TOPOLOGY
DEVICES
POWER
FIELD CONFIGS
Three-Layer Architecture
Layer 3 — BaseLaptop / Phone / Pi 4 → Control interface, data storage, reportingWiFi Client
Layer 2 — BridgeBaguette S3 (Bridge Node) → Translates ESP-NOW mesh ↔ WiFi APESP-NOW + AP
Layer 1 — FieldMarauder ESP32 / Pico Duck / GPS → Data capture, payload executionESP-NOW / Serial
Key Design Principles
📡ESP-NOW Mesh
Sub-GHz 2.4GHz protocol, no router needed. 250m+ range. Each node rebroadcasts to extend. Up to 20 peer connections per node. Fixed MAC addressing for peer registration.
📶WiFi Bridge
Bridge node runs both WiFi AP (192.168.4.x subnet, SSID: HYLAS_CONTROL) and ESP-NOW simultaneously. Laptop/phone connects to AP and sees all field devices via proxy.
🖥️Pi Zero Hub
Pi Zero W plugs into PC via USB (appears as 10.0.0.1 ethernet gadget) while hosting HYLAS_CONTROL WiFi AP. Single web dashboard controls all devices.
Hardware Inventory
📡Waveshare ESP32-S3 AMOLEDDISPLAY
AETHER FLOW firmware — WiFi packet sniffing with real-time particle visualisation. 1.91" AMOLED 240×536. Dedicated to display/visualisation only — NOT Marauder.
Chip:ESP32-S3
Display:AMOLED 240×536
PSRAM:8MB
Firmware:AETHER FLOW
🔊Baguette S3MARAUDER
Primary ESP32 Marauder board. WiFi attack and monitoring. Acts as bridge node in the ESP-NOW mesh. Bar-format design, USB-C.
Chip:ESP32-S3
Role:Marauder + Bridge
Firmware:ESP32 Marauder
📟Waveshare S3 GeekMARAUDER
Secondary Marauder board. ESP32-S3 based with USB-A dongle form factor. Good for covert placement.
Chip:ESP32-S3
Firmware:ESP32 Marauder
🦆Raspberry Pi Pico WBADUSB
Pico WiFi Duck — BadUSB platform. 16 DuckyScript payloads. Appears as HID keyboard to target PC. WiFi control via HYLAS_CONTROL AP.
Chip:RP2040
Platform:pico-ducky
Payloads:16
📍u-blox GPS ModuleGPS
GLONASS-capable USB GPS receiver. Serial NMEA output. Auto-detected on COM ports by wardrive and scanner tools. Feeds Leaflet map in real time.
Protocol:NMEA 0183
System:GPS + GLONASS
Interface:USB Serial
🤖Raspberry Pi Zero WPWNAGOTCHI
Pwnagotchi AI-driven handshake capture. Also acts as USB ethernet gadget (10.0.0.1) providing web UI access from host PC. WiFi AP mode for field control.
OS:Pwnagotchi
USB:Ethernet gadget
WiFi:AP + Monitor mode
🖥️Raspberry Pi 4BASE STATION
Base station. Runs Flask command center, stores SQLite databases, hosts web UI. Connects to HYLAS_CONTROL AP or wired to laptop. NAS sync for long-term storage.
Role:Command & Control
OS:Raspberry Pi OS
Storage:NAS sync
📡TP-Link TL-WN722NWIFI ADAPTER
USB WiFi adapter with AR9271 chipset (v1) — full monitor mode and packet injection support. Primary adapter for wardrive tool. Npcap required on Windows.
Chipset:AR9271 (v1 only)
Monitor mode:Full support
Driver:Npcap / aircrack
Power Strategy
🔋ESP32 Boards
USB-C power banks (10,000mAh) provide 8-12 hours. ESP32 deep-sleep between scans extends to 20+ hours. All boards support USB-C.
🔋Pi Zero W
Micro-USB, 5V/2.5A minimum. 5,000mAh power bank gives ~8 hours. Low power mode available when Pwnagotchi is not actively hunting.
🔋Custom Stream Deck
Internal LiPo (3.7V/3000mAh nominal). Three modes: AC (unlimited), Battery (6-8h), Ultra Low (12h+). Auto-detects power source.
🔌GPS Module
Powered from USB host port. No separate power needed. Minimal draw (~30mA). On when connected to Pi or laptop.
Field Engagement Configurations
👜Minimal Kit
Laptop + Baguette S3 (Marauder) + Pico Duck + GPS. Fits in jacket pocket. Good for quick engagements and demos. All controlled via laptop browser.
🎒Full Field Kit
All devices + Pi 4 base station + NAS sync. Full wardrive, handshake capture, BadUSB, AETHER FLOW display, GPS mapping. Used for comprehensive client engagements.
🎬Demo / Training Kit
Laptop + AETHER FLOW display (impressive visualisation) + Pico Duck demo + WiFi exposure scanner. Designed for client presentations and security awareness sessions.
🕵️Covert Placement
Waveshare S3 Geek (USB dongle form) + Pico Duck hidden in USB hub. Both connect to HYLAS_CONTROL when within range. No visible hardware.