveshare C5, XIAO C5 | ESP32-C5 |
| CYD-specific builds | All CYD boards (2.4", 2.8", 3.2", 3.5") | ESP32 |
Flash Offsets by Chip
| Chip Family | Bootloader | Partitions | Boot App | Firmware |
|---|---|---|---|---|
| ESP32 (classic) | 0x1000 | 0x8000 | 0xE000 | 0x10000 |
| ESP32-S2 | 0x1000 | 0x8000 | 0xE000 | 0x10000 |
| ESP32-S3 | 0x0 | 0x8000 | 0xE000 | 0x10000 |
| ESP32-C5 | 0x2000 | 0x8000 | — | 0x10000 |
Other Compatible Firmware
Most Marauder-compatible boards also run these firmware projects. Our Universal Flasher supports all of them.
| Firmware | Key Features | Supported Chips | Status |
|---|---|---|---|
| Marauder | WiFi deauth, beacon spam, PMKID, wardriving, BLE spam, evil portal | ESP32 S2 S3 C5 | v1.12.1 • Active |
| Bruce | WiFi, BLE, SubGHz, NFC, IR, BadUSB, JavaScript, Brucegotchi | ESP32 S3 C5 | v1.15 • Active |
| GhostESP (Revival) | 2.4/5GHz WiFi, BLE, NFC, IR, CC1101, NRF24, Zigbee, live Wireshark | ESP32 S3 C3 C5 | v1.9.10 • Active |
| HaleHound | IoT recon, credential brute-force, CVE exploits, SubGHz, NFC, GPS | ESP32 | v3.5.5 • Active |
| ESP32-DIV | WiFi deauth, BLE, SubGHz replay/jam, IR replay, NFC | ESP32-S3 | v1.6.0 • Active |
| MinigotchiV3 | ESP32 Pwnagotchi clone, WiFi frame manipulation, deauth | ESP32 S3 | v3.6.4 • Active |
| Pigtail | Anti-surveillance: AirTag/Tile/SmartTag/smart glasses detection | ESP32-S3 | v1.0.11 • Active |
| Meshtastic | LoRa mesh networking, off-grid messaging, GPS | ESP32 S3 | v2.7.x • Active |
Flash with Our Tools
Two ways to flash your board. The Dashboard gives you full control + serial command interface. The Flasher is for quick one-shot flashing.
Dashboard: Headless Marauder GUI
The full-featured option. Flash firmware, then control your Marauder via serial with 70+ commands, live AP/station tables, target picker, logging, and export. Four UI flavors: PyQt5 Desktop, Tkinter, Terminal TUI, or Browser UI.
Suicide build support: Yes (SHA256 verified provisioning)
Flasher: Universal Flasher
Flash-only tool for when you just want to get firmware on your board and go. 14+ firmware profiles, 4 flash backends (esptool, SD image, qFlipper, ADB), batch flash, backup/restore, device auto-detect, and a plugin system for community firmware.
Suicide Marauder (Open Source / Prepackaged)
The anti-forensic firmware provisioner is open source and its functionality has been prepackaged into both the Headless Marauder GUI (Dashboard) and Universal Flasher (Flasher). You don't need to run it separately — our tools handle suicide build provisioning with SHA256 verification, boot password gating, and eFuse/flash encryption support built in.
Quick Flash Steps
2. Plug your ESP32 board into USB (use a DATA cable, not charge-only)
3. Select your board model and firmware from the dropdown
4. Click Flash — the tool handles offsets, chip detection, and download automatically
5. Board reboots into Marauder. Use the Dashboard's serial UI to control it, or use the touchscreen directly.
Budget Breakdown
$12 — Absolute Minimum
Total: ~$12
Flash via USB. Touchscreen Marauder. Done.
$35–42 — Recommended Portable
GPS NEO-6M: ~$5–10
3.7V LiPo Battery: ~$5–8
3D Printed Case: Free (STL download)
USB-C Data Cable: ~$6
Total: ~$34–42
$97 — Full Kit (Amazon)
GPS NEO-6M: ~$10
SMA Antenna + Pigtail: ~$15
CC1101 SubGHz: ~$10
NRF24L01+PA+LNA: ~$10
PN532 NFC: ~$8
LiPo Battery: ~$5
USB-C Cable: ~$6
Etsy Case: ~$15
Total: ~$97
$45–55 — Same Kit (AliExpress)
Typical savings: 40–50% on components.
Trade-off: 2–4 week shipping vs 2-day Prime.