Welcome to the Flipper Zero Unleashed Firmware repo!

This firmware is a fork from flipperdevices/flipperzero-firmware

Most stable custom firmware focused on new features and improvements of original firmware components, with almost no UI changes

This software is for experimental purposes only and is not meant for any illegal activity/purposes.
We do not condone illegal activity and strongly encourage keeping transmissions to legal/valid uses allowed by law.
Also, this software is made without any support from Flipper Devices and is in no way related to the official devs.

Our Discord Community:

Dev builds (unstable)

• https://dev.unleashedflip.com/
• https://t.me/kotnehleb

Releases in Telegram

• https://t.me/unleashed_fw

What's changed

• Sub-GHz regional TX restrictions removed
• Sub-GHz frequency range can be extended in settings file (Warning: It can damage Flipper's hardware)
• Many rolling code protocols now have the ability to save & send captured signals
• FAAC SLH (Spa) & BFT Mitto (keeloq secure with seed) manual creation
• Sub-GHz static code brute-force plugin
• LFRFID Fuzzer plugin
• Custom community plugins and games added + all known working apps can be downloaded in extra pack in every release
• Extra Sub-GHz frequencies + extra Mifare Classic keys
• Picopass/iClass plugin included in releases
• Recompiled IR TV Universal Remote for ALL buttons
• Universal remote for Projectors, Fans, A/Cs and Audio(soundbars, etc.)
• Customizable Flipper name Update! Now can be changed in Settings->Desktop (by @xMasterX and @Willy-JL)
• Text Input UI element -> Cursor feature (by @Willy-JL)

• BadUSB -> Keyboard layouts (by rien > dummy-decoy)
• Sub-GHz -> External CC1101 module support - (by quen0n)
• Sub-GHz -> Add manually menu extended with new protocols
• Sub-GHz -> New frequency analyzer - (by ClusterM)
• Sub-GHz -> Save last used frequency (by derskythe)
• Sub-GHz -> Press OK in frequency analyzer to use detected frequency in Read modes (by derskythe)
• Sub-GHz -> Long press OK button in Sub-GHz Frequency analyzer to switch to Read menu (by derskythe)
• Lock device with pin(or regular lock if pin not set) by holding UP button on main screen (by an4tur0r)

• Sub-GHz -> Short press OK in frequency analyzer to save detected frequency for usage in Read modes
• Sub-GHz -> Long press OK button in Sub-GHz Frequency analyzer to switch to Read menu and automatically use selected frequency
• SubGHz -> New option to use timestamps + protocol name when you saving file, instead of random name - Enable in Radio Settings -> Time in names = ON
• SubGHz -> Read mode UI improvements (scrolling text, + shows time when signal was received) (by @wosk)
• Sub-GHz -> External CC1101 module support (Hardware SPI used)
• SubGHz -> Hold right in received signal list to delete selected signal
• SubGHz -> Custom buttons for Keeloq / Alutech AT4N / Nice Flor S / Somfy Telis / Security+ 2.0 / CAME Atomo - now you can use arrow buttons to send signal with different button code
• SubGHz -> BFT Mitto / Somfy Telis / Nice Flor S / CAME Atomo, etc.. manual creation with programming new remote into receiver (use button 0xF for BFT Mitto, 0x8 (Prog) on Somfy Telis)
• SubGHz -> Debug mode counter increase settings (+1 -> +5, +10, default: +1)
• SubGHz -> Debug PIN output settings for protocol development
• Infrared -> Debug TX PIN output settings
• Other small fixes and changes throughout
• See other changes in readme below

Also check the changelog in releases for latest updates!

Current modified and new Sub-GHz protocols list:

Thanks to Official team (to their SubGHz Developer, Skorp) for implementing decoders for these protocols in OFW.

Keeloq [Not ALL systems supported for decode or emulation yet!] - Supported manufacturers list

Encoders or sending made by @xMasterX:

• Nero Radio 57bit (+ 56bit encoder improvements)
• CAME 12bit/24bit encoder fixes (already merged in OFW)
• Keeloq: HCS101
• Keeloq: AN-Motors
• Keeloq: JCM Tech
• Keeloq: MHouse
• Keeloq: Nice Smilo
• Keeloq: DTM Neo
• Keeloq: FAAC RC,XT
• Keeloq: Mutancode
• Keeloq: Normstahl
• Keeloq: Beninca + Allmatic
• Keeloq: Stilmatic / Schellenberg
• Keeloq: CAME Space
• Keeloq: Aprimatic (model TR and similar)

