Advanced Common Hotels 🏨

Added a collection of 26 branded hotel captive portals built for the ESP32 Marauder (Tested on Marauder v8 & Mini v3 - v1.18.0) for use in authorized red team wireless assessments and security awareness demonstrations.

Each portal replicates the visual identity of a real hotel brand — matching brand colors, loyalty program login flows, and common hotel property WiFi SSIDs — to demonstrate the effectiveness of evil-twin credential harvesting against recognizable, trusted hospitality brands.

🛠️ Technical Highlights

📄 Single self-contained HTML files — no external dependencies, no JS libraries
✅ Functional cross-browser password show/hide toggle — works on Chrome and Safari/iOS
📏 Every file under the 20 KB Marauder (or similar) firmware size limit
🧱 Correct DOM structure — fixed inputs as direct body children
🏷️ Labeled credential capture via ?src= query string — email · password · recovery-attempt · Google SSO · Apple SSO · guest-enrollment

🏨 Portals Included

Hilton · Marriott · Hyatt · IHG · Wyndham · Best Western · Hampton Inn · Courtyard by Marriott · La Quinta · Comfort Inn · Days Inn · Super 8 · Radisson · Four Seasons · Westin · Sheraton · Residence Inn · Embassy Suites · Ritzcarlton

Advanced Retail Store Captive Portals 🛍️

Added a collection of 20 branded retail captive portals built for the ESP32 Marauder (Tested on Mini V3, Eternal firmware v1.18.0) for use in authorized red team wireless assessments and security awareness demonstrations.

Each portal replicates the visual identity of a real retailer — matching brand colors, loyalty program login flows, and common in-store WiFi SSIDs — to demonstrate the effectiveness of evil-twin credential harvesting against recognizable, trusted brands.

🛠️ Technical Highlights
📄 Single self-contained HTML files — no external dependencies, no JS libraries
✅ Functional pure-CSS password show/hide toggle — zero render lag on Marauder hardware
📏 Every file under the 20 KB Marauder firmware size limit
🧱 Correct DOM structure — fixed inputs as direct body children
🏷️ Labeled credential capture via ?src= query string — email · password · recovery-attempt · Google SSO · Apple SSO · guest-enrollment

🏪 Portals Included

Walmart · Target · Walgreens · CVS · Best Buy · Home Depot · Lowe’s · TJ Maxx · Costco · Macy’s · Nordstrom · Bath & Body Works · Old Navy · IKEA · GameStop · PetSmart · Sam’s Club · Kroger · AutoZone · Dick’s Sporting Goods

Advanced ISP's 🛜

Added a collection of 16 branded ISP captive portals built for the ESP32 Marauder (Tested on Mini V3 / V8, firmware v1.18.0) for use in authorized red team wireless assessments and security awareness demonstrations.

Each portal replicates the visual identity of a real ISP — matching brand colors, account login terminology, and common home/public WiFi SSIDs — to demonstrate the effectiveness of evil-twin credential harvesting against recognizable, trusted providers.

🛠️ Technical Highlights
📄 Single self-contained HTML files — no external dependencies
✅ Functional JS password show/hide toggle
📏 Every file under the 20KB Marauder firmware size limit
🧱 Correct DOM structure — fixed inputs as direct body children
🏷️ Labeled credential capture via ?src= query string — email · password · recovery-attempt · Google SSO · Apple SSO

📡 Providers Included
Starlink · Xfinity · AT&T · Verizon · T-Mobile Home · Spectrum · Cox · CenturyLink · Frontier · Optimum · Mediacom · Windstream · HughesNet · Viasat · Google Fiber

Advanced Common Restaurant WiFi Portals 🍔📡

Added a collection of 18 branded restaurant captive portals built for the ESP32 Marauder (Tested on Mini V3 / V8, firmware v1.17.1) for use in authorized red team wireless assessments and security awareness demonstrations.

Each portal replicates the visual identity of a real restaurant chain — matching brand colors, loyalty program names, featured menu items, and common guest WiFi SSIDs — to demonstrate the effectiveness of evil-twin credential harvesting against recognizable, trusted brands.

