ESP32 Bit Pirate

Description

ESP32 Bit Pirate is an open-source firmware that turns your device into a multi-protocol hacker's tool, inspired by the legendary Bus Pirate.

It supports sniffing, sending, scripting, and interacting with various digital protocols (I2C, UART, 1-Wire, SPI, etc.) via a serial terminal or web-based CLI. It also communicates with radio protocols like Bluetooth, Wi-Fi, Sub-GHz and RFID.

Use the ESP32 Bit Pirate Web Flasher to install the firmware in one click. See the Wiki for step-by-step guides on every mode and command. Check ESP32 Bus Pirate Scripts for a collection of scripts.

Details

Everything about the project: ESP32 Bit Pirate Website

Getting Started

🔧 Flash the firmware
- Use the ESP32 Bit Pirate Web Flasher to burn the firmware directly from a web browser.
- You can also burn it on M5Burner, in the M5stick, AtomS3, M5StampS3 or Cardputer category.
🔌 Connect via Serial or Web
- Serial: any terminal app (see Web Serial Tools)
- Web: configure Wi-Fi and access the CLI via browser (see Wi-Fi Connection)
🧪 Use commands like:
```
mode
help
scan
sniff
...
```

Wiki

📚 Visit the Wiki for detailed documentation on every mode and command.

Includes:

Terminal mode - About serial and web terminal.
Mode overviews - Browse supported modes.

Serial setup - Serial access via USB.

The wiki is the best place to learn how everything works.

Scripting

🛠️ You can automate interactions with the ESP32 Bit Pirate using Python scripts over serial.

Examples and ready-to-use scripts are available in the repository: ESP32 Bus Pirate Scripts.

Including: Logging data in a file, eeprom and flash dump, interracting with GPIOs, LED animation...

Files

bit_pirate_16_stamps3.bin

octet-stream - 3.62 MB - 06/12/2026 at 22:52

Download

bit_pirate_16_s3devkit.bin

octet-stream - 3.50 MB - 06/12/2026 at 22:52

Download

bit_pirate_16_tembedcc1101.bin

octet-stream - 3.65 MB - 06/12/2026 at 22:52

Download

bit_pirate_16_atoms3lite.bin

octet-stream - 3.62 MB - 06/12/2026 at 22:52

Download

bit_pirate_16_sticks3.bin

octet-stream - 3.70 MB - 06/12/2026 at 22:52

Download

Project Logs

Collapse

v1.6
Geo • 06/12/2026 at 22:35 • 0 comments
Changelog

PIRATE ASSISTANT

🔹 Added the Pirate Assistant to the WebUI.

https://github.com/geo-tp/ESP32-Bit-Pirate/wiki/99-Assistant

TERMINAL MODE - WIFI HOTSPOT

🔹 The device can now create its own Wi-Fi hotspot. 🔹 Connect directly to the hotspot from a phone or computer to access the Web CLI without requiring an existing Wi-Fi network.

https://github.com/geo-tp/ESP32-Bit-Pirate/wiki/00-Terminal

GENERAL

wizard
🔹 has been reworked to reduce false-positive signal type detection.

UART

sniff [raw] - Thanks to @fdufnews.
🔹 Passively monitor UART activity without transmitting data.

scan and autobaud
🔹 Reworked for more precise UART activity and baud-rate detection.

I2C

trace <addr> [reg] [ms]
🔹 Continuously monitor a specific register and display its changes.

USB

adapters
🔹 Added a dedicated USB adapter selection shell to transform your device into hardware USB adapters.

Available adapters

USB-UART Bridge
🔹 Expose a USB CDC serial port connected to configurable UART RX/TX GPIOs.

Flashrom SPI Programmer
🔹 Expose a serprog-compatible SPI programmer for use with flashrom.

AVRDUDE Bus Pirate SPI Programmer
🔹 Implement the legacy Bus Pirate binary SPI protocol used by avrdude -c buspirate.

