70 × 40 mm
Silent symphony
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
27 parts2
4 layers85 × 55 mm
Device
jayis1/hacker-devices2Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
- Size
- 85 × 55 mm
- Copper layers
- 4
- Thickness
- 1.6 mm
- Parts
- 29
- Nets
- 83
- Pads
- 102
- Tracks, vias
- 10, 3
- Pours
- 2
- Routed
- Yes
- KiCad
- KiCad 7.0 (file 20240108)
- Created
- 12 Jun 2026
- Updated
- 6 Nov 2026
Overview
Device is an open-source printed circuit board by jayis1, from the jayis1/hacker-devices repository on GitHub. It is a 4-layer board of 85 × 55 mm with 29 parts on 83 nets, routed with 10 tracks and 3 vias.
It is built around the STM32H743VIT6, SKY66122-11 and SX1262IMLTRT, with the NRF52840-QIAA-R, TPS63020DSJR and IS42S16160G-6TLI among its other parts. Its parts include 8 ICs, 5 capacitors, 4 diodes, 4 connectors and 3 resistors. It belongs with the STM32 and nRF52 and nRF5x boards of this library.
Main components
7
STM32H743VIT6
LQFP-100(14x14)-40℃~+85℃ 1.71V~3.6V 12bit 16bit 1MB 2MB 32 Bit 480MHz 82 ARM Cortex-M7 Built-in FLASH LQFP-100(14x14) Microcontrollers (MCU/MPU/SOC) ROHSSTMicroelectronicsMicrocontrollers (MCU/MPU/SOC)
SKY66122-11
MCM-36(6x6)-1.5dBm -10dB -10dBm -40℃~+85℃ -9dB 0.05uA 30dBm 3V~5V 863MHz~928MHz MCM-36(6x6) RF Front End Circuits ROHSSkyworks SolutionsRF Front End Circuits
SX1262IMLTRT
QFN-24-EP(4x4)-148dBm -40℃~+85℃ 1.8V~3.7V 150MHz~960MHz 22dBm 300Kbps 32mA 4.2mA ISM SPI Supports software reset、Power-on reset function、Supports RSSI function transceiver QFN-24-EP(4x4) RF Transceiver ICs ROHSSEMTECHRF Transceiver ICs
NRF52840-QIAA-R
AQFN-73-EP(7x7)-95dBm 1.7V~5.5V 2.4GHz 2.4GHz~2.4835GHz 2Mbps 4.82mA 6.26mA 8dBm SPI、USB、UART、ADC、I2S、PWM ZigBee、Bluetooth、LoRa、ISM transceiver AQFN-73-EP(7x7) RF Transceiver ICs ROHSNORDICRF Transceiver ICs
TPS63020DSJR
VSON-14-EP(3x4)-40℃~+85℃@(TA) 1 1.2V~5.5V 1.8V~5.5V 2.4MHz 3A 50uA Adjustable Buck-Boost Buck-Boost Built-in Yes VSON-14-EP(3x4) DC-DC Converters ROHSTexas InstrumentsDC-DC Converters
IS42S16160G-6TLI
TSOP-54-10.2mm-40℃~+85℃ 166MHz 256Mbit 3V~3.6V High-speed clock synchronization、Auto precharge、Automatic column address generation、Auto refresh TSOP-54-10.2mm SDRAM ROHSISSISDRAM
USBLC6-2SC6
SOT-23-60.35pF、0.8pF 100nA 150W@8/20us 15V 2 5V 6A@8/20us 6V ESD SOT-23-6 ESD and Surge Protection (TVS/ESD) ROHSUMWESD And Surge Protection (TVS/ESD)
README
README.mdHacker Devices — Open Hardware for Security Research
A collection of fully open-source hardware designs for legitimate security research and pentesting. Every device is complete end-to-end: engineering docs, KiCad schematics & PCB layouts, production C/Python firmware, and React Native companion apps. Build it, flash it, run the app, start researching.
