4 layers85 × 55 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
29 parts2
4 layers70 × 45 mm
Gnss phantom
jayis1/hacker-devices2Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
- Size
- 70 × 45 mm
- Copper layers
- 4
- Thickness
- 1.6 mm
- Parts
- 11
- Nets
- 51
- Pads
- 36
- Tracks, vias
- 13, 0
- Pours
- 3
- Routed
- Yes
- KiCad
- KiCad 8.0 (file 20240108)
- Created
- 12 Jun 2026
- Updated
- 6 Nov 2026
Overview
Gnss phantom is an open-source printed circuit board by jayis1, from the jayis1/hacker-devices repository on GitHub. It is a 4-layer board of 70 × 45 mm with 11 parts on 51 nets, routed with 13 tracks and 0 vias.
It is built around the STM32H743VIT6 and SI4463DY. Its parts include 4 ICs, 2 capacitors, 2 diodes, 1 resistor and 1 connector. It belongs with the radio and wireless boards and the STM32 and nRF52 and nRF5x boards of this library.
Main components
2
STM32H743VIT6
LQFP-100(14x14)-40℃~+85℃ 1.71V~3.6V 12bit 16bit 1MB 2MB 32 Bit 480MHz 82 ARM Cortex-M7 Built-in FLASH LQFP-100(14x14) Microcontrollers (MCU/MPU/SOC) ROHSSTMicroelectronicsMicrocontrollers (MCU/MPU/SOC)
SI4463DY
SOIC-8-55℃~+150℃ 1 P-Channel 1.532nF 1.5V 11.5A 17.5mΩ@2.5V 2.5W 20V 4.481nF 540pF 60nC@4.5V P-Channel SOIC-8 MOSFETs ROHSonsemiMOSFETs
README
README.mdHacker Devices — Open Hardware for Security Research
A collection of fully open-source hardware designs for legitimate security research and pentesting. Every device is complete end-to-end: engineering docs, KiCad schematics & PCB layouts, production C/Python firmware, and React Native companion apps. Build it, flash it, run the app, start researching.
What's Inside Every Device
No half-finished reference designs. Each device folder contains the full stack:
| Category | Files | Description |
|---|---|---|
| Engineering Docs | phase1_conceptual_architecture.md → phase4_software_stack.md | 4-phase design process: requirements, BOM & netlists, PCB layout rules, software stack |
| KiCad Schematics | kicad/*.kicad_pro, *.kicad_sch, *.kicad_pcb | Full schematic with real component symbols, net labels, power flags, and board outline with placed footprints |
| C/Python Firmware | firmware/main.c, registers.h, board.h, drivers/, Makefile | Production-quality MCU firmware — init code, drivers with DMA, USB descriptors, wire protocol |
| React Native App | app/App.js, screens/, components/, utils/protocol.js, package.json | Companion mobile app for device control, configuration, real-time status, and data capture |
Design Methodology
Every device follows a rigorous 4-phase process:
| Phase | Document | Contents |
|---|---|---|
| Phase 1 | phase1_conceptual_architecture.md | Purpose, performance targets, constraints, block diagram, bus topology, power domains |
| Phase 2 | phase2_component_selection_schematics.md | BOM with real part numbers, pinouts/MUX tables, decoupling networks, netlists, impedance matching |
| Phase 3 | phase3_pcb_blueprints_layout.md | PCB stackup, routing rules, length matching, via strategy, thermal management, DFM notes |
| Phase 4 | phase4_software_stack.md | MMIO/register defs, clock & GPIO init (production C), critical device driver, device tree, bootloader |
Devices
| # | Device | Status | Description |
|---|---|---|---|
| 1 | wifi-pentest-dongle/ | ✅ Complete | 802.11ax monitor/inject, deauth, PMKID capture |
| 2 | rf-transceiver-tool/ | ✅ Complete | Sub-GHz + 2.4GHz multi-protocol (CC1101 + nRF24) |
| 3 | badusb-injector | ⏳ Queued | HID emulation payload injector, multi-profile |
| 4 | nfc-rfid-cloner | ⏳ Queued | 13.56MHz + 125kHz, Mifare/EM4100 |
| 5 | network-tap-mitm | ⏳ Queued | 2× GbE transparent bridge, packet capture |
| 6 | can-bus-analyzer | ⏳ Queued | OBD-II + CAN-FD, automotive pentest |
| 7 | sdr-keyfob-replay | ⏳ Queued | 433/315MHz keyfob capture & replay |
| 8 | ble-sniffer-spoofer | ⏳ Queued | nRF52, advertisement inject, GATT fuzz |
