Build-hub · ESP32 · Cyberdecks

Build the gear. The right way.

One honest place to build these security-hardware projects: figure out what to buy, what firmware runs on it, how to flash it, and where every tool and guide lives.

02The projects

The LxveAce security-hardware toolkit. Each is open source unless noted, and every release links a VirusTotal scan + checksums so you can verify what you download.

Cyber Controller

v1.5.1

The flagship. One window to flash and run every piece of security hardware on a cyberdeck. It ships 29 firmware profiles across 5 backends, a serial monitor for 9 firmwares, and a broadcast that hits every connected radio at once.

Universal Flasher

v1.4.0

The standalone, device-agnostic flasher — firmware plus writing Kali/Tails/Arch to USB, each integrity-checked before it writes. Purely a flasher; no controller or logger.

Headless Marauder

v1.3.3

An all-in-one ESP32 Marauder controller and multi-firmware flasher. One-click standalone exe — no Python, no browser. Works with headless "Gold"-style boards and screened devices alike.

Dead Man's Switch

v1.0.0

An owner-only anti-forensic "dead-man gate" for ESP32 security firmware. Runs early in boot and, only when armed, triggers a forensic self-destruct. Defensive use on hardware you own.

Universal Flasher & UI

v0.1.0 alpha

A light standalone Qt flasher + serial controller with a cross-device event bus. An early prototype of the unified idea that became Cyber Controller; kept as a working snapshot.

Hardware Guides

docs

Per-firmware, per-device walkthroughs: what to buy, how to build it, how to flash and run it, and how to fold it into Cyber Controller — each with a downloadable PDF.

Tag Studio

v0.3.1

An industrial label & tag design studio that prints to laser engravers, thermal printers and vinyl cutters. Off-topic from the security gear, but part of the toolkit — currently free.

03Firmware & what flashes it

29 firmware profiles ship in Cyber Controller across 5 flash backends. A sample of the most-used below — the Hardware Guides cover the full set with buy → build → flash walkthroughs.

FirmwareChipsBackendUpstream
ESP32 MarauderESP32 / S2 / S3 / C5esptooljustcallmekoko
BruceESP32 / S3 / C-seriesesptoolBruceDevices
GhostESPESP32 / S2 / S3 / CesptoolGhostESP-Revival
HaleHoundESP32 (CYD)esptoolJesseCHale
MeshtasticESP32-S3 / Heltecesptoolmeshtastic
Flipper ZeroFlipper (Unleashed / Momentum)qFlipperflipperzero.one
BW16 / RTL8720DNRealtek AmebaD (2.4/5 GHz)rtl8720AmebaD ImageTool
Raspberry Pi imagesPi (ARM)SD imageKali / RaspyJack / Pwnagotchi

Not sure which tool? Cyber Controller flashes all of these from one app and auto-detects the chip; Universal Flasher and Headless Marauder are the lighter standalone options.

04Hardware notes

What to buy, and the gotchas that bite people. Source from wherever you like — these are just known-good notes, not affiliate links.

Boards
  • Classic ESP32 (WROOM, CH340 USB-serial) — the "Gold" and most headless dev boards. Cheapest way in; runs Marauder/Bruce/GhostESP. Note it's not an S3.
  • ESP32-S3 — native USB, more RAM; needed by some firmware builds (ESP32-DIV v2, some Meshtastic).
  • ESP32 C-series — cheap single-core; watch the C5 bootloader offset (0x2000, not 0x0 — a common brick).
  • CYD (Cheap Yellow Display) — ESP32 + touchscreen; great for HaleHound and screened builds.
  • BW16 / RTL8720DN — dual-band 2.4/5 GHz, flashed over its AT-command CLI.
  • Flipper devboards / T-Deck / M5Stack — screened, more capable, more expensive.
Antennas, screens & extras
  • External antenna (IPEX/u.FL) on a board that has the connector improves range noticeably.
  • GPS module (NEO-6M/8M) if you want wardriving to WiGLE CSV.
  • A quality USB-C cable that carries data (not charge-only) — a surprising number of "it won't flash" issues.
  • SD/USB storage for logging and for the OS-to-USB flashing.
Common flashing gotchas
  • Wrong chip assumed → let the tool auto-detect (Cyber Controller runs chip_id first).
  • ESP32-C5 flashed at 0x0 instead of 0x2000 → brick. Use a tool that knows the offset.
  • CH340 driver missing on Windows → the port never appears.
  • Charge-only cable → device powers up but won't enumerate as serial.

05Downloads & trust

Grab releases from each project's own page — they carry the platform binaries, a SHA256SUMS.txt, and a VirusTotal link.

Heads-up on Windows warnings. The desktop apps aren't code-signed yet, so SmartScreen may warn and a few heuristic AV engines flag the Windows build — the normal false-positive pattern for an unsigned PyInstaller app (Linux/macOS scan clean). That's why every release links its VirusTotal report + checksums, and it's open source so you can build it yourself. Nothing here is hidden.

Universal Flasher

Four platform builds.

Headless Marauder

One-click standalone exe + platform builds.

06About & community

These are self-taught hobby projects, hardened and tested as they grow. This hub exists to help people actually build them — and to credit the upstream firmware authors the tools rely on.

Authorized, lawful use only. Some of this gear can transmit on regulated bands and run offensive actions. Use it only on hardware and networks you own or are explicitly allowed to test. You're responsible for following the laws where you are. Each project's repo has its own disclaimer — read it.

Our sites