What's Inside Every Device
No half-finished reference designs. Each device folder contains the full stack:
| Category | Files | Description |
|---|---|---|
| Engineering Docs | phase1_conceptual_architecture.md → phase4_software_stack.md | 4-phase design process: requirements, BOM & netlists, PCB layout rules, software stack |
| KiCad Schematics | kicad/*.kicad_pro, *.kicad_sch, *.kicad_pcb | Full schematic with real component symbols, net labels, power flags, and board outline with placed footprints |
| C/Python Firmware | firmware/main.c, registers.h, board.h, drivers/, Makefile | Production-quality MCU firmware — init code, drivers with DMA, USB descriptors, wire protocol |
| React Native App | app/App.js, screens/, components/, utils/protocol.js, package.json | Companion mobile app for device control, configuration, real-time status, and data capture |
Design Methodology
Every device follows a rigorous 4-phase process:
| Phase | Document | Contents |
|---|---|---|
| Phase 1 | phase1_conceptual_architecture.md | Purpose, performance targets, constraints, block diagram, bus topology, power domains |
| Phase 2 | phase2_component_selection_schematics.md | BOM with real part numbers, pinouts/MUX tables, decoupling networks, netlists, impedance matching |
| Phase 3 | phase3_pcb_blueprints_layout.md | PCB stackup, routing rules, length matching, via strategy, thermal management, DFM notes |
| Phase 4 | phase4_software_stack.md | MMIO/register defs, clock & GPIO init (production C), critical device driver, device tree, bootloader |
Devices
| # | Device | Status | Description |
|---|---|---|---|
| 1 | wifi-pentest-dongle/ | ✅ Complete | 802.11ax monitor/inject, deauth, PMKID capture |
| 2 | rf-transceiver-tool/ | ✅ Complete | Sub-GHz + 2.4GHz multi-protocol (CC1101 + nRF24) |
| 3 | badusb-injector | ⏳ Queued | HID emulation payload injector, multi-profile |
| 4 | nfc-rfid-cloner | ⏳ Queued | 13.56MHz + 125kHz, Mifare/EM4100 |
| 5 | network-tap-mitm | ⏳ Queued | 2× GbE transparent bridge, packet capture |
| 6 | can-bus-analyzer | ⏳ Queued | OBD-II + CAN-FD, automotive pentest |
| 7 | sdr-keyfob-replay | ⏳ Queued | 433/315MHz keyfob capture & replay |
| 8 | ble-sniffer-spoofer | ⏳ Queued | nRF52, advertisement inject, GATT fuzz |
| 9 | imsi-catcher-detector | ⏳ Queued | LTE/4G SDR analysis |
| 10 | biometric-bypass-toolkit | ⏳ Queued | Fingerprint emulation, RFID clone for access control |
Constraints
- BOM target: Under $100 per device
- Form factor: Portable, USB-powered or battery-operated
- All designs use real, purchasable components with exact part numbers
- KiCad schematics are valid KiCad 7+ format — open them directly
- Firmware is production-quality C — not stubs or pseudocode
- React Native apps have working UI with proper state management and wire protocol matching the firmware
License
| Component | License |
|---|---|
| Hardware design (KiCad) | CERN-OHL-S v2 |
| C firmware & drivers | GPL-2.0 |
| Python tools & scripts | MIT |
| React Native companion apps | MIT |
Parts
29| Qty | Value | Footprint | References |
|---|---|---|---|
| 3 | 100nF | Capacitor_SMD:C_0402_1005Metric | C1, C2, C4 |
| 2 | 10uF | Capacitor_SMD:C_0402_1005Metric | C3, C5 |
| 1 | 100k | Resistor_SMD:R_0402_1005Metric | R5 |
| 1 | 12nH | Inductor_SMD:L_0402_1005Metric | L1 |
| 1 | 1k | Resistor_SMD:R_0402_1005Metric | R1 |
| 1 | 200k | Resistor_SMD:R_0402_1005Metric | R6 |
| 1 | 25MHz | Crystal:Crystal_SMD_3225-4Pin_3.2x2.5mm | Y1 |
| 1 | 32MHz TCXO | Oscillator:Oscillator_SMD_EuroQuartz_XO53-4Pin_5.0x3.2mm | Y2 |
| 1 | BAT | Connector_JST:JST_PH_S2B-PH-SM4-TB_1x02-1MP_P2.00mm | J4 |
| 1 | BLE | LED_SMD:LED_0603_1608Metric | D2 |
| 1 | CAPTURE | Button_Switch_SMD:SW_Push_SPST_B3SN-6x6mm | SW1 |
| 1 | ERR | LED_SMD:LED_0603_1608Metric | D4 |
| 1 | IS42S16160G-6TLI | Package_SO:TSOP-54_8.9x18.4mm_P0.5mm | U8 |
| 1 | MCP73831T-2ACI | Package_TO_SOT_SMD:SOT-23 | U7 |
