Skip to content

v1.3.0 — Multi-firmware flasher, Suicide-build support, standalone builds

Choose a tag to compare

@LxveAce LxveAce released this 09 Jun 12:26

Headless Marauder v1.3.0

Control and flash a headless ESP32 Marauder over USB serial. No browser, no Web Serial, no cloud.

For authorized testing only. See DISCLAIMER.md.


Downloads

Pre-built binaries, no Python needed — just download and run:

  • Windows: headless-marauder-v1.3.0-windows-x64.exe
  • Linux x64: headless-marauder-v1.3.0-linux-x64
  • Linux ARM64: headless-marauder-v1.3.0-linux-arm64 (Raspberry Pi, ARM SBCs — needs 64-bit OS)

Binaries are built automatically by CI and will appear shortly after this release is published.

These bundle Python, PyQt5, and everything else inside. They include the Qt GUI only — for the TUI or browser UI, install from source.


What's new

Multi-firmware flasher — profile-based flashing that goes beyond ESP32Marauder. Built-in profiles for Evil Portal, Wi-Fi Nugget, and custom firmware, each with its own partition layout and support files. Select a firmware profile in the flasher window and it handles the rest.

Suicide-build flash path — dedicated flow for pre-provisioned Suicide-Marauder bundles. Validates the bundle manifest and enforces SHA256 integrity checks on every file before flashing. Missing or empty hashes on a present file are a hard fail in strict mode.

Standalone executables — PyInstaller-based binaries for Windows, Linux x64, and Linux ARM64. Download, run, done — no Python or git needed. Built automatically by GitHub Actions CI on each release.

Web UI flash panel — the browser UI now has full feature parity with the desktop GUIs: multi-firmware profile selector, Suicide-build panel, and hover tooltips.

Hover tooltips — all desktop UIs now show plain-language explanations when you hover over buttons and labels, powered by a shared glossary module (uihelp.py).

Security hardening:

  • Path-traversal guard on bundle extraction (rejects entries resolving outside the target directory)
  • SHA256 integrity verification for Suicide-Marauder bundles
  • Red-team round 2: corrected path-traversal check + stricter bundle schema validation

Install from source

# Linux
git clone https://github.com/LxveAce/headless-marauder-gui.git
cd headless-marauder-gui && ./install.sh

# Windows
git clone https://github.com/LxveAce/headless-marauder-gui.git
cd headless-marauder-gui && install.bat

Update with git pull or in-app Help > Check for Updates.

Needs Python 3.9+ and a USB serial connection to an ESP32 running Marauder firmware.

Full changelog | MIT License