Skip to content

Releases: ElectronicCats/badge-recon-2026

Release list

recon2026-v1

Choose a tag to compare

@wero1414 wero1414 released this 03 Jun 01:48

RECON Badge 2026 — Firmware recon2026-v1

A conference badge built around two MCUs: a CH32V203 (RISC‑V) running the 915 MHz LoRa radio, RGB LEDs, buttons, and a USB console; and an RP2040 daughterboard adding an OLED display, NFC (PN7150), and magspoof. The badge is fully functional on its own and gains the display/NFC/magspoof UI when the daughterboard is attached — it auto‑detects which mode it's in.

Features

LoRa social layer (badge‑to‑badge, 915 MHz)

  • Radar — discover nearby badges by unique name (Bxxxxxxxx) and signal strength. Uses an active probe/reply scan that bounds its own channel use, so it works in a crowded room instead of flooding the air.
  • Chat — broadcast short messages and see incoming ones.
  • Flags — collect and share CTF flags over the air.

NFC (daughterboard)

  • Detect Tags, Detect Readers, Read/Write Mifare Classic blocks.
  • Flag hunt — tap a tag to unlock a flag and broadcast it to every nearby badge — one finder shares with their whole group.

More

  • Magspoof — emulate a magnetic stripe; load tracks over USB serial.
  • Simon Says — solo memory game (hold button 4).
  • RGB LEDs — per‑button colors and animations, controllable from the menu or over the air.
  • USB console — a serial CLI on the CH32 for testing and control.

Hidden challenge (reversing)


Using it

Buttons (standalone): 1–4 flash a color · hold 4 = Simon solo · hold 3 = toggle LED lock.

Menu (with daughterboard): Apps → NFC / Magspoof / LoRa / Badge LEDs, plus About. (There's also a Konami‑code easter egg.)

USB console (115200 8N1, enumerates as RECON2026):
ping | mode | leds R G B | lora tx | chat | stats
beacon | scan | lock | simon solo | simon stop | reset
fakebadge | fakechat | fakeflag | fakeled (single-badge UI test injectors)


Flashing (per badge — two images)

  • CH32: cd firmware/CH32V203/recon2026 && make flash (minichlink; BOOT0‑high + power‑cycle for bootloader recovery if needed)
  • RP2040: hold BOOTSEL, drag firmware/RP2040/build/firmware.ino.uf2

Credits

Electronic Cats — building on the 2025 badge firmware (Francisco Torres).
RISC‑V firmware via ch32fun;
RP2040 via the Earle Philhower Arduino core.