GhostESP vs The Rest
The full 133-feature comparison against Bruce, HaleHound, and nyanBOX.
The full 133-feature comparison against Bruce, HaleHound, and nyanBOX.
This comparison is based on GhostESP's feature set and publicly available source for the listed projects. It is not a complete feature list for every firmware. HaleHound and nyanBOX are compared against the latest public source available to us; if newer releases are closed source, this table cannot be independently updated or verified against those builds.
| Feature | GhostESP | Bruce | HaleHound | nyanBOX |
|---|---|---|---|---|
| Architecture | ||||
| Current source available for audit | ✓ | ✓ | Limited / older public source | Limited / older public source |
| ESP-IDF-native architecture | ✓ | — | — | — |
| Arduino / PlatformIO architecture | — | ✓ | ✓ | ✓ |
| Supported board targets | 46 CI targets | 42+ | 4 | 1 |
| Full LVGL graphical UI | ✓ | — | — | — |
| WiFi | ||||
| Web dashboard / REST control | ✓ | ✓ | — | — |
| Captive portal web server | ✓ | ✓ | ✓ | ✓ |
| AP / station WiFi scanning | ✓ | ✓ | ✓ | ✓ |
| Deauth / disassoc testing | ✓ | ✓ | ✓ | ✓ |
| Beacon spam | ✓ | ✓ | ✓ | ✓ |
| Karma / probe response attack | ✓ | ✓ | ✓ | — |
| Handshake / EAPOL capture | ✓ | ✓ | ✓ | — |
| On-device PCAP browser / hc22000 export | ✓ | — | — | — |
| PMKID capture / export | ✓ | — | ✓ | — |
| Live Wireshark USB streaming | ✓ | — | — | — |
| WPA3 / SAE-specific testing | ✓ | — | — | — |
| WPA3 compliance checker | ✓ | — | — | — |
| EAPOL logoff attack | ✓ | — | — | — |
| Channel switch attack | ✓ | — | — | — |
| GTK abuse / client isolation testing | ✓ | — | — | — |
| DHCP starvation | ✓ | ✓ | — | — |
| ARP / port / SSH scanners | ✓ | ✓ | — | — |
| mDNS discovery | ✓ | — | — | — |
| NetBIOS scanner | ✓ | — | — | — |
| HTTP banner scanner | ✓ | — | — | — |
| SNMP probe | ✓ | — | — | — |
| WiFi OUI vendor lookup | ✓ | ✓ | ✓ | — |
| PineAP / Evil Twin detection | ✓ | — | — | ✓ |
| WPS detection / reporting | ✓ | ✓ | — | — |
| Pwnagotchi-style automated capture mode | ✓ | ✓ | — | — |
| Pwnagotchi detector / spam | — | ✓ | — | ✓ |
| Channel congestion analysis | ✓ | — | — | ✓ |
| Live WiFi packet monitor / visualizer | ✓ | — | ✓ | ✓ |
| WiFi Airspace Monitor | ✓ | — | — | — |
| DNS sinkhole / blocklist NXDOMAIN | ✓ | — | — | — |
| GPS WiFi wardriving | ✓ | ✓ | ✓ | — |
| BLE wardriving | ✓ | ✓ | ✓ | — |
| WiGLE upload integration | ✓ | ✓ | — | — |
| 802.15.4 / Zigbee sweep export | ✓ | — | — | — |
| GhostLink dual-ESP control | ✓ | — | — | — |
| GhostLink BLE bridge to Android | ✓ | — | — | — |
| Split-channel wardriving helper | ✓ | — | — | — |
| GhostLink remote radio support | ✓ | — | — | — |
| Drone / OpenDroneID detect | ✓ | — | — | ✓ |
| Drone / OpenDroneID spoof | ✓ | — | — | — |
| Bluetooth LE | ||||
| BLE scanning | ✓ | ✓ | ✓ | ✓ |
| Raw BLE scanner | ✓ | — | — | — |
| BLE spam modes | ✓ | ✓ | ✓ | ✓ |
| AirTag scan / spoof | ✓ | ✓ | ✓ | ✓ |
| BLE tracker detection tools | ✓ | — | ✓ | ✓ |
| Flipper Zero finder | ✓ | — | — | ✓ |
| GATT / service enumeration | ✓ | — | ✓ | — |
| BLE device tracking by RSSI | ✓ | — | — | — |
| BLE stream to Wireshark | ✓ | — | — | — |
| BLE skimmer detection | ✓ | — | — | ✓ |
| FastPair / pairing exploit research | — | ✓ | ✓ | ✓ |
| BLE HID injection / DuckyScript over BLE | — | ✓ | — | — |
| BLE keyboard mode | — | ✓ | — | — |
| BLE GATT honeypot / cloned peripheral | — | — | ✓ | ✓ |
| BLE vulnerability profiling | — | ✓ | — | — |
| Flock / surveillance detector | ✓ | — | ✓ | ✓ |
| NFC | ||||
| PN532 NFC support | ✓ | ✓ | ✓ | — |
| ST25R3916 NFC support | ✓ | ✓ | — | — |
| Chameleon Ultra support | ✓ | ✓ | — | — |
