anything you read here may or may not be entirely accurate or up to date.

GhostESP comes packed with various features for wireless network exploration and testing.

• AP Scanning

  • Detect all nearby WiFi networks
  • Detailed visibility into wireless environments
  • Channel congestion chart
  • Combined AP & Station scan (scanall)

• Station Scanning

  • Identify connected WiFi clients
  • Monitor active devices on networks

• Probe Request Listening

  • Listen for and log probe requests from devices
  • Channel hopping or fixed channel

• Beacon Spam

  • Deploy customizable SSID beacons
  • Multiple operation modes: random, Rickroll, AP list, custom SSID
  • Beacon spam list management (add, remove, clear, show, spamlist)

• Deauthentication Attacks

  • Disconnect clients from WiFi networks
  • For testing network security
  • EAPOL logoff attack
  • SAE handshake flood (ESP32-C5/C6 only)
  • DHCP starvation attack

• Evil Portal

  • Custom SSID and domain setup
  • Start built-in or custom HTML captive portals
  • List available portals on SD card
  • Prompt for SSID and optional PSK
  • Stop portal at any time
  • HTML upload via Flipper Zero App (max 2048 bytes)

• WiFi Capture
  • Capture probe requests
  • Record beacon frames
  • Log deauthentication packets
  • Raw wireless data collection
  • EAPOL/handshake, WPS, Pwnagotchi, and PineAP detection
  • Save to SD card or Flipper
  • BLE packet capture (non-S2)

• General BLE Scanning

  • Detect BLE devices
  • Monitor BLE advertisements
  • BLE Wardriving with GPS Logging

• Specialized Detection

  • AirTag detection mode
  • Flipper Zero detection and RSSI tracking
  • BLE skimmer detection

• BLE Spam
  • Apple, Microsoft, Samsung, Google, and random BLE spam modes
  • Stop BLE spam at any time

• Easy Learn Mode^™ Auto button naming (it's not a real trademark)

• FlipperZero IR File Compatibility
  • Use FlipperZero formatted IR files
  • Store files in /ghostesp/infrared/remotes or /ghostesp/infrared/universals on SD card
  • Universal Library IR Transmit
  • Signals File IR Transmit

• Supported Protocols:
  • NEC, NECext
  • Kaseikyo
  • Pioneer
  • RCA
  • Samsung
  • SIRC, SIRC15, SIRC20
  • RC5
  • RC6

Note: IR functionality is available on LilyGo S3TWatch, ESP32-S3-Cardputer, and LilyGo TEmbed C1101 devices only as of firmware v1.7.

• Stealth
• Normal
• Rainbow
• Police
• Strobe
• Static color (red, green, blue, yellow, purple, cyan, orange, white, pink)
• Pin configuration for single-pin or separate RGB

• Change or reset GhostNet AP credentials
• Enable/disable AP across reboots

• DIAL protocol support
• Chromecast V2 compatibility
• Roku device interaction
• PowerPrinter: Print custom text to network printers

• Wardriving with GPS logging (WiFi and BLE)
• Live GPS info display

• Scan local subnet or specific IP
• Scan common, all, or custom port ranges

• Web UI authentication toggle
• Set Wi-Fi country code (ESP32-C5)
• Set timezone for clock view
• Chip and memory info
• Reboot, stop all operations, crash for debugging
• Power saving mode for extended battery life
• Fuel gauge support (BQ27220 initially)

• Show and configure SD card pinout (MMC/SPI)
• Save SD config to card

• Connect two ESP32 devices with UART
• Remote control through WebUI
• Automatic device discovery
• Send commands between devices
• Coordinated attacks and operations

• Touch screen navigation
• Terminal App for keyboard input
• Power saving display timeout options
• PWM backlight control on supported devices

---

Note: Some features require specific hardware (e.g., SD card, GPS, BLE, Flipper Zero, etc.).
For a full list of commands and usage, see the Commands Guide.