WAVE SENTINEL
Sub-GHz · WiFi · Bluetooth Testing Tool
An all-in-one RF security research platform built on the ESP32-S3. Capture, analyze, and replay Sub-GHz signals, audit WiFi networks, and probe Bluetooth devices — all from a pocket-sized 3.5" touchscreen with no external tools required.
⚡ Install Firmware
- Connect your WT32-SC01-PLUS via USB-C
- Click Install WaveSentinel below
- Select the serial port when prompted
- Wait for the flash to complete (~60 seconds)
Mobile browsers and Firefox are not supported.
📡 Sub-GHz RF (CC1101)
Full-spectrum Sub-GHz radio powered by the CC1101 transceiver. Capture, replay, scan, and decode RF signals across the 300–928 MHz band.
- Capture & Playback — Record raw RF signals and retransmit on demand
- Frequency Scanner — Sweep and detect active frequencies in real time
- Protocol Analyzer — Auto-identify Princeton, KeeLoq, CAME, Nice FLO, GateTX, Linear & more
- Signal Generator — Transmit on any configurable frequency and modulation
- Flipper .sub Files — Load, save, and play Flipper Zero sub-files from SD card
- Tesla Charge Port — US and EU charge port signal emulation
- RCSwitch Types A–D — DIP switch, rotary/sliding, Intertechno, and REV remote control transmit
- RAW TX — Send raw codes with configurable frequency, bit length, pulse length, protocol, and repeat
- Universal Remote — 35-button programmable remote (Numbers, Nav, Media). Assign any .sub file to any button, save/load profiles to SD
- Full CC1101 Config — Frequency, modulation (ASK/FSK/GFSK/MSK), bandwidth, deviation, data rate, TX power, sync mode, packet format
- Save to SD — Export captures as Flipper-compatible .sub files
📶 WiFi Tools
802.11 b/g/n network auditing suite using the ESP32-S3's native WiFi radio with raw frame injection and promiscuous capture.
- Network Scanner — Discover and inspect nearby access points with signal strength
- WiFi Join — Connect to networks with on-screen keyboard, credentials saved to NVS
- Beacon Flood — Broadcast fake SSIDs (random, rickroll, funny names)
- Deauth Testing — 802.11 deauthentication frame transmission
- Packet Sniffer — Promiscuous mode capture with live packet stats and probe request logging
- OTA Updates — Over-the-air firmware updates via built-in web server
🔌 Bluetooth Low Energy
BLE 5.0 toolset powered by the NimBLE stack for advertisement analysis and broadcast testing.
- BLE Spam — Advertisement flooding for Apple, Android, Samsung, Windows, and Google devices
- BLE Scanner — Discover nearby BLE devices with name, MAC address, and RSSI
- Configurable Duration — 5s, 10s, or 30s scan windows
- NimBLE Stack — Low memory footprint (~15KB vs 70KB Bluedroid)
🖼 Hardware & Interface
- 3.5" Touchscreen — 480x320 capacitive IPS display, full touch-driven LVGL UI
- Persistent Status Bar — WiFi and battery icons visible across all screens
- microSD Card — Save/load RF captures, Flipper .sub files, remote profiles, and presets
- I2S Audio Output — DAC sound output via dedicated I2S bus
- TouchTunes Remote — Wireless jukebox control with full command set
- Dual-Core Architecture — Core 0 handles display, Core 1 handles RF/WiFi/BLE operations
🛒 What You Need
WT32-SC01-PLUS
ESP32-S3 dev board with 3.5" touchscreen (ST7796 + FT5x06)
CC1101 Module
Sub-GHz transceiver (300–928 MHz). Connect via SPI: MISO=11, MOSI=10, SCLK=14, CS=12, GDO0=13
microSD Card
For storing captures, presets, remote profiles, and Flipper .sub files. Any size FAT32 formatted
USB-C Cable
For flashing firmware and power. Data-capable cable required
⚙ Hardware Specs
MCU
ESP32-S3 @ 240 MHz (Dual-Core)
Display
3.5" ST7796 IPS (480x320)
Touch
FT5x06 Capacitive
RF Module
CC1101 (300–928 MHz)
Memory
8 MB PSRAM + 16 MB Flash
Storage
microSD via dedicated SPI bus
Audio
I2S DAC (GPIO 36/35/37)
WiFi
802.11 b/g/n
Bluetooth
BLE 5.0 (NimBLE)
Power
USB-C + LiPo battery
📌 Pin Mapping
CC1101 SPI
MISO=11 MOSI=10 SCLK=14 CS=12
CC1101 GDO0
GPIO 13
SD Card SPI
MISO=38 MOSI=40 SCLK=39 CS=41
I2S Audio
BCLK=36 LRC=35 DOUT=37
Display
8-bit parallel, RST=4, BL=45
Touch I2C
SDA=6 SCL=5 INT=7 (@ 0x38)
🚀 Getting Started
- Get the hardware — WT32-SC01-PLUS board, CC1101 module, microSD card, and a USB-C data cable
- Wire the CC1101 — Connect MISO(11), MOSI(10), SCLK(14), CS(12), GDO0(13), VCC(3.3V), and GND
- Flash the firmware — Use the Install button above (Chrome/Edge), or build from source with
pio run --target upload - Insert SD card — FAT32 formatted, for saving captures and loading Flipper .sub files
- Power on & tap — The splash screen shows the firmware version. Tap anywhere to enter the main menu
🛠 Build from Source
Requires PlatformIO (CLI or VS Code extension).
git clone https://github.com/OzInFl/WaveSentinel-refactored2.git
cd WaveSentinel-refactored2
pio run # Build
pio run --target upload # Flash via USB