Compact and versatile, this device packs a punch with its extensive capabilities, including USB HID attacks, mass storage emulation, network device impersonation and WiFi/Bluetooth exploits (thanks to our forked version of ESP32 Marauder).

What It Does

• Performs HID injection and DuckyScript payloads (BadUSB attacks)
• Emulates USB mass storage and virtual Ethernet adapters
• Captures network packets and exfiltrates logs over Wi-Fi
• Runs local web interface for payload management and execution BSSID: iPhone14
• Supports Wi-Fi and Bluetooth scanning with optional ESP32-Marauder features

Features

• Pre-flashed LilyGO T-Dongle S3 with USBArmyKnife installed and tested
• 0.96" ST7735 LCD display for live status and payload control
• Micro-SD storage for payloads, PCAP logs, and configuration files
• Web UI for scripting, file management, and system monitoring http://4.3.2.1:8080
• Compact USB form factor — discreet, portable, and plug-and-play
• Powered by ESP32-S3 with native USB for reliable HID and device emulation

Ideal For

• Penetration testers and red team operators
• Cybersecurity educators and lab instructors
• Developers exploring USB gadget or HID automation
• Wireless researchers and hobbyists

LEGAL DISCLAIMER: Use this device at your own risk. We believe running this device does not currently violate any laws or regulations in the United States. However, we are not responsible for civil or criminal liability resulting from the use of this software. If you are located outside of the US please consult with an attorney in your country to help you assess the legal risks of running this device.