Skip to content

FoxFW-v2.0.10

Choose a tag to compare

View all tags
@FoxFW FoxFW released this 29 Sep 22:49
· 5 commits to master since this release
v2.0.10
fa25d81

FoxFW2.0 v2.0.10

HOTFIX Updated 30 September 2026. v2.0.10 has been refreshed in place with
follow-up fixes (see "HotFixes after update 30th September 2026" below).
If you have already installed this update, please install it again.
In Fox Update Downloader it will say "Up to date" - choose
Download Anyway (and Re-Download if it offers a copy
you already downloaded) - or use the web flasher.

This is one of the biggest FoxFW releases yet. It adds a brand-new way to use
your Flipper as a USB drive for speakers and TVs, a proper USB-mode switch, a
deep round of memory work that claws back RAM headroom after qFlipper sessions,
a more capable Sub-GHz bruteforce/randomize app, several new Sub-GHz protocols
and conveniences, external-CC1101 support for the Garage app, and a broad
consistency-and-stability pass across the whole Fox app suite.

HotFixes after update 30th September 2026

  • External CC1101 now stays on External in Garage/Gate/Other. In the first
    v2.0.10 build the module was detected (Read showed Ext during the
    countdown), but Garage dropped back to Int as soon as Read started, and
    Receiver Config kept snapping back to Internal. The check that asks "is the
    module still there?" was giving the wrong answer for a module that was
    already in use. That check is fixed, so a connected module stays selected
    through Read and in Receiver Config, and the Int/Ext label now always
    shows the radio that is actually receiving.
  • ProtoPirate (Fox Edition) updated to 3.7 (from 3.2). See the ProtoPirate
    section below.
  • ProtoPirate and Sub-GHz now open each other's saved files. A .sub
    saved in ProtoPirate opens directly in the Sub-GHz app, and a .sub saved in
    Sub-GHz opens in ProtoPirate for the protocols both apps share.

Highlights

  • Two new USB drive apps — Fox MP3 USB and Fox Media USB. Turn a folder on
    your SD card into a read-only USB drive named FOX that plugs straight
    into a Bluetooth speaker, car head unit, or TV — and it now builds instantly,
    no matter how big your library is.
  • USB Mode in Settings. Switch between qFlipper Mode and Mass Storage Mode
    from Settings → Security & Privacy, without the CLI.
  • Big RAM-headroom win. A ground-up fix for heap fragmentation means the
    largest free memory block recovers after you connect and disconnect qFlipper,
    instead of slowly shrinking over a session.
  • SubRATT replaces the old Sub-GHz Bruteforcer — one more capable app, with
    9 new protocols and a Randomize mode.
  • New Sub-GHz protocols and features — General Motors and Mitsubishi V0-a, a
    reworked Renault V1 with a SEED bruteforcer, Fiat V1 button remap,
    duplicate-save protection, and Auto-Save.
  • External CC1101 now works for Garage/Gate/Other (fixed properly in the
    30 September update).
  • ProtoPirate 3.7, with saved files that open in both ProtoPirate and
    Sub-GHz.
  • A lighter, cleaner system — the Dolphin XP/leveling system and the old
    desktop animations are gone, freeing flash and simplifying the idle screen.

New: Fox MP3 USB & Fox Media USB

Put your files in a folder, launch the app, and the Flipper appears to whatever
you plug it into as an ordinary USB thumb drive called FOX.

  • Fox MP3 USB serves everything in /MP3/ at the root of the drive.
  • Fox Media USB serves /MEDIA/ and its MUSIC / VIDEO / PICTURE
    subfolders (created for you automatically the first time).
  • Drop your files into the folder before launching the app. The drive is
    built around the files already on your card — nothing is copied — so it
    appears almost instantly whether you have five songs or five hundred.
    (Earlier builds copied every file into a drive image, which took minutes for a
    large folder; that copy step is gone.)
  • A Disconnect button ejects the drive and hands USB back to qFlipper when
    you're done.
  • The drive is read-only, so a speaker or TV can't write files back to it
    or mess up your card.
  • Long filenames are handled safely.
  • These are standalone apps that keep everything they need inside themselves —
    they add nothing to the firmware's internal storage.

