4 layers85 × 55 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
29 parts2
2 layers52 × 22 mm
Device
jayis1/hacker-devices2Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
- Size
- 52 × 22 mm
- Copper layers
- 2
- Thickness
- 1.6 mm
- Parts
- 13
- Nets
- 24
- Pads
- 64
- Tracks, vias
- 13, 0
- Pours
- 1
- Routed
- Yes
- KiCad
- KiCad 7.0 (file 20231120)
- Created
- 12 Jun 2026
- Updated
- 6 Nov 2026
Overview
Device is an open-source printed circuit board by jayis1, from the jayis1/hacker-devices repository on GitHub. It is a 2-layer board of 52 × 22 mm with 13 parts on 24 nets, routed with 13 tracks and 0 vias.
It is built around the STM32G474CBT6, FUSB302BMPX and MF-MSMF200-2, with the SMBJ24A and SI4410BDY among its other parts. Its parts include 4 ICs, 2 capacitors, 2 resistors, 2 connectors and 1 diode. It belongs with the STM32 boards of this library.
Main components
5
STM32G474CBT6
LQFP-48_7x7-40℃~+85℃ 1.71V~3.6V 128KB 128KB 12bit 12bit 170MHz 32 Bit 38 ARM Cortex-M4F Built-in FLASH LQFP-48(7x7) Microcontrollers (MCU/MPU/SOC) ROHSSTMicroelectronicsMicrocontrollers (MCU/MPU/SOC)
FUSB302BMPX
WFQFN-14(2.5x2.5)-40℃~+125℃ 2.8V~5.5V 25uA Controller USB 3.1 WFQFN-14(2.5x2.5) USB Converters ROHSonsemiUSB Converters
MF-MSMF200-2
1812-40℃~+85℃ 20mΩ 2A 2W 3.2mm 40A 4A 5.4mm 80mΩ 8V 1812 Resettable Fuses ROHSBournsResettable Fuses
SMBJ24A
DO-214AA(SMB)-55℃~+150℃ 15.4A 24V 26.7V 38.9V 5uA 600W TVS Unidirectional DO-214AA(SMB) ESD and Surge Protection (TVS/ESD) ROHSGOODWORKESD And Surge Protection (TVS/ESD)
SI4410BDY
SO-8-55℃~+150℃ 1 N-channel 1.4W 20mΩ@4.5V 20nC@5V 30V 3V 7.5A N-Channel ±20V SO-8 MOSFETs ROHSVishay IntertechnologyMOSFETs
README
README.mdHacker Devices — Open Hardware for Security Research
A collection of fully open-source hardware designs for legitimate security research and pentesting. Every device is complete end-to-end: engineering docs, KiCad schematics & PCB layouts, production C/Python firmware, and React Native companion apps. Build it, flash it, run the app, start researching.
What's Inside Every Device
No half-finished reference designs. Each device folder contains the full stack:
| Category | Files | Description |
|---|---|---|
| Engineering Docs | phase1_conceptual_architecture.md → phase4_software_stack.md | 4-phase design process: requirements, BOM & netlists, PCB layout rules, software stack |
| KiCad Schematics | kicad/*.kicad_pro, *.kicad_sch, *.kicad_pcb | Full schematic with real component symbols, net labels, power flags, and board outline with placed footprints |
| C/Python Firmware | firmware/main.c, registers.h, board.h, drivers/, Makefile | Production-quality MCU firmware — init code, drivers with DMA, USB descriptors, wire protocol |
| React Native App | app/App.js, screens/, components/, utils/protocol.js, package.json | Companion mobile app for device control, configuration, real-time status, and data capture |
Design Methodology
Every device follows a rigorous 4-phase process:
| Phase | Document | Contents |
|---|---|---|
| Phase 1 | phase1_conceptual_architecture.md | Purpose, performance targets, constraints, block diagram, bus topology, power domains |
| Phase 2 | phase2_component_selection_schematics.md | BOM with real part numbers, pinouts/MUX tables, decoupling networks, netlists, impedance matching |
| Phase 3 | phase3_pcb_blueprints_layout.md | PCB stackup, routing rules, length matching, via strategy, thermal management, DFM notes |
| Phase 4 | phase4_software_stack.md | MMIO/register defs, clock & GPIO init (production C), critical device driver, device tree, bootloader |
Devices
| # | Device | Status | Description |
|---|---|---|---|
| 1 | wifi-pentest-dongle/ | ✅ Complete | 802.11ax monitor/inject, deauth, PMKID capture |
| 2 | rf-transceiver-tool/ | ✅ Complete | Sub-GHz + 2.4GHz multi-protocol (CC1101 + nRF24) |
| 3 | badusb-injector | ⏳ Queued | HID emulation payload injector, multi-profile |
| 4 | nfc-rfid-cloner | ⏳ Queued | 13.56MHz + 125kHz, Mifare/EM4100 |
| 5 | network-tap-mitm | ⏳ Queued | 2× GbE transparent bridge, packet capture |
| 6 | can-bus-analyzer | ⏳ Queued | OBD-II + CAN-FD, automotive pentest |
| 7 | sdr-keyfob-replay | ⏳ Queued | 433/315MHz keyfob capture & replay |
| 8 | ble-sniffer-spoofer | ⏳ Queued | nRF52, advertisement inject, GATT fuzz |
