ESP32-C5 // WiFi 6 // DUAL-BAND // 4-NODE

PHANTOM
C5

Professional-grade WiFi pentesting platform built on ESP32-C5. 4-node distributed architecture with iOS control app. Dual-band 2.4+5GHz, GPU-accelerated cracking, wardriving maps.

ORDER HARDWARE VIEW PRICING
0
NODES (4xC5 + USB)
0
GHz DUAL-BAND
0
ATTACK MODULES
0
LINUX COMMANDS

CAPABILITIES

Everything you need for professional WiFi security assessments

📡

DUAL-BAND SCANNER

Scan 2.4GHz and 5GHz simultaneously. The only ESP32 with WiFi 6 support. See every network in range with RSSI, channel, security analysis.

🔒

PMKID CRACKER

Capture WPA2 PMKIDs from beacons. Auto-crack on iPhone using Metal GPU acceleration. 200-500k passwords/second on A-series chips.

🌎

WARDRIVING MAP

GPS-tagged AP scanning with real-time map overlay. Color-coded security levels. Export KML, CSV, hashcat formats. Full session recording.

👻

EVIL TWIN PORTAL

Automated Evil Twin with captive portal. Router-branded phishing pages. DNS hijack + HTTP server. OUI-based brand detection.

📡

4-NODE DISTRIBUTED

Coordinate all 4 ESP32-C5 nodes from one iPhone. Dedicated roles: portal AP, deauth, beacon flood, IDS monitoring. Maximum coverage.

☠

DEAUTH & INJECT

802.11 deauth flood, beacon spam, probe flood, BLE spam (Apple/Samsung/Google/Windows popups). Raw frame injection on dual-band.

🛡

INTRUSION DETECTION

Real-time IDS monitoring. Detect deauth attacks, evil twins, rogue APs. Distributed 4-node coverage across all channels.

🛰

BLE TRACKER

Detect AirTags, SmartTags, Tile, Flipper Zero. Stalker detection alerts. BLE spam generator for all major vendors.

🎬

SCRIPT ENGINE

Visual attack script builder. Create, save, import/export JSON scripts. Variables, node targeting, delay control. 12 built-in scripts.

💡

CSI RADAR

WiFi 6 HE20 channel state information. 245-subcarrier presence detection. See through walls. Hardware register control.

💾

PCAP CAPTURE

1.9MB onboard SPIFFS storage. Standard PCAP format (Wireshark-compatible). Download captures to iPhone. NVS persistent storage.

💻

HACKER TERMINAL

Full CLI terminal in the app. ping, portscan, arp, traceroute, DNS lookup. Network recon after connecting to captured networks.

🔌

PHANTOM-USB NODE

5th node: ESP32-S3 AtomS3 USB HID injector. DuckyScript payloads, PIN brute-force (iOS/Android), Boot Drive, composite mode (HID+MSC). Controlled via BLE from iPhone.

🖫

FULL LINUX TERMINAL

Embedded Alpine Linux via iSH x86 emulator. Real kernel, real apk package manager. Install wireshark, nmap, python, aircrack-ng. 55+ native shell commands.

📄

SCRIPT DEPLOY

Pick .py/.ps1/.sh/.js/.bat from iPhone. AtomS3 opens terminal on target, writes the file, executes it. Auto-generated DuckyScript for macOS and Windows.

🔒

PIN BRUTE-FORCE

Hardware USB keyboard brute-force for iOS and Android PIN locks. Smart mode (top 100 common PINs first, ~30% hit rate). Automatic lockout timing. Requires optional MAX3421E USB Host Shield module.

📥

BOOT DRIVE

AtomS3 as bootable USB drive. Upload .img/.iso via BLE. Target PC boots from AtomS3. Bypass OS-level security entirely. Composite: HID + Boot simultaneously.

⚡

AUTO-CONFIG

Attacker IP auto-detected from iPhone WiFi. Webhook URL auto-generated. Zero manual setup — plug AtomS3 into target and tap Run.

iOS CONTROL APP

5-node control from your iPhone. WiFi, BLE, USB HID, Linux terminal — every feature at your fingertips.

Nodes WiFi Scanner IDS Wardriving Map Map Filters More Scripts Scripts 2 Cracker BLE Tracker CSI Radar Export Terminal Hardware Registers Native Shell Alpine Boot Alpine Terminal Native Linux WebVM Debian USB HID Inject USB Boot Drive PIN Brute-Force Nodes WiFi Scanner IDS Wardriving Map Map Filters More Scripts Scripts 2 Cracker BLE Tracker CSI Radar Export Terminal Hardware Registers Native Shell Alpine Boot Alpine Terminal Native Linux WebVM Debian USB HID Inject USB Boot Drive PIN Brute-Force

LIVE TERMINAL

Direct CLI access to all pentesting tools

PRICING

Choose your pentesting arsenal

SINGLE NODE

100 CHF

1x ESP32-C5 with PHANTOM firmware pre-flashed

  • ESP32-C5 FireBeetle board
  • PHANTOM C5 v1.0 firmware
  • iOS app access (TestFlight)
  • All 12 attack modules
  • Dual-band 2.4 + 5 GHz
  • PCAP capture (1.9MB onboard)
  • Free firmware updates
ORDER NODE

FULL KIT

449 CHF

4x ESP32-C5 + 1x PHANTOM-USB — complete arsenal

  • 4x ESP32-C5 FireBeetle boards
  • 1x PHANTOM-USB (AtomS3 HID)
  • iOS app + Linux terminal
  • 4-node distributed WiFi attacks
  • USB HID injection + Boot Drive
  • PIN brute-force (iOS/Android)
  • Script file deployment
  • Evil Twin orchestration
  • Lifetime firmware updates
ORDER QUAD KIT

ENTERPRISE

899 CHF

For security teams and pentest firms

  • 4x ESP32-C5 Quad Kit
  • 5 iOS app licenses
  • Custom branding on Evil Portal
  • PDF pentest report generator
  • Compliance report templates
  • Priority email support
  • 1-on-1 setup assistance
  • Custom script development
CONTACT SALES

THE HARDWARE

4x ESP32-C5 WiFi 6 nodes + 1x PHANTOM-USB (AtomS3) HID injector

PHANTOM C5 Nodes
ESP32-C5 NODES
PHANTOM USB AtomS3
PHANTOM-USB (ATOMS3)
Full Kit
FULL KIT — 5 NODES
Close-up
DUAL-BAND ANTENNA
USB Connected
USB-C HID INJECT
AtomS3 Display
128x128 LCD STATUS
Board Detail
RISC-V 240MHz
Complete Setup
COMPLETE SETUP

TECHNICAL SPECS

Built on the most advanced ESP32 silicon

CHIPSET

ESP32-C5 (RISC-V)

WiFi

802.11ax (WiFi 6)

BANDS

2.4 GHz + 5 GHz

TX POWER

21 dBm (adjustable)

BLE

Bluetooth 5.0 LE

NODES

4x WiFi + 1x USB

FLASH

4MB (2MB app + 1.9MB PCAP)

CPU

RISC-V 240MHz

CSI

245 subcarriers (HE20)

INJECTION

Raw 802.11 frames

CONTROL

iOS app (BLE GATT)

GPU CRACK

Metal (200-500k pwd/s)

USB HID

DuckyScript + AtomS3

LINUX

Alpine (iSH x86 emu)

SHELL

55+ native commands

USB NODE

ESP32-S3 (M5 AtomS3)

READY TO OWN THE AIRWAVES?

Join the waitlist. Limited first batch.

For authorized security testing only. By joining you agree to responsible use.