Flipper Zero Evil Portal 😼

An evil captive portal Wi-Fi access point using the Flipper Zero and Wi-Fi dev board

About

This repo is a fork from the original work to add Electronic Cats Marauder support

This project will turn your Electronic Cats Marauder/Marauder Spoof Add-On into an open access point. When users try to connect to this access point they will be served a fake login screen. User credentials are sent to the Flipper and logged on the SD card.

Portals

Please check out the community portals folder for more portals.

Users, remember to rename the new portal as index.html when you drag it on the flipper SD card.

Disclaimer

Use this for educational purposes only. We are not responsible for any damage caused.

Getting Started

Download from the releases section and extract the evil_portal_sd_folder.zip folder. This .zip file contains a evil_portal folder.

Put the evil_portal folder into the apps_data folder on your SD card. This is an example of your Flipper SD card if done correctly.

apps_data/
  evil_portal/
    ap.config.txt
    index.html
    logs/
      <empty>

You should be able to see the [ESP32] Evil Portal app on your flipper zero now.

Installing/flashing the ESP32-S3 module on Marauder

Important

Keeping the ESP32-S3 updated to the latest Portal firmware version ensures the correct functionality.

As in other applications, the ESP32-S3 module is not the main MCU when using it with a flipper. This means that the firmware updates should be done using the USB-C port on the Add-On and not through the Flipper's USB.

Follow the next steps to flash the firmware:

1. Go to the ESPWEBTOOL.

2. Attach the Marauder/ Marauder Spoof Add-On to the Flipper.

3. Plug the USB cable into the USB-C port on the Add-On, enter the ESP32-S3 module in bootloader mode.

4. Click connect on ESPWEBTOOL. A pop-up menu will appear, select the correct board and port.

5. Use the following table to select the appropriate files and place them at the corresponding addresses.

Click on the register numbers to download!

bin	Register
Bootloader	0x0
Partitions	0x8000
Boot App	0xE000
Firmware	0x10000

6. Click on PROGRAM. A confirmation pop-up window will appear, click on CONTINUE.

7. The update will start immediately. Do not disconnect the USB cable or detach the Add-On from the flipper while updating.

8. Once the update has been finalized, press the reset button.

Now you can unplug the USB cable and you are ready!

Usage

Plug in the Marauder Add-On board to the flipper.

Open the app on the Flipper and press Start portal on the main menu. After a few seconds you should start to see logs coming in from your Wi-Fi dev board and the AP will start and the LED will turn green.

The AP will take the name that is in the ap.config.txt file located on your Flipper in the apps_data/evil_portal/ folder.

When you connect to the AP a web page will open after a few seconds. This web page contains the HTML located in the index.html file located on your Flipper in the apps_data/evil_portal/ folder.

You can stop the portal by pressing Stop portal on the main menu. The LED should turn blue.

You can manually save logs using the Save logs command. Logs will be stored in the logs folder that is in your apps_data/evil_portal/ folder.

Logs will automatically be saved when exiting the app or when the current log reaches 4000 characters.

Troubleshooting

• If you run into any issues make sure that you have the required files set up on the Flipper apps_data folder on the Flipper SD card.

• If the AP won't start or you have other issues try pressing reset on the Wi-Fi dev board, waiting a few seconds, and pressing Start portal on the main menu.

• It is important to give the dev board some time to load the html files from the Flipper.

• If you have the Marauder firmware on your dev board you might need to enable Erase All Flash Before Sketch Upload before flashing or follow the Erasing firmware instructions below. If you are using the web flasher there is an erase function on the website.

• If you see garbage characters in the AP name you will need to press the reset button on the board.

• Some users are reporting that the captive portal login does not open on some Android phones.

Erasing firmware

Assuming you have the Flipper Zero Wi-Fi Wrover Development Module (ESP32-S2):

1. Install Python.
2. Open a command terminal as an administrator:
   • On Windows press ⊞Win+R, type "cmd", and press CTRL+SHIFT+ENTER.
3. In the terminal type the following to install esptool via Python package manager:

   pip install esptool
   

4. Install setuptools dependencies:

   pip install setuptools
   

5. Enter the following command into your terminal, do not run it yet:

   python -m esptool --chip esp32s2 erase_flash
   

6. On your ESP32-S2 Wi-Fi module, hold the BOOT button.
7. Connect your ESP32-S2 to your computer, keep holding the BOOT button.
8. In your terminal press enter to run the command from step 5.
9. When successful you will get the message Chip erase completed successfully in ___s (time in seconds suffixed with "s").
10. Unplug/reset your board.

License

Distributed under the MIT License. See LICENSE.txt for more information.

Acknowledgments

I was only (the creator) able to create this using the following apps as examples

• flipperzero-wifi-marauder
• UART_Terminal
• flipper-zero-fap-boilerplate
• Create Captive Portal Using ESP32

Contact me (the creator)

You can message me on my reddit account bigbrodude6119