4 layers85 × 55 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
29 parts2
4 layers25 × 75 mm
Device
jayis1/hacker-devices2Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
- Size
- 25 × 75 mm
- Copper layers
- 4
- Thickness
- 1.6 mm
- Parts
- 18
- Nets
- 35
- Pads
- 92
- Tracks, vias
- 0, 0
- Routed
- Not yet
- KiCad
- KiCad 7.0 (file 20230121)
- Created
- 12 Jun 2026
- Updated
- 6 Nov 2026
Overview
Device is an open-source printed circuit board by jayis1, from the jayis1/hacker-devices repository on GitHub. It is a 4-layer board of 25 × 75 mm with 18 parts on 35 nets.
It is built around the RP2040, ESP32-C3-MINI-1 and MCP73831, with the TXB0108PW among its other parts. Its parts include 6 ICs, 3 capacitors, 3 connectors, 2 resistors and 2 diodes. It belongs with the ESP32, RP2040 and RISC-V boards of this library.
Main components
4
RP2040
LQFN-56(7x7)12bit 133MHz 30 LQFN-56(7x7) Microcontrollers (MCU/MPU/SOC) ROHSRaspberry PiMicrocontrollers (MCU/MPU/SOC)ESP32-C3-MINI-1
--40℃~+81℃ -89dBm 2.4GHz 350mA 3V~3.6V 82mA ESP32-C3 Chip On-board PCB Antenna UART - WiFi Modules ROHSRF CrazyWiFi Modules
MCP73831
UncategorisedMicrochip Technology
TXB0108PW
TSSOP-20-40℃~+85℃ 1 1.2V~3.6V 1.65V~5.5V 100Mbps 8 Automatic direction detection、Power-off protection、Output enable high-impedance Bidirectional Level translator Tri-State TSSOP-20 Translators, Level Shifters ROHSTexas InstrumentsTranslators, Level Shifters
README
README.mdHacker Devices — Open Hardware for Security Research
A collection of fully open-source hardware designs for legitimate security research and pentesting. Every device is complete end-to-end: engineering docs, KiCad schematics & PCB layouts, production C/Python firmware, and React Native companion apps. Build it, flash it, run the app, start researching.
What's Inside Every Device
No half-finished reference designs. Each device folder contains the full stack:
| Category | Files | Description |
|---|---|---|
| Engineering Docs | phase1_conceptual_architecture.md → phase4_software_stack.md | 4-phase design process: requirements, BOM & netlists, PCB layout rules, software stack |
| KiCad Schematics | kicad/*.kicad_pro, *.kicad_sch, *.kicad_pcb | Full schematic with real component symbols, net labels, power flags, and board outline with placed footprints |
| C/Python Firmware | firmware/main.c, registers.h, board.h, drivers/, Makefile | Production-quality MCU firmware — init code, drivers with DMA, USB descriptors, wire protocol |
| React Native App | app/App.js, screens/, components/, utils/protocol.js, package.json | Companion mobile app for device control, configuration, real-time status, and data capture |
Design Methodology
Every device follows a rigorous 4-phase process:
| Phase | Document | Contents |
|---|---|---|
| Phase 1 | phase1_conceptual_architecture.md | Purpose, performance targets, constraints, block diagram, bus topology, power domains |
| Phase 2 | phase2_component_selection_schematics.md | BOM with real part numbers, pinouts/MUX tables, decoupling networks, netlists, impedance matching |
| Phase 3 | phase3_pcb_blueprints_layout.md | PCB stackup, routing rules, length matching, via strategy, thermal management, DFM notes |
| Phase 4 | phase4_software_stack.md | MMIO/register defs, clock & GPIO init (production C), critical device driver, device tree, bootloader |
Devices
| # | Device | Status | Description |
|---|---|---|---|
| 1 | wifi-pentest-dongle/ | ✅ Complete | 802.11ax monitor/inject, deauth, PMKID capture |
| 2 | rf-transceiver-tool/ | ✅ Complete | Sub-GHz + 2.4GHz multi-protocol (CC1101 + nRF24) |
| 3 | badusb-injector | ⏳ Queued | HID emulation payload injector, multi-profile |
| 4 | nfc-rfid-cloner | ⏳ Queued | 13.56MHz + 125kHz, Mifare/EM4100 |
| 5 | network-tap-mitm | ⏳ Queued | 2× GbE transparent bridge, packet capture |
| 6 | can-bus-analyzer | ⏳ Queued | OBD-II + CAN-FD, automotive pentest |
| 7 | sdr-keyfob-replay | ⏳ Queued | 433/315MHz keyfob capture & replay |
| 8 | ble-sniffer-spoofer | ⏳ Queued | nRF52, advertisement inject, GATT fuzz |
| 9 | imsi-catcher-detector | ⏳ Queued | LTE/4G SDR analysis |
| 10 | biometric-bypass-toolkit | ⏳ Queued | Fingerprint emulation, RFID clone for access control |
Constraints
- BOM target: Under $100 per device