🛠️ Technical Highlights

📄 Single self-contained HTML files — no external dependencies
🚫 Zero JavaScript — all interactivity handled via CSS sibling selectors
📏 Every file under the 20KB Marauder firmware size limit
🧱 Correct DOM structure — 13 fixed inputs as direct body children
🏷️ Labeled credential capture via ?src= query string — M · G · A · guest · forgot

🍟 Brands Included

McDonald's · Chick-fil-A · Panera Bread · Burger King · Subway · Taco Bell · Wendy's · Chipotle · Domino's · Pizza Hut · KFC · Panda Express · Five Guys · Shake Shack · Whataburger · Sonic · Popeyes · Jersey Mike's

☕️ Coffee Shop Portals — Major Update ☕️

☕️ Added 34 brand-accurate coffee shop captive portals with a completely overhauled architecture. Every portal matches the real company's colors, fonts, loyalty program, and menu items. ☕️

Includes:
Starbucks (advanced showcase portal)
Dunkin'
Panera Bread
Peet's Coffee
Tim Hortons
Dutch Bros
Caribou Coffee
The Coffee Bean & Tea Leaf
BIGGBY Coffee
Scooter's Coffee
Black Rock Coffee Bar
Philz Coffee
Intelligentsia Coffee
Verve Coffee Roasters
Bluestone Lane
Joe Coffee Company
Colectivo Coffee
The Human Bean
7 Brew Coffee
Einstein Bros. Bagels
Corner Bakery Cafe
Paris Baguette
Second Cup
Caffè Nero
Ziggi's Coffee
Gloria Jean's Coffees
Bravery Chef Hall Café
The Daily Grind
Coffee Rush
The Grind Haus
Crumbl Cookies
La Madeleine
Perky's Coffee
Local (generic neighborhood shop)

All portals verified working on Marauder Mini V3 and V8 running v1.15.1.
Format: action="/get", name="user_name", name="password", no method= attribute, zero JavaScript, all under 20KB.

What's new vs previous bank/airline portals:
6 interactive sheets per portal: main login, Google, Apple, join/signup, forgot password, order lock gate
CSS-only password show/hide toggle (-webkit-text-security)
CSS-only FAQ accordion (max-height transition)
Home / Rewards / Help tab navigation
Floating label inputs
Pulsing connected dot animation

🚀 New Release — Advanced Captive Portals

**NOTE THAT NOT ALL ADVANCED CAPTIVE PORTALS WILL HAVE A NEW RELEASE AND WILL BE ADDED CONSISTENTLY THROUGHOUT THESE UPCOMING DAYS **

This release introduces a major upgrade to the captive portal system for Marauder firmware, bringing more advanced, fully interactive portal experiences to the platform.

✨ What's New
Advanced Captive Portals:
New captive portal designs can now be deployed directly through Marauder firmware.

Current advanced captive portals available:

• Advanced Non-specific captive portals
• Advanced Banks
• Advanced Airlines

Multiple Authentication Experiences:
Portals can now offer different authentication-style experiences, including a standard captive portal flow and simulated third-party login interfaces for authorized security testing and demonstrations.

Local SD Card Storage:
Portal interaction data is stored directly on the SD card as normal.

Functional Navigation Tabs:
New tabs have been added across the top of the interface. These aren't just visual elements — they are fully clickable and functional, allowing users to navigate between the different sections of the portal.

🛠️ Improvements:
This release lays the groundwork for more customizable and feature-rich captive portals while keeping the experience directly accessible from Marauder-compatible hardware.

⚠️ Security / Responsible Use:
These features are intended for authorized security research, testing, demonstrations, and controlled lab environments. Do not use captive portals to collect credentials or other sensitive information from people without their explicit authorization.

More portal designs and functionality are planned for future releases.

☕️ Coffee Shop Portals — New Addition ☕️

Added 15 brand-specific coffee shop captive portals to match the real company's colors, fonts, and aesthetic. ☕️

Includes:

• Starbucks
• Dunkin'
• Dutch Bros
• Panera Bread
• Peet's Coffee
• Caribou Coffee
• The Coffee Bean & Tea Leaf
• BIGGBY Coffee
• Tim Hortons
• Einstein Bros. Bagels
• Scooter's Coffee
• 7 Brew Coffee
• Black Rock Coffee Bar
• The Human Bean
• Copper Common

All portals verified working with Marauder v1.15.1.
Same format: action="/get", name="email", name="password", no method attribute.