Welcome to the Flipper Zero Unleashed Firmware repo!

This firmware is a fork from flipperdevices/flipperzero-firmware

Our goal is to make all features possible on this device without any limitations!

Please help us implement emulation for all Sub-GHz dynamic (rolling code) protocols!

This software is for experimental purposes only and is not meant for any illegal activity/purposes.
We do not condone illegal activity and strongly encourage keeping transmissions to legal/valid uses allowed by law.
Also, this software is made without any support from Flipper Devices and is in no way related to the official devs.

Our Discord Community:

Dev builds

• https://dev.unleashedflip.com/
• https://t.me/kotnehleb

Releases in Telegram

• https://t.me/unleashed_fw

What's changed

• Sub-GHz regional TX restrictions removed
• Sub-GHz frequency range can be extended in settings file (Warning: It can damage Flipper's hardware)
• Many rolling code protocols now have the ability to save & send captured signals
• FAAC SLH (Spa) & BFT Mitto (secure with seed) manual creation
• Sub-GHz static code brute-force plugin
• LFRFID Fuzzer plugin
• Custom community plugins and games added + all known working apps can be downloaded in extra pack in every release
• Extra Sub-GHz frequencies + extra Mifare Classic keys
• Picopass/iClass plugin included in releases
• Recompiled IR TV Universal Remote for ALL buttons
• Universal remote for Projectors, Fans, A/Cs and Audio(soundbars, etc.)
• BadUSB keyboard layouts
• Customizable Flipper name
• Sub-GHz -> Press OK in frequency analyzer to use detected frequency in Read modes
• Sub-GHz -> Long press OK button in Sub-GHz Frequency analyzer to switch to Read menu
• Sub-GHz -> External CC1101 module support
• Other small fixes and changes throughout
• See other changes in changelog and in readme below

Also check the changelog in releases for latest updates!

Current modified and new Sub-GHz protocols list:

Thanks to Official team (to thier SubGHz Developer, Skorp) for implementing decoders for these protocols.

Encoders/sending made by Eng1n33r & @xMasterX:

• Keeloq [Not ALL systems supported for decode or emulation yet!] - Supported manufacturers list
• Keeloq: HCS101
• Keeloq: AN-Motors
• Keeloq: JCM Tech
• Keeloq: MHouse
• Keeloq: Nice Smilo
• Keeloq: DTM Neo
• Keeloq: FAAC RC,XT
• Keeloq: Mutancode
• Keeloq: Normstahl
• CAME Atomo
• Nice Flor S
• FAAC SLH (Spa) [External seed calculation required (For info contact me in Discord: Nano#8998)]
• BFT Mitto [External seed calculation required (For info contact me in Discord: Nano#8998)]
• Security+ v1 & v2
• Star Line

Encoders made by @assasinfil & @xMasterX:

• Somfy Telis
• Somfy Keytis
• KingGates Stylo 4k
• Alutech AT-4N
• Nice ON2E (Nice One)

Please support development of the project

The majority of this project is developed and maintained by me, @xMasterX. I'm unemployed because of the war, and the only income I receive is from your donations. Our team is small and the guys are working on this project as much as they can solely based on the enthusiasm they have for this project and the community.

• @assasinfil - SubGHz
• @Svaarich - UI design and animations
• @Amec0e - Infrared assets
• Community moderators in Telegram, Discord, and Reddit
• And of course our GitHub community. Your PRs are a very important part of this firmware and open-source development.

The amount of work done on this project is huge and we need your support, no matter how large or small. Even if you just say, "Thank you Unleashed firmware developers!" somewhere. Doing so will help us continue our work and will help drive us to make the firmware better every time. Also, regarding our releases, every build has and always will be free and open-source. There will be no paywall releases or closed-source apps within the firmware. As long as I am working on this project it will never happen. You can support us by using links or addresses below:

• Boosty: https://boosty.to/mmxdev
• Ko-Fi: https://ko-fi.com/masterx
• cloudtips (only RU payments accepted): https://pay.cloudtips.ru/p/7b3e9d65
• YooMoney (only RU payments accepted): https://yoomoney.ru/fundraise/XA49mgQLPA0.221209
• USDT(TRC20): TSXcitMSnWXUFqiUfEXrTVpVewXy2cYhrs
• BCH: qquxfyzntuqufy2dx0hrfr4sndp0tucvky4sw8qyu3
• ETH/BSC/ERC20-Tokens: darkflippers.eth (or 0xFebF1bBc8229418FF2408C07AF6Afa49152fEc6a)
• BTC: bc1q0np836jk9jwr4dd7p6qv66d04vamtqkxrecck9
• DOGE: D6R6gYgBn5LwTNmPyvAQR6bZ9EtGgFCpvv
• LTC: ltc1q3ex4ejkl0xpx3znwrmth4lyuadr5qgv8tmq8z9
• XMR (Monero): 41xUz92suUu1u5Mu4qkrcs52gtfpu9rnZRdBpCJ244KRHf6xXSvVFevdf2cnjS7RAeYr5hn9MsEfxKoFDRSctFjG5fv1Mhn
• TON: EQCOqcnYkvzOZUV_9bPE_8oTbOrOF03MnF-VcJyjisTZmpGf

Community apps included:

