Skip to content

HaleHound-CYD v3.2.0 — VALHALLA Protocol, IoT Recon, RFID/NFC, Jam Detect

Choose a tag to compare

View all tags
@JesseCHale JesseCHale released this 06 Mar 00:14
· 25 commits to main since this release
v3.2.0
3b8633f

HaleHound-CYD v3.2.0 — VALHALLA Protocol + 4 New Modules

The biggest single release in HaleHound history. Four entirely new attack modules, a full defensive panic system, device PIN lock, and over 9,000 new lines of code.

VALHALLA Protocol — Scorched Earth Panic System

One-tap emergency response. Tap the VALHALLA banner on the home screen and hold to confirm:

  • Wipes SD card — recursive delete, everything gone
  • Locks all offensive tools — 17 offensive functions gated
  • Enters Blue Team mode — device switches to defensive-only operation
  • Legal disclaimer — EEPROM-persisted liability screen with scrollable text. Must accept before any offensive function will run. Cites 47 U.S.C. § 333 and 18 U.S.C. § 1030.
  • Blue Team mode persists across reboots until you actively re-accept the disclaimer

New Modules

  • IoT Recon — Automated LAN attack suite. WiFi connect via on-screen keyboard, full network scan, service fingerprinting (HTTP, Telnet, SSH, MQTT, RTSP, FTP), credential brute forcing with 40+ default password combos, harvested credential storage. Core 0 scan task for responsive UI during deep scans. (Shoutout: @CircuitZ for reminding me to add IoT)

  • PN532 RFID/NFC — Five attack modes: Card Scanner (UID + type detection), Card Reader (full sector dump with default keys), Card Clone (copy UID to magic Gen1a cards), Key Brute Force (dictionary + sequential attack on all sectors), Card Emulate (replay captured UID). Software SPI to avoid bus conflicts. (Shoutout: @duggie162-cpu for the RFID recommendation)

  • Jam Detect — Defensive RF jamming detection across all 3 radios. (Shoutout: @valleytechsolutions for bringing up the idea)

    • WiFi Guardian — 2.4 GHz deauth/disassoc frame counter with per-channel heatmap
    • SubGHz Sentinel — CC1101 wideband energy monitoring across 315/433/868/915 MHz
    • 2.4 GHz Watchdog — NRF24 spectrum-analyzer-style continuous sweep with threshold alerts
    • Full Spectrum — All radios simultaneously, split-screen dashboard

  • Captive Portal Upgrade — PSK capture templates + Core 0 deauth task for continuous client disruption while serving portal pages. (Shoutout: @muffduncan for bringing it to my attention)

Renamed

  • Stalkerware Detect has been renamed to Lunatic Fringe

Security

  • PIN Lock — 4-digit device lock with configurable auto-lock timeout (30s to 10min or never). Skull animation on lock screen. Persisted in EEPROM.

Fixes & Improvements

  • NRF24 SPI clock reduced to 4 MHz for reliability on noisy power sources
  • IoT Recon timeout tuning + harvested credential persistence
  • Jam Detect flicker elimination + WiFi Guardian full layout redesign
  • PN532 software SPI fix for CYD GPIO conflicts
  • IoT max devices reduced 64→48 to fix 3.5" CYD DRAM overflow

Community

Credit to the people who made this release happen:

Downloads

Easiest method: Flash the FULL.bin at offset 0x0

File Board Size
HaleHound-CYD-FULL.bin 2.8" CYD (ESP32-2432S028) 2.3 MB
HaleHound-CYD-35-FULL.bin 3.5" CYD (ESP32-3248S035) 2.4 MB
HaleHound-CYD-HAT-FULL.bin 2.8" CYD + NM-RF-Hat 2.3 MB

Four-file method (if single-file gives black screen):

File Flash Address
bootloader.bin 0x1000
partitions.bin 0x8000
boot_app0.bin 0xe000
HaleHound-CYD.bin / HaleHound-CYD-35.bin / HaleHound-CYD-HAT.bin 0x10000

Flash with ESP Web Flasher (Chrome/Edge/Opera) or esptool.

See flash_package/FLASH_INSTRUCTIONS.txt for step-by-step guide.

Contributors

Hamspiced, valleytechsolutions, and 4 other contributors
Assets 2
Loading