| 9 | imsi-catcher-detector | ⏳ Queued | LTE/4G SDR analysis |
| 10 | biometric-bypass-toolkit | ⏳ Queued | Fingerprint emulation, RFID clone for access control |
Constraints
- BOM target: Under $100 per device
- Form factor: Portable, USB-powered or battery-operated
- All designs use real, purchasable components with exact part numbers
- KiCad schematics are valid KiCad 7+ format — open them directly
- Firmware is production-quality C — not stubs or pseudocode
- React Native apps have working UI with proper state management and wire protocol matching the firmware
License
| Component | License |
|---|---|
| Hardware design (KiCad) | CERN-OHL-S v2 |
| C firmware & drivers | GPL-2.0 |
| Python tools & scripts | MIT |
| React Native companion apps | MIT |
Parts
11| Qty | Value | Footprint | References |
|---|---|---|---|
| 2 | 100nF | Capacitor_SMD:C_0402 | C1, C2 |
| 2 | Si4463 | Package_SO:SSOP-20_4.4x6.5mm_P0.65mm | U2, U3 |
| 1 | 1k | Resistor_SMD:R_0402 | R1 |
| 1 | LED_Blue | LED_SMD:LED_0603 | D1 |
| 1 | LED_Red | LED_SMD:LED_0603 | D2 |
| 1 | SMA | Connector_Coaxial:SMA_Amphenol_132289_Edge_Mount | J1 |
| 1 | STM32H743VIT6 | Package_BGA:TFBGA-100_8x8mm_P0.8mm | U1 |
| 1 | TG5032CE-26N | Oscillator:Oscillator_SMD_TCXO_5032_4Pins | Y1 |
| 1 | nRF52840-M.2 | RF_Module:Nordic_M.2 | U4 |
More from jayis1/hacker-devices
12- 70 × 40 mm
Silent symphony
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
27 parts2 - 4 layers65 × 30 mm
Chronos phantom
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
26 parts2 - 4 layers70 × 45 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
25 parts2 - 4 layers85 × 24 mm
Trace reaper
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
24 parts2 - 4 layers86 × 55 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
22 parts2 - 4 layers120 × 22 mm
Acoustic phantom
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
20 parts2 - 4 layers80 × 40 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
20 parts2 - 4 layers85 × 54 mm
Rf transceiver tool
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
20 parts2 - 2 layers118 × 68 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
19 parts2 - 4 layers50 × 24 mm
Ghostbus
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
18 parts2 - 4 layers22 × 18 mm
Device
jayis1/hacker-devices
Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack
18 parts2
Similar boards
- 4 layers30.5 × 82.6 mm
Circuit board design
ImperialSpaceSociety/Project-Mach-1
This is the code and hardware designs for the high powered rocketry project at the Imperial College Space Society
89 parts12 - 4 layers80 × 93.6 mm
Telemetry KiCAD Project
MSTRocketDesignTeam/Avionics-Telemetry-PCB
Rocket Telemetry PCB
95 parts8GPL-3.0 - 4 layers101.1 × 50.3 mm
Modballoon
ODZ-UJF-AV-CR/balon
Semicoductor Cosmic ray detector High-altitude balloon experiment.
153 parts4 - 4 layers54.5 × 25 mm
Rf module
SpaceTeam/STS1_RF_Module
The full RF path of the STS1 COBC broken out as a separate module for testing and fun.
107 parts3MIT - 2 layers51.2 × 101.8 mm
- 2 layers99.7 × 100 mm
- 2 layers35 × 25 mm
- 2 layers50.3 × 40.1 mm
Questions
How big is the Gnss phantom PCB?
It measures 70 × 45 mm and has 4 copper layers, 1.6 mm thick.
What parts does the Gnss phantom use?
11 parts, built around the STM32H743VIT6 and SI4463DY. The full list of its parts is on this page, with links to each part's symbol and footprint where PCBKit's library has them.
Where can I download the Gnss phantom KiCad files?
From the jayis1/hacker-devices repository on GitHub, at the commit this page was made from: the board is gnss-phantom/kicad/gnss-phantom.kicad_pcb. PCBKit opens the board in the browser, with nothing to install.
Can I use the Gnss phantom design in my own project?
Its repository states no licence, so its author keeps all rights: ask jayis1 before reusing the design.