• RFID Fuzzer (by Ganapati & @xMasterX) & New protocols by @mvanzanten
• Sub-GHz bruteforcer (by @derskythe & xMasterX) (original by Ganapati & xMasterX)
• Sub-GHz playlist (by darmiel)
• ESP8266 Deauther plugin (by SequoiaSan)
• WiFi Scanner plugin (by SequoiaSan)
• MultiConverter plugin (by theisolinearchip)
• USB Keyboard plugin (by huuck)
• WAV Player (OFW: DrZlo13) - Fixed and improved by LTVA1
• Barcode generator plugin (original by McAzzaMan) - EAN-8 and refactoring by @msvsergey
• GPIO: Sentry Safe plugin (by H4ckd4ddy)
• ESP32: WiFi Marauder companion plugin (by 0xchocolate)
• NRF24: Sniffer & MouseJacker (with changes) (by mothball187)
• Simple Clock (timer by GMMan) (original by CompaqDisc)
• Sub-GHz Remote (UniversalRF Remix) (by @darmiel & @xMasterX) (original by @ESurge)
• Spectrum Analyzer (with changes) (by jolcese) - Ultra Narrow mode & scan channels non-consecutively
• Metronome (by panki27)
• DTMF Dolphin (by litui)
• TOTP (Authenticator) (by akopachov)
• GPS (by ezod) works with module NMEA 0183 via UART (13TX, 14RX, GND pins on Flipper)
• i2c Tools (by NaejEL) - C0 -> SCL / C1 -> SDA / GND -> GND | 3v3 logic levels only!
• HC-SR04 Distance sensor - Ported and modified by @xMasterX (original by Sanqui) - How to connect -> (5V -> VCC) / (GND -> GND) / (13|TX -> Trig) / (14|RX -> Echo)
• Morse Code (by wh00hw)
• Unitemp - Temperature sensors reader (DHT11/22, DS18B20, BMP280, HTU21x and more) (by quen0n)
• BH1750 - Lightmeter (by oleksiikutuzov)
• iButton Fuzzer (by xMasterX)
• HEX Viewer (by QtRoS)
• POCSAG Pager (by xMasterX & Shmuma)
• Text Viewer (by kowalski7cc & kyhwana)
• UART Terminal (by cool4uma)
• ProtoView (by antirez)

Games:

• DOOM (fixed) (by p4nic4ttack)
• Zombiez (Reworked By DevMilanIan) (Original By Dooskington)
• Flappy Bird (by DroomOne)
• Arkanoid (refactored by xMasterX) (by gotnull)
• Tic Tac Toe (refactored by xMasterX) (by gotnull)
• Tetris (with fixes) (by jeffplang)
• Minesweeper (by panki27)
• Heap Defence (aka Stack Attack) - Ported to latest firmware by @xMasterX - (original by wquinoa & Vedmein)
• Game15 (by x27)
• Solitaire (by teeebor)
• BlackJack (by teeebor)
• 2048 game (by eugene-kirzhanov)

Other changes

• BadUSB -> Keyboard layouts (by rien > dummy-decoy)
• Sub-GHz -> External CC1101 module support - (by quen0n)
• Sub-GHz -> New frequency analyzer - (by ClusterM)
• Sub-GHz -> Save last used frequency (by derskythe)
• Sub-GHz -> Press OK in frequency analyzer to use detected frequency in Read modes (by derskythe)
• Sub-GHz -> Long press OK button in Sub-GHz Frequency analyzer to switch to Read menu (by derskythe)
• Lock device with pin(or regular lock if pin not set) by holding UP button on main screen (by an4tur0r)

Instructions

- How to install firmware

- How to build firmware

- How to connect external CC1101 module

- BadUSB: how to add new keyboard layouts

- How to change Flipper name

Plugins

- 🎲 Download Extra plugins for Unleashed

- Configure Sub-GHz Remote App

- TOTP (Authenticator) config description

- Barcode Generator

- Multi Converter

- WAV Player sample files & how to convert

- Sub-GHz playlist generator script

Plugins that works with external hardware

- How to use: Unitemp - Temperature sensors reader

- How to use: [NMEA] GPS

- How to use: i2c Tools

- How to use: [NRF24] plugins

- How to use: [WiFi] Scanner

- How to use: [ESP8266] Deauther

- How to use: [ESP32] WiFi Marauder

- [WiFi] Scanner - Web Flasher for module firmware

- [ESP8266] Deauther - Web Flasher for module firmware

- Windows: How to Upload .bin to ESP32/ESP8266

- How to use: [GPIO] SentrySafe plugin

Sub-GHz

- Transmission is blocked? - How to extend Sub-GHz frequency range

- How to add extra Sub-GHz frequencies

Where I can find IR, Sub-GHz, ... files, DBs, and other stuff?

UberGuidoZ Playground - Large collection of files - Github

Awesome Flipper Zero - Github

CAME-12bit, NICE-12bit, Linear-10bit, PT-2240 - Sub-GHz fixed code bruteforce

SMC5326, UNILARM - Sub-GHz fixed code bruteforce

Links

• Unofficial Discord: discord.unleashedflip.com

• Docs by atmanos / How to write your own app (outdated API): https://flipper.atmanos.com/docs/overview/intro

• Official Docs: http://docs.flipperzero.one

• Official Forum: forum.flipperzero.one

Project structure

• applications - Applications and services used in firmware
• assets - Assets used by applications and services
• furi - Furi Core: OS-level primitives and helpers
• debug - Debug tool: GDB-plugins, SVD-file and etc
• documentation - Documentation generation system configs and input files
• firmware - Firmware source code
• lib - Our and 3rd party libraries, drivers and etc...
• site_scons - Build helpers
• scripts - Supplementary scripts and python libraries home

Also, pay attention to the ReadMe.md files inside those directories.