4 layers85 × 55 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
29 parts2
4 layers
Forge probe
jayis1/hacker-devices2Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
- Copper layers
- 4
- Parts
- 11
- Nets
- 34
- Pads
- 111
- Tracks, vias
- 25, 0
- Pours
- 2
- Routed
- Yes
- KiCad
- KiCad 7 (file 20230121)
- Created
- 12 Jun 2026
- Updated
- 6 Nov 2026
Overview
Forge probe is an open-source printed circuit board by jayis1, from the jayis1/hacker-devices repository on GitHub. It is a 4-layer board with 11 parts on 34 nets, routed with 25 tracks and 0 vias.
It is built around the STM32H743IIK6, INA219AID and TXB0108PW. Its parts include 5 ICs, 4 connectors, 1 diode and 1 crystal. It belongs with the sensors and measurement boards and the STM32 and FPGA and CPLD boards of this library.
Main components
3
STM32H743IIK6
UFBGA-176-40℃~+85℃ 1.62V~3.6V 12bit 140 16bit 1MB 2MB 32 Bit 480MHz ARM Cortex-M7 Built-in FLASH UFBGA-176 Microcontrollers (MCU/MPU/SOC) ROHSSTMicroelectronicsMicrocontrollers (MCU/MPU/SOC)
INA219AID
SOIC-8-40℃~+125℃ 0.1uV/℃ 0V~26V 1 10uV 120dB 20nA 3V~5.5V 700uA Bidirectional detection、Zero drift / auto-zero、Input filter、Power monitoring、Digital output interface ±26V SOIC-8 Current Sense Amplifiers ROHSTexas InstrumentsCurrent Sense Amplifiers
TXB0108PW
TSSOP-20-40℃~+85℃ 1 1.2V~3.6V 1.65V~5.5V 100Mbps 8 Automatic direction detection、Power-off protection、Output enable high-impedance Bidirectional Level translator Tri-State TSSOP-20 Translators, Level Shifters ROHSTexas InstrumentsTranslators, Level Shifters
README
README.mdHacker Devices — Open Hardware for Security Research
A collection of fully open-source hardware designs for legitimate security research and pentesting. Every device is complete end-to-end: engineering docs, KiCad schematics & PCB layouts, production C/Python firmware, and React Native companion apps. Build it, flash it, run the app, start researching.
What's Inside Every Device
No half-finished reference designs. Each device folder contains the full stack:
| Category | Files | Description |
|---|---|---|
| Engineering Docs | phase1_conceptual_architecture.md → phase4_software_stack.md | 4-phase design process: requirements, BOM & netlists, PCB layout rules, software stack |
| KiCad Schematics | kicad/*.kicad_pro, *.kicad_sch, *.kicad_pcb | Full schematic with real component symbols, net labels, power flags, and board outline with placed footprints |
| C/Python Firmware | firmware/main.c, registers.h, board.h, drivers/, Makefile | Production-quality MCU firmware — init code, drivers with DMA, USB descriptors, wire protocol |
| React Native App | app/App.js, screens/, components/, utils/protocol.js, package.json | Companion mobile app for device control, configuration, real-time status, and data capture |
Design Methodology
Every device follows a rigorous 4-phase process:
| Phase | Document | Contents |
|---|---|---|
| Phase 1 | phase1_conceptual_architecture.md | Purpose, performance targets, constraints, block diagram, bus topology, power domains |
| Phase 2 | phase2_component_selection_schematics.md | BOM with real part numbers, pinouts/MUX tables, decoupling networks, netlists, impedance matching |
| Phase 3 | phase3_pcb_blueprints_layout.md | PCB stackup, routing rules, length matching, via strategy, thermal management, DFM notes |
| Phase 4 | phase4_software_stack.md | MMIO/register defs, clock & GPIO init (production C), critical device driver, device tree, bootloader |
Devices
| # | Device | Status | Description |
|---|---|---|---|
| 1 | wifi-pentest-dongle/ | ✅ Complete | 802.11ax monitor/inject, deauth, PMKID capture |
| 2 | rf-transceiver-tool/ | ✅ Complete | Sub-GHz + 2.4GHz multi-protocol (CC1101 + nRF24) |
| 3 | badusb-injector | ⏳ Queued | HID emulation payload injector, multi-profile |
| 4 | nfc-rfid-cloner | ⏳ Queued | 13.56MHz + 125kHz, Mifare/EM4100 |
| 5 | network-tap-mitm | ⏳ Queued | 2× GbE transparent bridge, packet capture |
| 6 | can-bus-analyzer | ⏳ Queued | OBD-II + CAN-FD, automotive pentest |
| 7 | sdr-keyfob-replay | ⏳ Queued | 433/315MHz keyfob capture & replay |
