4 layers85 × 55 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
29 parts2
4 layers86 × 55 mm
Device
jayis1/hacker-devices2Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
- Size
- 86 × 55 mm
- Copper layers
- 4
- Thickness
- 1.6 mm
- Parts
- 22
- Nets
- 60
- Pads
- 52
- Tracks, vias
- 9, 9
- Pours
- 3
- Routed
- Yes
- KiCad
- KiCad 8 (file 20240108)
- Created
- 12 Jun 2026
- Updated
- 6 Nov 2026
Overview
Device is an open-source printed circuit board by jayis1, from the jayis1/hacker-devices repository on GitHub. It is a 4-layer board of 86 × 55 mm with 22 parts on 60 nets, routed with 9 tracks and 9 vias.
It is built around the STM32H743VIT6, ICE40UP5K-SG48I and USB3320C-EZK, with the TXS0108EPWR, MT41K256M16TW-107:P and TPS6521815RSLR among its other parts. Its parts include 10 ICs, 4 switches, 3 crystals, 2 diodes and 2 connectors. It belongs with the STM32 and FPGA and CPLD boards of this library.
Main components
9
STM32H743VIT6
LQFP-100(14x14)-40℃~+85℃ 1.71V~3.6V 12bit 16bit 1MB 2MB 32 Bit 480MHz 82 ARM Cortex-M7 Built-in FLASH LQFP-100(14x14) Microcontrollers (MCU/MPU/SOC) ROHSSTMicroelectronicsMicrocontrollers (MCU/MPU/SOC)
ICE40UP5K-SG48I
QFN-48-EP(7x7)-40℃~+100℃ 1.14V~1.26V 1171456bit 39 5280 660 iCE40 UltraPlus QFN-48-EP(7x7) Programmable Logic Device (CPLDs/FPGAs) ROHSLatticeProgrammable Logic Device (CPLDs/FPGAs)
USB3320C-EZK
QFN-32-EP(5x5)-40℃~+85℃ 1.8V~3.3V 18uA 7.5mA Transceiver USB 2.0 QFN-32-EP(5x5) USB Converters ROHSMicrochip TechnologyUSB Converters
TXS0108EPWR
UncategorisedUnknown maker
MT41K256M16TW-107:P
FBGA-96(8x14)0℃~+95℃ 1.283V~1.45V 15mA 32mA 4Gbit 933MHz Auto precharge function、Data mask function、Dynamic on-chip termination、ZQ calibration function、Asynchronous reset function、Write leveling function、Auto self-refresh DDR3L SDRAM FBGA-96(8x14) DDR SDRAM ROHSMicron TechDDR SDRAMTPS6521815RSLR
VQFN-48-EP(6x6)VQFN-48-EP(6x6) Power Management - Specialized ROHSTexas InstrumentsPower Management - Specialized
TPS74801DRCR
VSON-10-EP(3x3)-40℃~+125℃@(Tj) 1 1.5A 5.5V 60dB 60mV@(1.5A) 800mV~3.6V Adjustable Positive Under Voltage Lockout、Over Current Protection、Over Temperature Protection、Enable VSON-10-EP(3x3) Voltage Regulators - Linear, Low Drop Out (LDO) Regulators ROHSTexas InstrumentsVoltage Regulators - Linear, Low Drop Out (LDO) Regulators
WS2812B
5mm X 5mm Surface Mount RGB LED with Intelligent ControlWorldsemiUncategorised
USB4105-GF-A
SMD-40℃~+85℃ 1 12P 48V 5A Black Female Surface Mount, Right Angle Type-C USB 2.0 SMD USB Connectors ROHSGlobal Connector Technology (GCT)USB Connectors
README
README.mdHacker Devices — Open Hardware for Security Research
A collection of fully open-source hardware designs for legitimate security research and pentesting. Every device is complete end-to-end: engineering docs, KiCad schematics & PCB layouts, production C/Python firmware, and React Native companion apps. Build it, flash it, run the app, start researching.
