Dual-Band RF Expansion Module — Sub-GHz (CC1101) + 2.4GHz (nRF24L01)
➡ Buy Now — $28.99 USD | Support & Setup Guide | YouTube @PINGEQUA
The RF PACK S3 is a plug-and-play dual-band RF expansion board engineered specifically for the M5Stack StickS3. It combines a CC1101 (Sub-GHz / 433MHz) and an nRF24L01 (2.4GHz) into a single compact form factor, with hardware-level mutual-exclusion logic for seamless band switching — no physical toggles required.
Designed for compatibility with Bruce firmware, the RF PACK S3 enables a wide range of RF research and educational workflows including Sub-GHz signal analysis, 2.4GHz device interaction, and spectrum scanning — all from the palm of your hand.
Built by PINGEQUA — Precision Gear for Hackers.
| Feature | Description |
|---|---|
| Dual-Band RF | CC1101 (Sub-GHz / 433MHz) + nRF24L01 (2.4GHz) on one board |
| Hardware Auto-Switching | Mutual-exclusion circuitry — no manual toggling between chipsets |
| Bruce Firmware Ready | Optimized for Bruce v1.14+; CC1101 & NRF24 both natively supported |
| Stable Power Rail | ME6211 500mA LDO + 100µF Tantalum cap for clean RF transmissions |
| Plug-and-Play | Attaches directly to M5Stack StickS3 — no soldering required |
| Compact Form Factor | Matches the StickS3 footprint precisely |
| Parameter | CC1101 | nRF24L01 |
|---|---|---|
| Frequency | Sub-GHz (315 / 433 / 868 / 915 MHz) | 2.400 – 2.525 GHz |
| Protocol | FSK / OOK / ASK | Enhanced ShockBurst |
| Use Cases | Signal capture, replay, Sub-GHz analysis | Mousejacking, 2.4GHz sniffing, spectrum |
| Configuration | Menu → RF → CONFIG → RF MODULE → CC1101 | No config required — activate and go |
| Component | Spec |
|---|---|
| LDO Regulator | ME6211, 500mA |
| Filtering | 100µF Tantalum capacitor |
| Switching Logic | Hardware-level mutual exclusion |
| Host Device | M5Stack StickS3 |
| Required Firmware | Bruce v1.14 or later |
| Device | Status |
|---|---|
| M5Stack StickS3 | ✅ Fully supported |
| Bruce Firmware v1.14+ | ✅ Required (do NOT use v1.12 or v1.13) |
| Bruce Firmware v1.12 / v1.13 | ❌ SPI + power patches missing — CC1101 NOT FOUND error |
| Marauder Firmware | ✅ Compatible |
Flash the latest Bruce firmware (v1.14+) to your M5Stack StickS3 before attaching the RF board.
⚠️ Do NOT use Bruce v1.12 or v1.13. Only v1.14+ includes the required SPI and power patches. Without them you will see aCC1101 NOT FOUNDerror.
Flash at: bruce.computer/flasher
Plug the RF PACK S3 directly into the expansion header of your M5Stack StickS3. No soldering required.
CC1101 (433MHz / Sub-GHz):
Menu → RF → CONFIG → RF MODULE → CC1101 (legacy)
nRF24L01 (2.4GHz):
No configuration needed — activate the nRF24 module and it's operational immediately.
| Resource | Link |
|---|---|
| Setup & Troubleshooting Guide | PINGEQUA Support Page |
| Setup Guide (Wiki) | Setup Guide |
| Firmware Guide (Wiki) | Firmware Guide |
| Troubleshooting (Wiki) | Troubleshooting |
| FAQ (Wiki) | FAQ |
| Bruce Firmware Flasher | bruce.computer/flasher |
| Bruce Wiki | github.com/pr3y/Bruce/wiki |
| PINGEQUA Wiki | pingequa.com/pages/wiki |
PINGEQUA builds precision RF hardware for security researchers, hackers, and makers.
| Product | Description |
|---|---|
| Hydra RF 424 Cap | CC1101 + NRF24 for M5Stack Cardputer |
| SWITCHBLADE RF 3-in-1 | NRF24 (PA/LNA) + CC1101 for Flipper Zero |
| NRF24 & CC1101 2-in-1 | Dual-band module for Flipper Zero |
| BW16 Devboard | Dual-band WiFi (2.4GHz + 5GHz) for Flipper Zero |
This product is intended for educational and authorized research purposes only. Users bear full legal responsibility for their actions. Always obtain explicit permission from network or device owners before conducting any testing. PINGEQUA does not condone unauthorized use.
Made with precision by PINGEQUA · @PINGEQUA on YouTube





