ESP32-Bit-Pirate - A Hardware Hacking Tool with Web-Based CLI That Sp

项目说明

ESP32 Bit Pirate

![Logo banner of the ESP32 Bit Pirate firmware]()

ESP32 Bit Pirate is open-源码 firmware that turns your device into a multi-协议 de and analysis 工具, inspired by the legendary Bus Pirate.

It supports sniffing, sending, scripting, and interacting with digital protocols (I2C, UART, 1-Wire, SPI, etc.) via a serial terminal or web-based CLI. It also communicates with radio protocols like Bluetooth, Wi-Fi, Sub-GHz and RFID.

The official project website centralizes e: ESP32 Bit Pirate Website.

From there you can install the firmware, open the web tools, follow hardware guides, explore recipes, and access the documentation.

!Demo showing the different mode of the ESP32 Bit Pirate firmware
!Demo showing the LittleFS file system of the ESP32 Bit Pirate firmware

Features

Interacti interface (CLI) via USB Serial or WiFi Web.

Modes for:

- HiZ (default)
- I2C (scan, glitch, slave mode, dump, eeprom)
- SPI (eeprom, flash, sdcard, slave mode)
- UART / Half-Duplex UART (bridge, read, write)
- 1WIRE (ibutton, eeprom)
- 2WIRE (sniff, smartcard) / 3WIRE (eeprom)
- DIO (Digital I/O, read, pullup, set, pwm)
- Infrared (send, record, uni remote)
- USB (HID, flashrom, storage, usb-uart)
- Bluetooth (BLE HID, scan, spoofing, sniffing)
- Wi-Fi / Ethernet (sniff, deauth, nmap, netcat)
- JTAG (scan, SWD, openOCD)
- LED (animations, set LEDs)
- I2S (test speakers, mic, play sound)
- CAN (sniff, send and recei)
- SUBGHZ (analyze, record, replay)
- RFID (read, write, clone)
- RF24 (scan, send, receive)
- FM (analyze, broadcast)
- CELL (dump sim card, sms, call)
- LORA (sniff, payload, meshtatic)

Protocol sniffers I2C, UART, SPI, 1Wire, 2wire, CAN, Wi-Fi, Bluetooth, SubGhz.

Baudrate auto-detection, AT commands and tools for UART.

Registers manipulation, EEPROM dump tools, identify devices for I2C.

Read all sort of EEPROM, Flash and others tools for SPI.

Scripting using Bus Pirate-style bytecode instructions or Python.

De command with more than 80 supported INFRARED protocols.

Direct I/O management, PWM, ser state.

Analyze radio signals and frequencies on every bands.

Near than 50 addressable LEDs protocols supported.

Ethernet and WiFi are supported to access networks.

Import and export data with the LittleFS over HTTP.

Pirate assistant to help you with the firmware.

USB-Uart dongle, SPI programmer, logic analyzer and more.

Web Serial tools to use USB Serial over a web browser.

Supported Devices

| Device | | Description |
|-----------------------|------------------------------------------|---------------------------------------------------|
| ESP32 S3 Dev Kit | !Photo of the ESP32 S3 Dev Kit | More than 20 a GPIO, 1 button |
| M5 AtomS3 Lite | ![Photo of the M5 Atom S3 Lite]() | 8 GPIO (Gro), IR TX, 1 buttton |
| M5 Cardputer | !Photo of the M5 Cardputer | 2 GPIO (Grove), screen, keyboard, mic, speaker, IR TX, SD card, battery, standalone mode |
| M5 Cardputer ADV | ![Photo of the M5 Cardputer ADV]() | 12 GPIO (Gro), screen, keyboard, mic, speaker, IR TX, SD card, IMU, battery, standalone mode |
| M5 StampS3 | ![Photo of the M5 StampS3]() | 9 GPIO (exposed pins), 1 button |
| M5 Stick S3 | ![Photo of the M5 Stick S3]() | 13 GPIO (Gro), screen, mic, speaker, IR TX, IR RX, IMU, 3 buttons, battery |
| LILYGO T-Display | !Photo of the T-Display-S3 | 13 GPIO (1 Qwicc), screen, 2 buttons |
| LILYGO T-Embed | !Photo of the LILYGO T-Embed | 9 GPIO (Gro), screen, encoder, speaker, mic, SD card |
| LILYGO T-Embed CC1101 | !Photo of the LILYGO T-Embed CC1101 | 4 GPIO (2x Qwiic), screen, encoder, speaker, mic, SD Card, CC1101, PN532, IR TX, IR RX , battery |
| LILYGO T-Embed CC1101 Plus | !Photo of the LILYGO T-Embed CC1101 Plus | 4 GPIO (2x Qwiic), screen, encoder, speaker, mic, SD Card, CC1101, NRF24, PN532, IR TX, IR RX , battery |
| Heltec WiFi LoRa 32 V4 | !Photo of the Heltec WiFi LoRa 32 V4 | 15 GPIO (Header), SX1262 LoRa, 2 buttons, screen not supported |
| Heltec Master T190 | !Photo of the Heltec Master T190 | 15 GPIO (Header, Qwiiic), screen, 2 buttons, SX1262 LoRa |
| Seeed Studio Xiao S3 | !Photo of the Seeed Studio Xiao ESP32-S3 | 9 GPIO (exposed pins), 1 button |
| Wa ESP32-S3-GEEK | !Photo of the Wa ESP32-S3-GEEK | 7 GPIO (Dupont header), screen, 1 button, SD card |

Other ESP32-S3-based Boards

- All boards based on the ESP32-S3 can be supported, provided they have at least 8 MB of flash.