Encoders or sending made by @Eng1n33r(first implementation in Q2 2022) & @xMasterX (current version):

• CAME Atomo -> Update! check out new instructions
• Nice Flor S -> How to create new remote - instructions
• FAAC SLH (Spa) [External seed calculation required (For info contact me in Discord: Nano#8998)]
• Keeloq: BFT Mitto [External seed calculation required (For info contact me in Discord: Nano#8998)] -> Update! check out new instructions
• Star Line
• Security+ v1 & v2 (encoders was made in OFW)

Encoders made by @assasinfil & @xMasterX:

• Somfy Telis -> How to create new remote - instructions
• Somfy Keytis
• KingGates Stylo 4k
• Alutech AT-4N -> How to create new remote - instructions
• Nice ON2E (Nice One) -> How to create new remote - instructions

Please support development of the project

The majority of this project is developed and maintained by me, @xMasterX. I'm unemployed, and the only income I receive is from your donations. Our team is small and the guys are working on this project as much as they can solely based on the enthusiasm they have for this project and the community.

• @assasinfil - SubGHz
• @Svaarich - UI design and animations
• @Amec0e - Infrared assets
• Community moderators in Telegram, Discord, and Reddit
• And of course our GitHub community. Your PRs are a very important part of this firmware and open-source development.

The amount of work done on this project is huge and we need your support, no matter how large or small. Even if you just say, "Thank you Unleashed firmware developers!" somewhere. Doing so will help us continue our work and will help drive us to make the firmware better every time. Also, regarding our releases, every build has and always will be free and open-source. There will be no paywall releases or closed-source apps within the firmware. As long as I am working on this project it will never happen. You can support us by using links or addresses below:

• Boosty (patreon alternative): https://boosty.to/mmxdev
• cloudtips (only RU payments accepted): https://pay.cloudtips.ru/p/7b3e9d65
• YooMoney (only RU payments accepted): https://yoomoney.ru/fundraise/XA49mgQLPA0.221209
• USDT(TRC20): TSXcitMSnWXUFqiUfEXrTVpVewXy2cYhrs
• BCH: qquxfyzntuqufy2dx0hrfr4sndp0tucvky4sw8qyu3
• ETH/BSC/ERC20-Tokens: darkflippers.eth (or 0xFebF1bBc8229418FF2408C07AF6Afa49152fEc6a)
• BTC: bc1q0np836jk9jwr4dd7p6qv66d04vamtqkxrecck9
• DOGE: D6R6gYgBn5LwTNmPyvAQR6bZ9EtGgFCpvv
• LTC: ltc1q3ex4ejkl0xpx3znwrmth4lyuadr5qgv8tmq8z9
• XMR (Monero): 41xUz92suUu1u5Mu4qkrcs52gtfpu9rnZRdBpCJ244KRHf6xXSvVFevdf2cnjS7RAeYr5hn9MsEfxKoFDRSctFjG5fv1Mhn
• TON: EQCOqcnYkvzOZUV_9bPE_8oTbOrOF03MnF-VcJyjisTZmpGf

Community apps included:

• RFID Fuzzer (by Ganapati & @xMasterX) & New protocols by @mvanzanten
• Sub-GHz bruteforcer (by @derskythe & xMasterX) (original by Ganapati & xMasterX)
• Sub-GHz playlist (by darmiel)
• ESP8266 Deauther plugin (by SequoiaSan)
• WiFi Scanner plugin (by SequoiaSan)
• MultiConverter plugin (by theisolinearchip)
• WAV Player (OFW: DrZlo13) - Fixed and improved by LTVA1 -> Also outputs audio on PA6 - 3(A6) pin
• Barcode generator plugin (original by McAzzaMan) - EAN-8 and refactoring by @msvsergey
• GPIO: Sentry Safe plugin (by H4ckd4ddy)
• ESP32: WiFi Marauder companion plugin (by 0xchocolate) - Saving .pcap on flipper microSD by tcpassos -> Only with custom marauder build (It is necessary to uncomment "#define WRITE_PACKETS_SERIAL" in configs.h (in marauder fw) and compile the firmware for the wifi board.) Or download precompiled build -> Download esp32_marauder_ver_flipper_sd_serial.bin
• NRF24: Sniffer & MouseJacker (with changes) (by mothball187)
• Simple Clock (timer by GMMan) (original by CompaqDisc)
• Sub-GHz Remote (by @gid9798)
• Spectrum Analyzer (with changes) (by jolcese) - Ultra Narrow mode & scan channels non-consecutively
• Metronome (by panki27)
• DTMF Dolphin (by litui)
• TOTP (Authenticator) (by akopachov)
• GPS (by ezod) works with module NMEA 0183 via UART (13TX, 14RX, GND pins on Flipper)
• i2c Tools (by NaejEL) - C0 -> SCL / C1 -> SDA / GND -> GND | 3v3 logic levels only!
• HC-SR04 Distance sensor - Ported and modified by @xMasterX (original by Sanqui) - How to connect -> (5V -> VCC) / (GND -> GND) / (13|TX -> Trig) / (14|RX -> Echo)
• Morse Code (by wh00hw)
• Unitemp - Temperature sensors reader (DHT11/22, DS18B20, BMP280, HTU21x and more) (by quen0n)
• BH1750 - Lightmeter (by oleksiikutuzov)
• iButton Fuzzer (by xMasterX)
• HEX Viewer (by QtRoS)
• POCSAG Pager (by xMasterX & Shmuma)
• Text Viewer (by kowalski7cc & kyhwana)
• UART Terminal (by cool4uma)
• ProtoView (by antirez)
• SWD Probe (by g3gg0)
• IR Scope (by kallanreed)
• BadBT plugin (BT version of BadKB) (by Willy-JL, ClaraCrazy, XFW contributors)