| 9 | imsi-catcher-detector | ⏳ Queued | LTE/4G SDR analysis |
| 10 | biometric-bypass-toolkit | ⏳ Queued | Fingerprint emulation, RFID clone for access control |
Constraints
- BOM target: Under $100 per device
- Form factor: Portable, USB-powered or battery-operated
- All designs use real, purchasable components with exact part numbers
- KiCad schematics are valid KiCad 7+ format — open them directly
- Firmware is production-quality C — not stubs or pseudocode
- React Native apps have working UI with proper state management and wire protocol matching the firmware
License
| Component | License |
|---|---|
| Hardware design (KiCad) | CERN-OHL-S v2 |
| C firmware & drivers | GPL-2.0 |
| Python tools & scripts | MIT |
| React Native companion apps | MIT |
Parts
13| Qty | Value | Footprint | References |
|---|---|---|---|
| 2 | 5k1 | Resistor_SMD:R_0603 | R1, R2 |
| 1 | 100nF | Capacitor_SMD:C_0603 | C1 |
| 1 | 4.7uF | Capacitor_SMD:C_0805 | C2 |
| 1 | FUSB302B | Package_BGA:FUSB302B | U2 |
| 1 | MF-MSMF200 | Fuse:Fuse_1812 | F1 |
| 1 | SMBJ24A | Diode_SMD:D_SMB | D1 |
| 1 | SSD1306 | Display:SSD1306_128x64 | U5 |
| 1 | STM32G474CBT6 | Package_QFP:LQFP-48_7x7mm_P0.5mm | U1 |
| 1 | Si4410BDY | Package_SO:PowerPAK-8 | Q1 |
| 1 | TPS25982 | Package_DFN:VQFN-16 | U3 |
| 1 | USB4175 | Connector_USB:USB_C_Plug_Molex_2175 | J1 |
| 1 | USB4177 | Connector_USB:USB_C_Receptacle_Molex_2177 | J2 |
Questions
How big is the Device PCB?
It measures 52 × 22 mm and has 2 copper layers, 1.6 mm thick.
What parts does the Device use?
13 parts, built around the STM32G474CBT6, FUSB302BMPX, MF-MSMF200-2 and SMBJ24A. The full list of its parts is on this page, with links to each part's symbol and footprint where PCBKit's library has them.
Where can I download the Device KiCad files?
From the jayis1/hacker-devices repository on GitHub, at the commit this page was made from: the board is ember-tap/kicad/device.kicad_pcb. PCBKit opens the board in the browser, with nothing to install.
Can I use the Device design in my own project?
Its repository states no licence, so its author keeps all rights: ask jayis1 before reusing the design.
More from jayis1/hacker-devices
12- 70 × 40 mm
Silent symphony
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
27 parts2 - 4 layers65 × 30 mm
Chronos phantom
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
26 parts2 - 4 layers70 × 45 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
25 parts2 - 4 layers85 × 24 mm
Trace reaper
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
24 parts2 - 4 layers86 × 55 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
22 parts2 - 4 layers120 × 22 mm
Acoustic phantom
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
20 parts2 - 4 layers80 × 40 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
20 parts2 - 4 layers85 × 54 mm
Rf transceiver tool
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
20 parts2 - 2 layers118 × 68 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
19 parts2 - 4 layers50 × 24 mm
Ghostbus
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
18 parts2 - 4 layers22 × 18 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
18 parts2
Similar boards
- 2 layers40 × 54.2 mm
Tdr
Jana-Marie/Mini-TDR
Software defined TDR based on an STM32G474, MCU+USB interface work and are tested, TDR AFE is untested. Firmware needs to be updated.
76 parts6 - 4 layers60 × 60 mm
- 2 layers187.5 × 45 mm
Gamma spectrometer
Motokichirou/gamma-spectrometer
NaI(Tl) gamma spectrometer: STM32G474 + R1307 PMT + 4-board stack, KiCad schematics, LTspice simulations
231 parts - 2 layers
- 6 layers245 × 190 mm
Akd safe interlock node
zinedkahitaf-lang/AKD-SAFE-SourceControl
Infrastructure-Based Active Engineering Safety Platform. Move the safety burden from the worker to the hazard. Engineering prototype - not a certified safety device.
200 parts - 4 layers150 × 95 mm
Skysweep32 rev c
bobberdolle1/SkySweep32
Open-source passive multi-band RF monitoring system | 855–925 MHz, 2.4 GHz, 5.8 GHz | Rev C first prototype
103 parts33GPL-3.0 - 2 layers
Pi Compute-3-Lite BLANK
tmtrcreations/Pi-Compute-3-Lite-BLANK
Blank KiCad schematic for creating a project with the Pi CM3L.
33 parts30 - 2 layers95.3 × 69.9 mm
Pi compute device
marcbperez/pi-compute-device
A portable device built with the Raspberry Pi Compute module.
67 parts11Apache-2.0