SUMP Logic Analyzer
🔹 Transform the device into a SUMP-compatible logic analyzer for sigrok and PulseView.

🔹 Supports the display and configuration of up to eight GPIO channels.

OpenOCD Bus Pirate Adapter
🔹 Expose a Bus Pirate-compatible JTAG interface for OpenOCD.

USB IR Toy / LIRC Adapter
🔹 Emulate a USB IR Toy-compatible device for infrared tools such as LIRC.

SubGHz Raw CDC CC1101 Adapter
🔹 Expose the CC1101 through a simple USB CDC protocol for configuration, raw capture and transmission.

https://github.com/geo-tp/ESP32-Bit-Pirate/wiki/99-Adapters

JTAG

openocd
🔹 Directly configure and reboot the device as an OpenOCD-compatible USB adapter.

BLUETOOTH

mouse
🔹 Corrected BLE HID mouse and keyboard report definitions.

MISC

🔹 The project has been renamed from ESP32 Bus Pirate to ESP32 Bit Pirate across the firmware

🔹 Configured GPIOs are now automatically protected from duplicate assignments.

🔹 Inactive WebSocket connections are now properly closed to prevent unexpected WebUI disconnections.

🔹 Improved the smart-card PSC prompt to make PIN/security operations less confusing.

🔹 Improved HTTP server and hotspot-mode initialization.

🔹 Harmonized data prompt for flash and eeproms operations.

🔹 Reworked SubGHz reception around a ring buffer to avoid losing pulses while captured data is transferred or displayed.

🔹 Fixed CC1101 initialization on ESP32-S3 devices. Thanks to @AmorFati-coder.

🔹 The CC1101 is now properly deinitialized after transmit operations. Thanks to @manato-tajiri.

🔹 Various reliability, cleanup and resource-release improvements.

LINKS
- Use the Web Flasher: https://geo-tp.github.io/ESP32-Bit-Pirate/webflasher/
- Collection of scripts: https://github.com/geo-tp/ESP32-Bus-Pirate-Scripts
- Full guide: https://github.com/geo-tp/ESP32-Bit-Pirate/wiki
- Bus Expander: https://github.com/geo-tp/ESP32-Bus-Expander
- ESP32-S3 DevKit Dock: https://github.com/AndreiVladescu/ESP32-Bit-Pirate-Dock
V1.1
Geo • 09/29/2025 at 23:37 • 0 comments
v1.1 Latest

Changelog

I2C
- sniff 🔹 More readable data, improvements.
DIO
- pulldown <pin> 🔹 Active pulldown resistor on given pin
SUBGHZ
- load 🔹 Fixes and improvements.
- listen 🔹 RSSI to audio mapping (using I2S configured output or internal speaker if any)
- replay 🔹 Fixes and improvement.
STANDALONE TERMINAL MODE (New)

Use arrows up/down to scroll and esc to scroll down line by line. Use tab for command history.

MISC
- Use the webflasher: https://geo-tp.github.io/ESP32-Bus-Pirate/webflasher/
- Collection of scripts: https://github.com/geo-tp/ESP32-Bus-Pirate-Scripts
- Full guide: https://github.com/geo-tp/ESP32-Bus-Pirate/wiki
V1.0 Changelog
Geo • 09/26/2025 at 09:45 • 0 comments
v1.0 Latest