USB Mode (Settings → Security & Privacy)

A new USB Mode screen lets you switch between:

  • qFlipper Mode — normal (the Flipper boots into this every time).
  • Mass Storage Mode — exposes your SD card to a computer over USB.

Mass Storage Mode cleanly takes over from an active qFlipper session, shows a
Disconnect button, and displays a brief LOADING hint while your
computer opens the drive. Your SD card now shows up labeled FOX.

Memory & stability

If you've ever seen free memory slowly shrink over a long session — especially
after connecting and disconnecting qFlipper — this release targets exactly
that. Several small, long-lived allocations that used to get stranded in the
middle of the heap are now set up once at boot, so the largest free block
recovers to its full size after a qFlipper session instead of stranding
lower.

It also includes real fixes for an occasional "Out of memory / Reboot" seen
after hopping between several radio/NFC/RFID apps in one session: a
heap-corruption risk in Sub-GHz's signal history, a leak in Sub-GHz Garage's
auto-decode recovery path, a leak in NFC's Mifare Classic dictionary attack,
and a double-free in the new SubRATT's attack setup. RFID itself was audited
closely and came back clean.

Worth knowing (not a bug): opening Sub-GHz or SubRATT always uses a fairly
large chunk of RAM up front, because every protocol decoder has to be ready at
once so the app can auto-identify an unknown signal. It's fully released the
moment you close the app.

There's also a new heap_map CLI command and a snapshot button in the
Fox RAM Monitor app for anyone who wants to watch memory directly.

SubRATT (formerly Sub-GHz Bruteforcer)

The old SubBrute app is replaced by SubRATT, which merges in the upstream
project's full protocol set and adds 9 more (Honeywell, Hollarm, GangQi,
Magellan, Intertechno V3, Feron, Doitrand, Mastercode, X10), plus a
Randomize attack mode alongside Brute Force. Its menus were redesigned to
match the rest of the Fox suite.
It's reachable from both the Apps menu and the Sub-GHz Mode Picker (labeled
SubRATT there now), and exiting it from the Mode Picker returns you to the Mode
Picker instead of dropping to the Desktop.

Please bench-test before relying on it daily — it's a large, freshly-merged
app; not every protocol's transmit behavior has been confirmed against real receivers yet.

Sub-GHz

  • Update instead of duplicate save: re-receiving a signal you've already
    saved now offers Update so it overwrites the existing file instead of
    piling up new ones as a rolling code advances.
  • Auto-Save Every Signal: optional toggle (off by default), in both the
    main Sub-GHz app and Sub-GHz Garage. With it on, every signal Read decodes is
    written straight to your Sub-GHz folder as its own file, so you don't have to
    save each one by hand.
  • Renault V1 Seed BF: brute-forces the classic Hitag2 SEED from a saved
    Renault V1 signal, right from its menu.
  • Fiat V1 button remap (Unlock/Lock/Trunk/Close) for captures with a
    recovered key.
  • New protocol — General Motors (Chevrolet/GMC/Buick/Cadillac): decode and
    replay (the rolling cipher is proprietary, so this can't generate fresh
    codes).
  • New protocol — Mitsubishi V0-a: decode and replay.
  • Reworked protocol — Renault V1 (Hitag2): decode and replay across
    315 / 433 / 868 MHz; the Renault V1 Seed BF above works on it.
  • Opens ProtoPirate's saved files (30 September update): a .sub saved in
    ProtoPirate now opens directly in the Sub-GHz app, with no conversion step.
    Kia V5 captures saved with anywhere from 64 to 67 bits load as well.
  • Fixed the RSSI threshold silently resetting on every launch.
  • Several settings now save the moment you change them instead of only when you
    back out of the screen.