| 8 | ble-sniffer-spoofer | ⏳ Queued | nRF52, advertisement inject, GATT fuzz |
| 9 | imsi-catcher-detector | ⏳ Queued | LTE/4G SDR analysis |
| 10 | biometric-bypass-toolkit | ⏳ Queued | Fingerprint emulation, RFID clone for access control |
Constraints
- BOM target: Under $100 per device
- Form factor: Portable, USB-powered or battery-operated
- All designs use real, purchasable components with exact part numbers
- KiCad schematics are valid KiCad 7+ format — open them directly
- Firmware is production-quality C — not stubs or pseudocode
- React Native apps have working UI with proper state management and wire protocol matching the firmware
License
| Component | License |
|---|---|
| Hardware design (KiCad) | CERN-OHL-S v2 |
| C firmware & drivers | GPL-2.0 |
| Python tools & scripts | MIT |
| React Native companion apps | MIT |
Parts
11| Qty | Value | Footprint | References |
|---|---|---|---|
| 1 | 25MHz | Crystal:Crystal_SMD_3225-4Pin_3.2x2.5mm | Y1 |
| 1 | INA219 | Package_TO_SOT_SMD:SOT-23-8 | U6 |
| 1 | JTAG_20PIN | Connector_PinHeader_2.54mm:PinHeader_2x10_P2.54mm_Vertical | J1 |
| 1 | LTPS7A47_3V3 | Package_DFN_QFN:QFN-28-1EP_4x5mm_P0.5mm | U3 |
| 1 | MicroSD | Connector_Card:microSD_HC_MOLEX_502570-0893 | J4 |
| 1 | RGB | LED_SMD:LED_0603_1608Metric | LED1 |
| 1 | STM32H743IIK6 | Package_BGA:BGA-176_10x10mm_P0.8mm | U1 |
| 1 | SWD_10PIN | Connector_PinHeader_2.54mm:PinHeader_2x5_P2.54mm_Vertical | J2 |
| 1 | TXB0108 | Package_SO:TSSOP-20_4.4x6.5mm_P0.65mm | U5 |
| 1 | USB-C | Connector_USB:USB_C_Receptacle_HRO_TYPE-C-31-M-12 | J3 |
| 1 | iCE40UP5K | Package_DFN_QFN:QFN-48-1EP_7x7mm_P0.5mm | U2 |
Questions
What parts does the Forge probe use?
11 parts, built around the STM32H743IIK6, INA219AID and TXB0108PW. The full list of its parts is on this page, with links to each part's symbol and footprint where PCBKit's library has them.
Where can I download the Forge probe KiCad files?
From the jayis1/hacker-devices repository on GitHub, at the commit this page was made from: the board is forge-probe/kicad/forge-probe.kicad_pcb. PCBKit opens the board in the browser, with nothing to install.
Can I use the Forge probe design in my own project?
Its repository states no licence, so its author keeps all rights: ask jayis1 before reusing the design.
More from jayis1/hacker-devices
12- 70 × 40 mm
Silent symphony
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
27 parts2 - 4 layers65 × 30 mm
Chronos phantom
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
26 parts2 - 4 layers70 × 45 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
25 parts2 - 4 layers85 × 24 mm
Trace reaper
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
24 parts2 - 4 layers86 × 55 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
22 parts2 - 4 layers120 × 22 mm
Acoustic phantom
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
20 parts2 - 4 layers80 × 40 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
20 parts2 - 4 layers85 × 54 mm
Rf transceiver tool
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
20 parts2 - 2 layers118 × 68 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
19 parts2 - 4 layers50 × 24 mm
Ghostbus
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
18 parts2 - 4 layers22 × 18 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
18 parts2
Similar boards
- 2 layers171.2 × 72.9 mm
Amiga gfxcard old
mntmn/amiga2000-gfxcard
MNT VA2000, an Open Source Amiga 2/3/4000 Graphics Card (Zorro II/III), written in Verilog
34 parts1k - 4 layers68.6 × 53.3 mm
Icezum
FPGAwars/icezum
:star2: IceZUM Alhambra: an Arduino-like Open FPGA electronic board
218 parts357GPL-3.0 - 4 layers52.8 × 61.2 mm
GameboyCartridgeV2.1
shilga/rp-gameboy-cartridge-hw
You should order with ENIG (electroless nickel immersion gold) plating. While the cartridge will work with HASL you will getter contact with ENIG and it is less prone to wearing down.
81 parts72CERN-OHL-P-2.0 - 4 layers82.9 × 64.6 mm
- 4 layers162.2 × 100 mm
- 2 layers100 × 165 mm
- 2 layers100.6 × 159 mm
- 2 layers21.6 × 45.7 mm