| 1 | MODE | Button_Switch_SMD:SW_Push_SPST_B3SN-6x6mm | SW2 |
| 1 | Micro_SD | Connector_Card:microSD_HC_Hirose_DM3D-SF | J2 |
| 1 | RF | LED_SMD:LED_0603_1608Metric | D1 |
| 1 | SKY66122-11 | Package_DFN_QFN:QFN-16-1EP_3x3mm_P0.5mm_EP1.8x1.8mm | U4 |
| 1 | SMA | Connector_Coaxial:SMA_Amphenol_132289_EdgeMount | J3 |
| 1 | STM32H743VIT6 | Package_QFP:LQFP-100_14x14mm_P0.5mm | U1 |
| 1 | SX1262IMLTRT | Package_DFN_QFN:QFN-24-1EP_4x4mm_P0.5mm_EP2.6x2.6mm | U2 |
| 1 | TPS63020DSJR | Package_DFN_QFN:VQFN-14-1EP_3x3mm_P0.5mm_EP2x2mm | U6 |
| 1 | USB | LED_SMD:LED_0603_1608Metric | D3 |
| 1 | USB-C | Connector_USB:USB_C_Receptacle_Amphenol_12401548E4-2A | J1 |
| 1 | USBLC6-2SC6 | Package_TO_SOT_SMD:SOT-23-6 | U9 |
| 1 | nRF52840-QIAA-R | Package_DFN_QFN:QFN-73-1EP_7x7mm_P0.5mm_EP5.6x5.6mm | U3 |
Questions
How big is the Device PCB?
It measures 85 × 55 mm and has 4 copper layers, 1.6 mm thick.
What parts does the Device use?
29 parts, built around the STM32H743VIT6, SKY66122-11, SX1262IMLTRT and NRF52840-QIAA-R. The full list of its parts is on this page, with links to each part's symbol and footprint where PCBKit's library has them.
Where can I download the Device KiCad files?
From the jayis1/hacker-devices repository on GitHub, at the commit this page was made from: the board is lora-phantom/kicad/device.kicad_pcb. PCBKit opens the board in the browser, with nothing to install.
Can I use the Device design in my own project?
Its repository states no licence, so its author keeps all rights: ask jayis1 before reusing the design.
More from jayis1/hacker-devices
12- 4 layers65 × 30 mm
Chronos phantom
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
26 parts2 - 4 layers70 × 45 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
25 parts2 - 4 layers85 × 24 mm
Trace reaper
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
24 parts2 - 4 layers86 × 55 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
22 parts2 - 4 layers120 × 22 mm
Acoustic phantom
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
20 parts2 - 4 layers80 × 40 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
20 parts2 - 4 layers85 × 54 mm
Rf transceiver tool
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
20 parts2 - 2 layers118 × 68 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
19 parts2 - 4 layers50 × 24 mm
Ghostbus
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
18 parts2 - 4 layers22 × 18 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
18 parts2 - 35 × 20 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
18 parts2
Similar boards
- 2 layers147.9 × 160 mm
Doper Dactyl
Dopernieux/dactyl-manuform-wireless
Ergonomic split mechanical keyboard - Dactyl Manuform BLE Flex PCB project
102 parts - 4 layers120 × 72 mm
Device
jayis1/hardware-design-lab
Full-cycle hardware device designs — each device in its own subfolder with architecture, schematics, PCB layout, and software stack
21 parts - 4 layers
Lora node
Mehdi-Ldj/lora-ble-sensor-node
Off-grid LoRa/BLE sensor node — 868 MHz LoRa, 2.4 GHz BLE, solar/LiFePO4
110 partsCERN-OHL-P-2.0 - 4 layers38 × 19 mm
Openmotorbridge smart keyfob
schmidtmt/openmotorbridge
The comprehensive technical specification is split into 18 logically organized chapters:
25 parts - 4 layers160 × 100 mm
Bench robotics controller 5eab0a5d
mrcha033/hw-codesign
Agentic hardware co-design: brief to KiCad, firmware, 3D review, and explicit fabrication blockers.
46 parts2Apache-2.0 - 4 layers60 × 50 mm
Smart helmet with anc
baba2712/smart-helmet-with-anc
An industrial safety helmet with hybrid active noise cancellation (feed-forward + adaptive feedback FxLMS) on an STM32H743.
154 partsMIT - 4 layers60 × 60 mm
- 6 layers40 × 40 mm
Kestrel fc
HeyPCB/kestrel-fc
Kestrel H7: STM32H743 FPV flight controller with ICM-20602 + BMI088, MS5611, 16 MB blackbox, 5 V and switchable 10 V BECs.
114 partsCERN-OHL-S-2.0