What's Inside Every Device
No half-finished reference designs. Each device folder contains the full stack:
| Category | Files | Description |
|---|---|---|
| Engineering Docs | phase1_conceptual_architecture.md → phase4_software_stack.md | 4-phase design process: requirements, BOM & netlists, PCB layout rules, software stack |
| KiCad Schematics | kicad/*.kicad_pro, *.kicad_sch, *.kicad_pcb | Full schematic with real component symbols, net labels, power flags, and board outline with placed footprints |
| C/Python Firmware | firmware/main.c, registers.h, board.h, drivers/, Makefile | Production-quality MCU firmware — init code, drivers with DMA, USB descriptors, wire protocol |
| React Native App | app/App.js, screens/, components/, utils/protocol.js, package.json | Companion mobile app for device control, configuration, real-time status, and data capture |
Design Methodology
Every device follows a rigorous 4-phase process:
| Phase | Document | Contents |
|---|---|---|
| Phase 1 | phase1_conceptual_architecture.md | Purpose, performance targets, constraints, block diagram, bus topology, power domains |
| Phase 2 | phase2_component_selection_schematics.md | BOM with real part numbers, pinouts/MUX tables, decoupling networks, netlists, impedance matching |
| Phase 3 | phase3_pcb_blueprints_layout.md | PCB stackup, routing rules, length matching, via strategy, thermal management, DFM notes |
| Phase 4 | phase4_software_stack.md | MMIO/register defs, clock & GPIO init (production C), critical device driver, device tree, bootloader |
Devices
| # | Device | Status | Description |
|---|---|---|---|
| 1 | wifi-pentest-dongle/ | ✅ Complete | 802.11ax monitor/inject, deauth, PMKID capture |
| 2 | rf-transceiver-tool/ | ✅ Complete | Sub-GHz + 2.4GHz multi-protocol (CC1101 + nRF24) |
| 3 | badusb-injector | ⏳ Queued | HID emulation payload injector, multi-profile |
| 4 | nfc-rfid-cloner | ⏳ Queued | 13.56MHz + 125kHz, Mifare/EM4100 |
| 5 | network-tap-mitm | ⏳ Queued | 2× GbE transparent bridge, packet capture |
| 6 | can-bus-analyzer | ⏳ Queued | OBD-II + CAN-FD, automotive pentest |
| 7 | sdr-keyfob-replay | ⏳ Queued | 433/315MHz keyfob capture & replay |
| 8 | ble-sniffer-spoofer | ⏳ Queued | nRF52, advertisement inject, GATT fuzz |
| 9 | imsi-catcher-detector | ⏳ Queued | LTE/4G SDR analysis |
| 10 | biometric-bypass-toolkit | ⏳ Queued | Fingerprint emulation, RFID clone for access control |
Constraints
- BOM target: Under $100 per device
- Form factor: Portable, USB-powered or battery-operated
- All designs use real, purchasable components with exact part numbers
- KiCad schematics are valid KiCad 7+ format — open them directly
- Firmware is production-quality C — not stubs or pseudocode
- React Native apps have working UI with proper state management and wire protocol matching the firmware
License
| Component | License |
|---|---|
| Hardware design (KiCad) | CERN-OHL-S v2 |
| C firmware & drivers | GPL-2.0 |
| Python tools & scripts | MIT |
| React Native companion apps | MIT |
Parts
22| Qty | Value | Footprint | References |
|---|---|---|---|
| 2 | TXS0108EPWR | Package_SO:TSSOP-20_4.4x6.5mm_P0.65mm | U7, U8 |
| 2 | WS2812B | LED_SMD:LED_WS2812B-Mini | LED1, LED2 |
| 1 | 12MHz | Crystal:Crystal_SMD_Abracon_ABM8G-4Pin_3.2x2.5mm | Y3 |
| 1 | 25MHz | Crystal:Crystal_SMD_Abracon_ABM8G-4Pin_3.2x2.5mm | Y1 |
| 1 | 32.768kHz | Crystal:Crystal_SMD_Abracon_ABS07-2Pin_3.2x1.5mm | Y2 |
| 1 | BACK | Button_Switch_SMD:SW_SPST_PTS645 | SW4 |
| 1 | BQ25896RTWR | Package_DFN_QFN:WQFN-24-1EP_4x4mm_P0.5mm | U6 |
| 1 | DOWN | Button_Switch_SMD:SW_SPST_PTS645 | SW2 |