| Chameleon Ultra BLE control | ✓ | ✓ | — | — |
| Flipper `.nfc` import/export | ✓ | — | — | — |
| Flipper NFC parser set | ✓ | — | — | — |
| MIFARE Classic default-key attack | ✓ | ✓ | ✓ | — |
| MIFARE Classic full embedded dictionary | ✓ | — | — | — |
| MIFARE Classic user dictionary file | ✓ | ✓ | — | — |
| MIFARE Classic session key reuse / sector sweep | ✓ | — | — | — |
| MIFARE Classic hardnested recovery | ✓ | — | — | — |
| PicoPass / iCLASS reading | ✓ | — | — | — |
| MIFARE DESFire application / file tree reads | ✓ | — | — | — |
| EMV / payment card reader | ✓ | ✓ | — | — |
| BadUSB / HID | ||||
| BadUSB / DuckyScript | ✓ | ✓ | — | — |
| USB keyboard host mode | ✓ | — | — | — |
| USB HID keyboard output mode | ✓ | ✓ | — | — |
| Remote keyboard over dual-device link | ✓ | — | — | — |
| BadUSB VID/PID identity options | ✓ | ✓ | — | — |
| BadUSB mouse jiggler / trackpad | ✓ | — | — | — |
| Infrared | ||||
| IR learn / capture / replay | ✓ | ✓ | — | — |
| Flipper `.ir` file support | ✓ | ✓ | — | — |
| Universal IR library transmit | ✓ | ✓ | — | — |
| SubGHz / RF | ||||
| CC1101 SubGHz scan / replay | ✓ | ✓ | ✓ | — |
| CC1101 waterfall spectrum analyzer | ✓ | ✓ | ✓ | — |
| Flipper `.sub` compatibility | ✓ | ✓ | — | ✓ |
| SubGHz protocol decoders | ✓ | ✓ | ✓ | — |
| NRF24 spectrum analyzer | ✓ | ✓ | ✓ | ✓ |
| NRF24 MouseJack | — | — | ✓ | — |
| Passive jamming detection | ✓ | — | ✓ | — |
| Active RF jamming shipped | Not shipped | ✓ | ✓ | ✓ |
| Zigbee / 802.15.4 packet capture | ✓ | — | — | — |
| Ethernet | ||||
| Ethernet W5500 support | ✓ | ✓ | — | — |
| Ethernet ARP poisoning / MITM tools | ✓ | ✓ | — | — |
| Ethernet fingerprint / port / ping tools | ✓ | — | — | — |
| Ethernet DNS / NTP / HTTP / trace tools | ✓ | — | — | — |
| TLS SNI / HTTP / FTP credential capture over Ethernet | ✓ | — | — | — |
| Miscellaneous | ||||
| Camera streaming / motion detection | ✓ | — | — | — |
| Motion alerts with webhook support | ✓ | — | — | — |
| Network printer / PJL output | ✓ | — | — | — |
| DIAL / Chromecast testing | ✓ | — | — | — |
| On-device setup wizard | ✓ | — | — | — |
| Wired screen mirroring | ✓ | — | — | ✓ |
| Web screen mirroring | ✓ | ✓ | — | — |
| SD config backup / restore | ✓ | — | — | — |
| Battery monitoring / fuel gauge support | ✓ | ✓ | ✓ | — |
| Sensor / RTC hardware support | ✓ | ✓ | — | — |
| M5 Cardputer keyboard support | ✓ | ✓ | — | — |
| Android companion app | ✓ | — | — | — |
| LoRa support | — | ✓ | — | — |
| FM radio support | — | ✓ | — | — |
| Platform & Apps | ||||
| PIN / password lock | ✓ | — | ✓ | ✓ |
| On-device OTA / SD firmware update | ✓ | — | ✓ | — |
| Firmware verification / rollback protection | ✓ | — | — | — |
| GhostLink peer firmware update | ✓ | — | — | — |
| SD file manager / browser | ✓ | ✓ | ✓ | — |
| Native SD app/plugin system | ✓ | — | — | — |
| Native app SDK / build tooling | ✓ | — | — | — |
| Sandboxed on-device scripting runtime | Lua 5.4 | JavaScript | — | — |
| Cloud app / script / asset store | ✓ | — | — | — |
| Apps gallery / launcher | ✓ | — | — | — |
| Ghostchi / virtual pet | ✓ | ✓ | — | — |
| Audio player | ✓ | ✓ | — | — |
| Microphone spectrum / visualizer | ✓ | ✓ | — | — |
| RGB LED visualizer modes | ✓ | ✓ | — | — |
| Clock / RTC screen | ✓ | ✓ | — | — |
| Compass screen | ✓ | — | — | — |
| Accelerometer screen | ✓ | — | — | — |
| ENV-III temperature / humidity / pressure | ✓ | — | — | — |
| Accessibility modes / reduced motion | ✓ | — | ✓ | — |
| Custom theme / UI palette system | ✓ | ✓ | ✓ | — |
| Custom SD asset packs | ✓ | — | — | — |
GhostESP does not ship active jamming features. Distribution, promotion, sale and use of jamming devices or firmware is illegal in many jurisdictions.