v1.3.3

Fixed:

• ESP32-C5 brick fix (critical). The C5's 2nd-stage bootloader offset is 0x2000, not 0x0; the flasher
  had grouped C5 with the 0x0-bootloader chips, so a C5 full-flash wrote the bootloader to the wrong offset
  and bricked the board (ROM-recoverable). Replaced the inline logic with an esptool-faithful
  _bootloader_offset() SSOT helper + a regression test.

Changed:

• marauder_core.__version__ is now single-sourced from the installed distribution metadata (with a hardcoded fallback for source / frozen builds), so it can't drift from pyproject.toml again.
• README refreshed for accuracy; added a Status & Roadmap section, a Connect/contact section, and FORWARD-PLAN.md session-handoff notes.
• Vendored Suicide-Marauder bundle synced to canonical (BootGate no longer telegraphs the locked state; guardcfg partition sizing fix so the gate activates; password-parity hardening; hardware-validated on CYD).

Docs:

• Added canonical DISCLAIMER.md (authorized lawful use, as-is / no-warranty / no-liability, not legal advice) and linked it from the README.
• Scrubbed hardcoded local-session paths and personal-identity strings from public docs.

v1.3.2 — Vendored Suicide-Marauder synced to forensic-wipe release

Syncs the vendored Suicide-Marauder firmware + provisioner to the canonical forensic-wipe + red-team round 3 update. The Headless Marauder GUI flasher itself is unchanged from v1.3.1; this updates the bundled anti-forensic provisioning sources only. Suicide builds remain SAFE_MODE-first and hardware-unvalidated.

v1.3.1 — macOS support + CI improvements

What's New

• macOS arm64 build — native Apple Silicon binary now included in releases
• CI/CD workflow improvements

Downloads

Standalone executables — no Python install required:

• Windows x64 (.exe)
• macOS arm64 (Apple Silicon)
• Linux x64
• Linux arm64

v1.3.0 — Multi-firmware flasher, Suicide-build support, standalone builds

Headless Marauder v1.3.0

Control and flash a headless ESP32 Marauder over USB serial. No browser, no Web Serial, no cloud.

For authorized testing only. See DISCLAIMER.md.

---

Downloads

Pre-built binaries, no Python needed — just download and run:

• Windows: headless-marauder-v1.3.0-windows-x64.exe
• Linux x64: headless-marauder-v1.3.0-linux-x64
• Linux ARM64: headless-marauder-v1.3.0-linux-arm64 (Raspberry Pi, ARM SBCs — needs 64-bit OS)

Binaries are built automatically by CI and will appear shortly after this release is published.

These bundle Python, PyQt5, and everything else inside. They include the Qt GUI only — for the TUI or browser UI, install from source.

---

What's new

Multi-firmware flasher — profile-based flashing that goes beyond ESP32Marauder. Built-in profiles for Evil Portal, Wi-Fi Nugget, and custom firmware, each with its own partition layout and support files. Select a firmware profile in the flasher window and it handles the rest.

Suicide-build flash path — dedicated flow for pre-provisioned Suicide-Marauder bundles. Validates the bundle manifest and enforces SHA256 integrity checks on every file before flashing. Missing or empty hashes on a present file are a hard fail in strict mode.

Standalone executables — PyInstaller-based binaries for Windows, Linux x64, and Linux ARM64. Download, run, done — no Python or git needed. Built automatically by GitHub Actions CI on each release.

Web UI flash panel — the browser UI now has full feature parity with the desktop GUIs: multi-firmware profile selector, Suicide-build panel, and hover tooltips.

Hover tooltips — all desktop UIs now show plain-language explanations when you hover over buttons and labels, powered by a shared glossary module (uihelp.py).

Security hardening:

• Path-traversal guard on bundle extraction (rejects entries resolving outside the target directory)
• SHA256 integrity verification for Suicide-Marauder bundles
• Red-team round 2: corrected path-traversal check + stricter bundle schema validation

---

Install from source

# Linux
git clone https://github.com/LxveAce/headless-marauder-gui.git
cd headless-marauder-gui && ./install.sh

# Windows
git clone https://github.com/LxveAce/headless-marauder-gui.git
cd headless-marauder-gui && install.bat

Update with git pull or in-app Help > Check for Updates.

Needs Python 3.9+ and a USB serial connection to an ESP32 running Marauder firmware.

Full changelog | MIT License

v1.2.0 — Browser UI, standalone builds, bug fixes

Headless Marauder v1.2.0

Control and flash a headless ESP32 Marauder over USB serial. No browser, no Web Serial, no cloud.

For authorized testing only. See DISCLAIMER.md.

---

Downloads

Pre-built binaries, no Python needed — just download and run:

• Windows: headless-marauder-v1.2.0-windows-x64.exe
• Linux x64: headless-marauder-v1.2.0-linux-x64
• Linux ARM64: headless-marauder-v1.2.0-linux-arm64 (Raspberry Pi, ARM SBCs — needs 64-bit OS)

These bundle Python, PyQt5, and everything else inside. They include the Qt GUI only — for the TUI or browser UI, install from source.

---

What's new

Browser UI — a fourth front-end, served at localhost:5000 via Flask + WebSocket. Same dark theme and full feature set as the desktop GUIs: command sidebar with all 70+ commands, live serial console, auto-populating AP/Station tables, parameter forms, raw command input with arrow-key history, and keyboard shortcuts. Run headless-marauder-web or python web/app.py.

Standalone builds — PyInstaller-based executables for Windows, Linux x64, and Linux ARM64 so people can just download and run without dealing with Python or git. Built automatically via GitHub Actions on each release.

Bug fixes in the browser UI:

• Fixed a crash when detecting chip type (missing callback argument)
• Fixed an XSS issue where malicious SSIDs could inject HTML into the AP/Station tables
• Fixed autolist timer stacking up when toggled multiple times
• Fixed keyboard shortcuts (Ctrl+L, Ctrl+.) not working when the command input was focused

Project stuff: added SECURITY.md (vulnerability reporting), DISCLAIMER.md, CONTRIBUTING.md, and a changelog.

---

Install from source

# Linux
git clone https://github.com/LxveAce/headless-marauder-gui.git
cd headless-marauder-gui && ./install.sh

# Windows
git clone https://github.com/LxveAce/headless-marauder-gui.git
cd headless-marauder-gui && install.bat

Update with git pull or in-app Help > Check for Updates.

Needs Python 3.9+ and a USB serial connection to an ESP32 running Marauder firmware.

MIT License

v1.1.0 — Windows support + pip install

Headless Marauder v1.1.0

Control and flash a headless ESP32 Marauder over USB serial.

What's new

• Windows installer — install.bat sets up a venv, installs everything, adds commands to PATH and a Start Menu shortcut. Same workflow as Linux.
• pip install — pip install git+https://github.com/LxveAce/headless-marauder-gui.git[all] works cross-platform now.
• pyproject.toml — proper Python packaging with optional dep groups ([qt], [tui], [all]).
• Fleshed out the README with install/update/uninstall instructions for all platforms.

Install

# Linux
git clone https://github.com/LxveAce/headless-marauder-gui.git
cd headless-marauder-gui && ./install.sh

# Windows — needs Python 3.9+ and Git
git clone https://github.com/LxveAce/headless-marauder-gui.git
cd headless-marauder-gui && install.bat

Update: git pull or in-app Help > Check for Updates.

Windows users may need the CH340 driver if the ESP32 doesn't show up in Device Manager.

MIT License