Sub-GHz Garage

  • External CC1101 now works when you open Garage/Gate/Other from the Apps
    menu — it checks for an attached module first, the same way the Mode Picker's
    Garage entry already did. If you'd rather skip that check, the plain version
    is still there as Garage/Gate/Other (Direct). There's also a new
    Radio Module (Internal/External) setting in Garage's own Receiver Config
    (now the first item) for a module you plug in after opening the app. It's
    guarded everywhere: it won't stick on External if nothing answers, and a
    module going quiet at any point falls back to Internal instead of crashing.
    Read and Read RAW show Int/Ext on screen.
    30 September update: a working module is no longer mistaken for a missing
    one, so it stays on External once Read starts.
  • Multiple protocol groups can be enabled at once — Read tries every
    enabled group.
  • Back during a read now stops the read and returns to Start with no
    countdown; a failed decode returns to Start without the countdown (the
    No Match popup with Save is kept).

ProtoPirate (Fox Edition) 3.7

Added in the 30 September update. ProtoPirate moves from upstream 3.2 to 3.7,
which brings:

  • A new Renault V1 protocol, with the newer Renault variants folded in.
  • A car models database.
  • Brute force from saved files.
  • A receiver sound option, date/time filenames, and a save-filename
    dialog     in Sub Decode.
  • Many crash and RAM fixes, including the receiver hopper crash.
  • Mitsubishi V0 and Porsche Touareg were removed upstream and are no longer in
    ProtoPirate.

Saved files now work across both apps:

  • ProtoPirate → Sub-GHz: .sub files saved in ProtoPirate open directly in
    the Sub-GHz app.
  • Sub-GHz → ProtoPirate: .sub files saved in Sub-GHz open in ProtoPirate
    for the protocols both apps have. The one exception is Porsche, which
    ProtoPirate 3.7 no longer decodes.
  • The protopirate_to_subghz converter is still included for .psf files.

Cross-opening has been checked end to end with Kia V5. The other shared
protocols use the same file layout in both apps, but haven't each been tested
on hardware yet — please report any saved file that won't open.

Other fixes and polish

  • MFKey: cancelling an in-progress attack no longer freezes the screen.
  • RF Jammer: fixed a launch flicker and removed its splash screen.
  • Apps menu & loading screens: the loading spinner no longer flashes on
    fast loads, most Fox apps no longer show a logo splash on launch, and if an
    app is slow to load you now get a Restart / Wait option instead of being
    stuck. Menu styling is more consistent across the suite.
  • CLI: new FOXCLI connect banner; neofetch is now info-only.
  • Lighter system: the Dolphin XP/leveling system and the old desktop
    animation engine have been removed (the idle screen uses your wallpaper),
    freeing flash and simplifying the desktop.
  • Help & website updated: the in-firmware help and the FOX_WEB site now
    cover the new USB Drive apps, the new Sub-GHz protocols, and Auto-Save, with
    the chapter numbering tidied up throughout.

Removed

  • FlipperHTTP apps are no longer bundled. The FlipperHTTP-ecosystem apps
    (FlipSocial, FlipWiFi, FlipWeather, FlipTrader, FlipDownloader, FlipLibrary,
    FlipMap, FlipTelegram, FlipWorld, FlipperHTTP-App, Free-Roam, WebCrawler)
    have been removed. FoxFW is focusing on its own Fox ESP32 firmware and apps
    going forward; if you use any of those, you can still install them yourself as full compatibility has been maintained.
  • Developer debug/test apps removed. The debug and test apps (UART echo,
    USB/keypad/display tests, speaker debug, and the rest) are gone. The one
    worth keeping — the RAM/heap monitor — stays, now called Fox RAM Monitor
    under Apps → Fox.

New bundled apps

Included as-is (community apps, not individually hardware-tested this round):

  • flipper-sub-dup — find and clean up duplicate .sub files on your card.
  • protopirate_to_subghz — convert ProtoPirate .psf captures to/from .sub.
  • Proxmark5_FlipperZero_FAP — Proxmark3 companion/reader.
  • clemsa-mv12-remote — Clemsa MV12 gate/garage remote.
  • flipper-zero-carjacker
  • flipperzero-mfp-reader — Mifare Plus reader.
  • flipperzero-sentry-safe-plugin

ProtoPirate (Fox Edition) now follows upstream 3.7 with a small set of Fox
changes, so its saved files work with the Fox Sub-GHz apps and vice versa.

Assets 16
Loading