POSEIDON

Twelve mood portraits (Watching, Pleased, Annoyed, Resigned, Calculating, Old Fury, Sleeping, Reflective…). Mood-mapped to hunt state — Argus sleeps when idle, gets pleased on catch, fully unhinged on Feral burst. Sprite is cached to internal SRAM to dodge MMU stalls during raw-TX.

POSEIDON, MATRIX, E-INK, SYNTHWAVE, PHANTOM, BLOOD. Magenta splashes across the dashboard chrome, matrix rain on a 4x speed-up, ambient procedural motion painted under every screen. Carousel menu style toggles in System — big-card single-focus with pictograph icons.

Bruce's pinned libnet80211.a crashes Arduino's WiFi.softAP() in ieee80211_hostap_attach +0x2c. New path bypasses Arduino entirely — esp_bt_controller_mem_release(BTDM) → raw netif → 4/16 buffer init → esp_wifi_set_config(WIFI_IF_AP) → post-start channel set. Portal, Beacon Spam, Evil Twin all back on-air.

Sonar sweep, port scan, hex cascade, terminal crack, neural arc, glitch BSOD, tide waves. Kicks in at 2 min idle, pulled from a pool keyed off the active theme. Pick your favorite at System → Screensaver.

Sour Apple, Spam, Karma, Flood, FindMy refactored from xTaskCreate (silent rc=-1 because NimBLE eats 4 KB of heap) to cooperative ticks called from each feature's UI loop. Every nearby phone now sees the spam. Confirmed against iOS + Android.

TRIDENT C5 satellite jumps to wire protocol v3 — 9 new commands (clients hunt, beacon spam, probe sniff, deauth detect, karma, AP clone, spectrum, CIW). Critical fix: C5 now sends a zero-payload terminator when a scan finishes so POSEIDON stops spinning forever on empty results.

Floods the network's DHCP server with random-MAC Discover/Request cycles until the pool exhausts. Live counters. Auto-detects exhaustion on NAK ≥ 20.

Races the real server with our own Offer/Ack (STA mode) or is the DHCP server for clients on our SoftAP (AP mode). Gateway + DNS poisoning for chained MitM.

LLMNR + NBT-NS name-poisoning plus SMB1 NTLMv2 Type-2 builder. Captured hashes logged to SD in hashcat mode-5600 format. Feed directly to the on-device cracker.

Serves PAC file on port 80 + HTTP 407 Proxy-Authenticate challenge. Windows clients auto-fetch WPAD, auto-auth with current domain creds.

Pure-C HMAC-MD5 wordlist runner. Reads hashcat-5600 lines from SD, tries each password. No PC needed. Seeds a starter wordlist on first run.

Own renderer — list / grid / carousel views, RaspyJack-faithful info pages, screensaver, 7-sprite pirate icon pack baked from PNG via tools/sprite_sheet_to_icons.py.

Active scan for Fast Pair service UUID 0xFE2C. Classifies each hit as pairable (spec-compliant) or in-use (shouldn't accept pairing — the vulnerable column). Model-ID lookup names the device on-screen.

secp256r1 ephemeral keypair via mbedTLS (hardware accelerated on ESP32-S3). AES-128-ECB encrypts a valid Key-Based Pairing plaintext. 80-byte envelope lands on the target's KBP characteristic.

Response in 3 seconds = VULNERABLE. Silent drop = patched. When we have the accessory's anti-spoofing pubkey, we decrypt the response and extract the hidden BR/EDR MAC. Logged to /poseidon/whisperpair.csv.

USB-CDC nRF52840 dongle for full BLE 5.0 sniffing, LE Secure Connection attacks, Coded PHY S=8 long-range, and direction finding. The S3 can scan and spam BLE but can't MITM a real pairing — nRF52 closes that gap. The four nRF52 features (scan, scout-strike, MITM relay, WiFi+BLE combo) shipped in v0.6.0 against a Feather hat; v0.7 hardens the path with a dedicated dongle.

Dual-core PBKDF2-SHA1 runner that eats .22000 files straight from SD. Seeded wordlist, custom dictionary support, resume-from-last-line. No PC tether. Listed here because testers keep asking and we have the hashcat-format captures already.

Hydra RF hat lands on the bench tomorrow — any sub-GHz bugs surfaced during v0.6 testing get fixed the moment the hardware is here. CC1101 RF / nRF24 mousejack / sub-GHz replay / Pocket SDR all queued for the regression sweep.

TRIDENT's 802.15.4 radio already sniffs Zigbee. Next step: passive Thread discovery, node enumeration, commissioning-invite detection, Matter bridge fingerprinting. Output to SD as structured JSON.

Design sketch, not code. Future companion drop-box on a Banana Pi BPI-M4 Zero running hcxdumptool + WPA2 cracker + Bjorn-style action DAG. POSEIDON would act as the USB-C control client. No ETA, no implementation today.