Games:

• DOOM (fixed) (by p4nic4ttack)
• Zombiez (Reworked By DevMilanIan) (Original By Dooskington)
• Flappy Bird (by DroomOne)
• Arkanoid (refactored by xMasterX) (by gotnull)
• Tic Tac Toe (refactored by xMasterX) (by gotnull)
• Tetris (with fixes) (by jeffplang)
• Minesweeper (by panki27)
• Heap Defence (aka Stack Attack) - Ported to latest firmware by @xMasterX - (original by wquinoa & Vedmein)
• Game15 (by x27)
• Solitaire (by teeebor)
• BlackJack (by teeebor)
• 2048 game (by eugene-kirzhanov)
• Bomberduck (by leo-need-more-coffee)

Instructions

- How to install firmware

- How to build firmware

- How to connect external CC1101 module

- BadUSB: how to add new keyboard layouts

- How to change Flipper name

Sub-GHz

- Transmission is blocked? - How to extend Sub-GHz frequency range

- How to add extra Sub-GHz frequencies

- How to use Flipper as new remote (Nice FlorS, BFT Mitto, Somfy Telis, Aprimatic, AN-Motors, etc..)

- Configure Sub-GHz Remote App

Plugins

- 🎲 Download Extra plugins for Unleashed

- TOTP (Authenticator) config description

- Barcode Generator

- Multi Converter

- WAV Player sample files & how to convert

- Sub-GHz playlist generator script

Plugins that works with external hardware

- How to use: Unitemp - Temperature sensors reader

- How to use: [NMEA] GPS

- How to use: i2c Tools

- How to use: [NRF24] plugins

- How to use: [WiFi] Scanner

- How to use: [ESP8266] Deauther

- How to use: [ESP32] WiFi Marauder

- [WiFi] Scanner - Web Flasher for module firmware

- [ESP8266] Deauther - Web Flasher for module firmware

- Windows: How to Upload .bin to ESP32/ESP8266

- How to use: [GPIO] SentrySafe plugin

Where I can find IR, Sub-GHz, ... files, DBs, and other stuff?

UberGuidoZ Playground - Large collection of files - Github

Awesome Flipper Zero - Github

Links

• Unofficial Discord: discord.unleashedflip.com

• Hello world - plugin tutorial (English): https://github.com/DroomOne/Flipper-Plugin-Tutorial

• Hello world - plugin tutorial (in Russian): https://yakovlev.me/hello-flipper-zero/

• CLion IDE - How to setup workspace for flipper firmware development: https://krasovs.ky/2022/11/01/flipper-zero-clion.html

• Docs by atmanos / How to write your own app (outdated API): https://flipper.atmanos.com/docs/overview/intro

• Official Docs: http://docs.flipperzero.one

• Official Forum: forum.flipperzero.one

Project structure

• applications - Applications and services used in firmware
• assets - Assets used by applications and services
• furi - Furi Core: OS-level primitives and helpers
• debug - Debug tool: GDB-plugins, SVD-file and etc
• documentation - Documentation generation system configs and input files
• firmware - Firmware source code
• lib - Our and 3rd party libraries, drivers and etc...
• site_scons - Build helpers
• scripts - Supplementary scripts and python libraries home

Also, pay attention to the ReadMe.md files inside those directories.