- You can flash the s3 dev-kit firmware onto any ESP32-S3 board.

- Keep in mind that the default pin mapping in the firmware may not match your specific board.

Getting Started

![Banner of the ESP32 Bit Pirate web flasher]()

1. 🔧 Flash the firmware
- Use the ESP32 Bit Pirate Web Flasher to burn the firmware directly from a web browser.
- You can also burn it on M5Burner, in the StickS3, AtomS3, M5StampS3 or Cardputer category.

2. 🔌 Connect or Web
- Serial: any terminal app, or the free browser-based Web Serial terminal (see Connect )
- Web: configure Wi-Fi and access the CLI (see Wi-Fi Connection)

3. 🧪 Use commands like:

Wiki

![Banner of the ESP32 Bit Pirate Wiki page]()

📚 Visit the Wiki for detailed documentation on every mode and command.

Includes:

Terminal mode - About serial and web terminal.

Mode o - Browse supported modes.

Serial setup - Serial access via USB.

The wiki is the best place to learn how e works.

Scripting

![Banner of the ESP32 Bit Pirate Scripts page]()

🛠️ Automate interactions with the ESP32 Bit Pirate using Python scripts o.

You can write and test scripts directly in the browser with the ESP32 Bit Pirate Python Lab.

Including: Logging data in a file, eeprom and flash dump, interracting with GPIOs, LED animation...

Expander

![Banner of the ESP32 Bit Pirate Expander page]()

🔌 Expand the capabilities of the ESP32 Bit Pirate with additional hardware modules.
The Expander adds support for the WiFi 5 GhZ or other radio protocols.

!A Cardputer connected to an expander C5

Dock

![Banner of the ESP32 Bit Pirate Dock page]()

🔧 A docking station for the ESP32 S3 DevKit designed to work with original Bus Pirate adapters.
It allows you to plug and use the original Bus Pirate ecosystem of adapters and accessories.

![The ESP32 Bit Pirate dock board]()

Get the ESP32 Bit Pirate Dock on PCBWay.

![PCBWay Logo]()

Command-Line Interfaces

The ESP32 Bit Pirate firmware provides three command-line interface (CLI) modes:

| Interface | Ad | Ideal for... |
|------------------|-----------------------------------------------------------------------------|----------------------------------------|
| Web Interface | - Accessible from any browser<br>- PC, tablets, mobiles<br>- Works o<br>- No cables needed | Quick tests, demos, headless setups |
| Serial Interface | - Faster performance<br>- Instant responsi<br>- Handles large data smoothly | Intensi, frequent interactions |
| Standalone | - Only for the Cardputer<br>- On device keyboard<br>- On device screen | Portable sessions, Quick tests |

All interfaces share the same command structure and can be used interchangeably (more details).

Mobile Web Interface over WiFi

!An iPhone screenshot showing the Bit Pirate firmware web interface

Standalone Mode for the Cardputer

!A Cardputer running the ESP32 Bit Pirate in standalone mode

Browser-Based Web Serial Tools

The ESP32 Bit Pirate Web Serial Tools provides direct access to the Serial CLI from a compatible browser, without installing PuTTY, minicom, or another terminal application.

!A demo Using the ESP32 Bit Pirate with Web Serial Tools

Contribute

See How To Contribute section, which outlines a simple way to add a new command to any mode.

Assets

#### ![Small logo of the ESP32 Bit Pirate firmware]()

See images, logo, presentations, photo, video, illustrations. These can be freely used in blog posts, documentation, , or articles to help explain and promote the firmware.

Warning

> ⚠️ Warning: Devices should only operate at 3.3V or 5V.
> - Do not connect peripherals using other levels — doing so may damage your ESP32.

> ⚠️ Usage Warning: This firmware is provided for educational, diagnostic, and interoperability testing purposes only.
> - Do not use it to interfere with, probe, or manipulate devices without proper authorization.
> - Avoid any unauthorized RF transmissions (e.g., sub-GHz) that could local regulations or disrupt networks and communications.
> - The authors are not responsible for any misuse of this software or hardware, including legal consequences resulting from unauthorized access or signal emission.
> - Always stay within the bounds of your country’s laws and responsible disclosure policies.

项目信息

开发语言：C++

Star 数：5945

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A Hardware Hacking 工具 with Web-Based CLI That Speaks Every 协议 展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。