| 1 | ISP Header | Connector_PinHeader_2.54mm:PinHeader_2x10_P2.54mm_Vertical | J3 |
| 1 | MT41K256M16TW-107:P | Package_BGA:FBGA-96_9x14mm_P0.8mm | U3 |
| 1 | SELECT | Button_Switch_SMD:SW_SPST_PTS645 | SW3 |
| 1 | SSD1306 OLED | Display:SSD1306_0.96inch_128x64 | U10 |
| 1 | STM32H743VIT6 | Package_QFP:LQFP-100_14x14mm_P0.5mm | U1 |
| 1 | TC2050 | Connector:Tag-Connect_TC2050 | J_SWD |
| 1 | TPS6521815RSLR | Package_DFN_QFN:VQFN-48-1EP_7x7mm_P0.5mm | U5 |
| 1 | TPS74801DRCR | Package_DFN_QFN:VSON-10-1EP_3x3mm_P0.5mm | U11 |
| 1 | UP | Button_Switch_SMD:SW_SPST_PTS645 | SW1 |
| 1 | USB3320C-EZK | Package_QFN:QFN-32-1EP_5x5mm_P0.5mm | U4 |
| 1 | USB4105-GF-A | Connector_USB:USB_C_Receptacle_GCT_USB4105 | J1 |
| 1 | iCE40UP5K-SG48I | Package_QFN:QFN-48-1EP_7x7mm_P0.5mm | U2 |
Questions
How big is the Device PCB?
It measures 86 × 55 mm and has 4 copper layers, 1.6 mm thick.
What parts does the Device use?
22 parts, built around the STM32H743VIT6, ICE40UP5K-SG48I, USB3320C-EZK and TXS0108EPWR. The full list of its parts is on this page, with links to each part's symbol and footprint where PCBKit's library has them.
Where can I download the Device KiCad files?
From the jayis1/hacker-devices repository on GitHub, at the commit this page was made from: the board is emmc-flash-dumper/kicad/device.kicad_pcb. PCBKit opens the board in the browser, with nothing to install.
Can I use the Device design in my own project?
Its repository states no licence, so its author keeps all rights: ask jayis1 before reusing the design.
More from jayis1/hacker-devices
12- 70 × 40 mm
Silent symphony
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
27 parts2 - 4 layers65 × 30 mm
Chronos phantom
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
26 parts2 - 4 layers70 × 45 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
25 parts2 - 4 layers85 × 24 mm
Trace reaper
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
24 parts2 - 4 layers120 × 22 mm
Acoustic phantom
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
20 parts2 - 4 layers80 × 40 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
20 parts2 - 4 layers85 × 54 mm
Rf transceiver tool
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
20 parts2 - 2 layers118 × 68 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
19 parts2 - 4 layers50 × 24 mm
Ghostbus
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
18 parts2 - 4 layers22 × 18 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
18 parts2 - 35 × 20 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
18 parts2
Similar boards
- 2 layers10.5 × 12 mm
- 4 layers36.6 × 100 mm
Echometer
wzwqoo/Echometer
KiCad 10 project (v4.kicadpro, schematic + 4-layer PCB), fabrication outputs in fab/, BOM in v4.csv, and the parametric acoustic-horn generator ultrasonichornfreecad.py.
78 parts - 4 layers58 × 56.1 mm
Radar board
wzwqoo/single_camera_single_radar_rx_launch_monitor
A low-cost launch monitor that recovers a ball's launch vector from one high-speed monochrome camera and one 24 GHz CW Doppler radar — the RF front-end, the acquisition firmware, the synchronized recorder, and the…
82 parts - 6 layers80 × 70 mm
IMX6 Demo Board from REF
ts-manuel/iMX6-Demo-Board
Demo board for the i.MX6ULL Single-Core Processor with Arm Cortex-A7 Core
504 parts10GPL-3.0 - 4 layers80 × 80 mm
- 4 layers160 × 100 mm
Bench robotics controller 5eab0a5d
mrcha033/hw-codesign
Agentic hardware co-design: brief to KiCad, firmware, 3D review, and explicit fabrication blockers.
46 parts2Apache-2.0 - 4 layers22.9 × 61 mm
- 4 layers17.8 × 38.1 mm