- Form factor: Portable, USB-powered or battery-operated
- All designs use real, purchasable components with exact part numbers
- KiCad schematics are valid KiCad 7+ format — open them directly
- Firmware is production-quality C — not stubs or pseudocode
- React Native apps have working UI with proper state management and wire protocol matching the firmware
License
| Component | License |
|---|---|
| Hardware design (KiCad) | CERN-OHL-S v2 |
| C firmware & drivers | GPL-2.0 |
| Python tools & scripts | MIT |
| React Native companion apps | MIT |
Parts
18| Qty | Value | Footprint | References |
|---|---|---|---|
| 2 | 100nF | Capacitor_SMD:C_0402_1005Metric | C1, C2 |
| 2 | 4.7k | Resistor_SMD:R_0402_1005Metric | R1, R2 |
| 1 | 10uF | Capacitor_SMD:C_0805_2012Metric | C3 |
| 1 | 12MHz | Crystal:Crystal_SMD_3215-2Pin_3.2x1.5mm | Y1 |
| 1 | BOOT | Button_Switch_SMD:SW_Push_1P1T-XS_6x6mm | SW1 |
| 1 | ESP32-C3-MINI-1 | RF_Module:ESP32-C3-MINI-1 | U2 |
| 1 | FPC_6P | Connector_FFC-FPC:Hirose_FH12-6S-0.5SH_1x6-1MP_P0.50mm_Horizontal | J3 |
| 1 | INJECT | LED_SMD:LED_0402_1005Metric | D2 |
| 1 | MAX17048 | Package_SO:TSSOP-8_3x3mm_P0.65mm | U6 |
| 1 | MCP73831 | Package_TO_SOT_SMD:SOT-23-5 | U5 |
| 1 | Micro_SD_Card | Connector_Card:microSD_HC_Hirose_DM3D-SF | J1 |
| 1 | RP2040 | Package_DFN_QFN:QFN-56-1EP_7x7mm_P0.4mm_EP5.6x5.6mm | U1 |
| 1 | SSD1306 | Display:OLED_128x32_0.42in | U4 |
| 1 | STATUS | LED_SMD:LED_0402_1005Metric | D1 |
| 1 | TXB0108 | Package_SO:TSSOP-20_4.4x6.5mm_P0.65mm | U3 |
| 1 | USB-C | Connector_USB:USB_C_Receptacle_HRO_TYPE-C-31-M-12 | J2 |
Questions
How big is the Device PCB?
It measures 25 × 75 mm and has 4 copper layers, 1.6 mm thick.
What parts does the Device use?
18 parts, built around the RP2040, ESP32-C3-MINI-1, MCP73831 and TXB0108PW. The full list of its parts is on this page, with links to each part's symbol and footprint where PCBKit's library has them.
Where can I download the Device KiCad files?
From the jayis1/hacker-devices repository on GitHub, at the commit this page was made from: the board is tactile-phantom/kicad/device.kicad_pcb. PCBKit opens the board in the browser, with nothing to install.
Can I use the Device design in my own project?
Its repository states no licence, so its author keeps all rights: ask jayis1 before reusing the design.
More from jayis1/hacker-devices
12- 70 × 40 mm
Silent symphony
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
27 parts2 - 4 layers65 × 30 mm
Chronos phantom
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
26 parts2 - 4 layers70 × 45 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
25 parts2 - 4 layers85 × 24 mm
Trace reaper
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
24 parts2 - 4 layers86 × 55 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
22 parts2 - 4 layers120 × 22 mm
Acoustic phantom
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
20 parts2 - 4 layers80 × 40 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
20 parts2 - 4 layers85 × 54 mm
Rf transceiver tool
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
20 parts2 - 2 layers118 × 68 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
19 parts2 - 4 layers50 × 24 mm
Ghostbus
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
18 parts2 - 4 layers22 × 18 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
18 parts2
Similar boards
- 4 layers162.2 × 100 mm
- 2 layers100 × 165 mm
- 2 layers100 × 100 mm
Hub12-controller hw
radioegor146/hub12-controller
Simple HUB12 LED matrices USB controller using RP2040
88 parts1GPL-3.0 - 4 layers52.8 × 61.2 mm
GameboyCartridgeV1.1
shilga/rp-gameboy-cartridge-hw
You should order with ENIG (electroless nickel immersion gold) plating. While the cartridge will work with HASL you will getter contact with ENIG and it is less prone to wearing down.
56 parts72CERN-OHL-P-2.0 - 4 layers88.1 × 34.5 mm
Servid rp2040-hdmi proto rev1
baldengineer/Mega-IIe
Using the Mega II from a IIgs to make a Apple IIe compatible computer: The Mega IIe!
105 parts33MIT - 2 layers
- 2 layers228.6 × 81 mm
- 2 layers58.4 × 83.8 mm
Rp2350b launchpad PCB
Terstegge/rp2350b-launchpad-PCB
This repository contains the KiCad design files for a TI-style Launchpad board with the RP2350B microcontroller. The board has the following features:
129 parts5