Changelog

INFRARED
- load
  🔹 Load .ir files from LittleFS (https://github.com/Lucaslhm/Flipper-IRDB)
WIFI
- nmap
  🔹 Improvements for services discovery. Thanks to @AndreiVladescu
SUBGHZ
- bruteforce
  🔹 Fixes and improvements.
- load
  🔹 Load .sub files from LittleFS (https://github.com/Zero-Sploit/FlipperZero-Subghz-DB)
RF24 (New mode)
- scan
  🔹 Search best active channel.
- sniff
  🔹 Sniff raw frames.
- sweep
  🔹 Analyze channels activity.
- jam
  🔹 Jam selected channels group.
- setchannel
  🔹 Set operating channel.
- config
  🔹 Configure NRF24 settings.
LittleFS (Storage / Import & Export)
- Import / Export
  🔹 Upload .ir, .sub files to LittleFS.
  🔹See: https://github.com/geo-tp/ESP32-Bus-Pirate/wiki/99-LittleFS
New Device Supported
- M5Cardputer ADV
Misc / Notes
- Use the webflasher : https://geo-tp.github.io/ESP32-Bus-Pirate/webflasher/
- New scripts: https://github.com/geo-tp/ESP32-Bus-Pirate-Scripts
- Visuals assets to talk about the firmware: https://github.com/geo-tp/ESP32-Bus-Pirate/wiki/99-Visual-Assets

View all 3 project logs

Build Instructions

Collapse

Flash the firmware

🔧 Flash the firmware
- Use the ESP32 Bit Pirate Web Flasher to burn the firmware directly from a web browser.
- You can also burn it on M5Burner, in the StickS3, AtomS3, M5StampS3 or Cardputer category.
🔌 Connect via Serial or Web
- Serial: any terminal app (see Connect via Serial)
- Web: configure Wi-Fi and access the CLI via browser (see Wi-Fi Connection)
🧪 Use commands like:
```
mode
help
scan
sniff
...
```

Documentation

📚 Visit the Wiki for detailed documentation on every mode and command.

Includes:

Terminal mode - About serial and web terminal.
Mode overviews - Browse supported modes.
Serial setup - Serial access via USB.

The wiki is the best place to learn how everything works.

Scripting

🛠️ Automate interactions with the ESP32 Bit Pirate using Python scripts over serial.

Examples and ready-to-use scripts are available in the repository: ESP32 Bit Pirate Scripts.

Including: Logging data in a file, eeprom and flash dump, interracting with GPIOs, LED animation...

Discussions

mbt28 wrote 10/02/2025 at 09:55

Hello,

Thank you for the nice project. I tried it with my esp32-s3 for I2C debugging however it is a bit difficult to understand output especially if there is so much bus communication. I wish it is able to output slave address in hex and indicate read/write condition and share the data in hex until the message completes.

Are you sure? yes | no

Geo wrote 10/02/2025 at 13:13

If you're talking about the I2C sniffer, it has been reworked in version 1.1 to display the data in a more readable way.

Are you sure? yes | no

ESP32 Bit Pirate

Become a Hackaday.io member

Just one more thing

Description

Details

Everything about the project: ESP32 Bit Pirate Website

Getting Started

Wiki

Scripting

Files

bit_pirate_16_stamps3.bin

bit_pirate_16_s3devkit.bin

bit_pirate_16_tembedcc1101.bin

bit_pirate_16_atoms3lite.bin

bit_pirate_16_sticks3.bin

Components

Project Logs Collapse

v1.6

Changelog

PIRATE ASSISTANT

TERMINAL MODE - WIFI HOTSPOT

GENERAL

UART

I2C

USB

Available adapters

JTAG

BLUETOOTH

MISC

LINKS

V1.1

Changelog

I2C

DIO

SUBGHZ

STANDALONE TERMINAL MODE (New)

MISC

V1.0 Changelog

Changelog

INFRARED

WIFI

SUBGHZ

RF24 (New mode)

LittleFS (Storage / Import & Export)

New Device Supported

Misc / Notes

Build Instructions Collapse

Enjoy this project?

Discussions

Become a Hackaday.io Member

Similar Projects

NOOX AI Hradware Device

MpyTool - Fast File Manager for MicroPython Device

WiSer

USB - DALI gateway

Does this project spark your interest?

Report project as inappropriate

Send message

Remove Member

Project Logs

Collapse

Build Instructions

Collapse