WiFi deauth to LoRa beacons. MouseJack to DHCP starvation. POSEIDON covers more attack surface than any other pocketable device — and it's keyboard-first so you actually fly through it.
Scan, deauth with client sniffer + disassoc pair + seq counter, evil portal, karma, beacon spam, probe sniff, PMKID + 4-way handshake capture, wardrive + GPS, CIW zeroclick SSID injection.
Classifying scan with OUI + Continuity + Fast Pair DBs. Spam (Apple/Samsung/Google/Windows). Bad-KB HID, tracker detect, GATT explorer, Sour Apple CVE-2023-42941, Find-My emulator, clone, flood, plus WhisperPair CVE-2025-36911 probe with real ECDH + AES.
Signal capture with protocol decoder (Princeton, CAME, NICE, Linear). Record RAW via native RMT peripheral. Replay Flipper .sub files. 3,190+ signal library. Spectrum analyzer. Brute force. Jammer. Jam Detect RSSI anomaly monitor.
Promiscuous ESB sniffer (Goodspeed trick). MouseJack HID injection. BLE advertising spam via nRF24 with full CRC24 + whitening. Spectrum analyzer. CW carrier jammer.
Multi-band LoRa scan. Beacon TX with GPS coordinates. Meshtastic LongFast listener + full leaf node (chat/nodes/page/position). LoRa Analyzer with live packet capture. GPS fix with baud auto-detect.
Full LAN suite: port scan, ping, DNS, SSDP poisoner, honeypot, reverse TCP tunnel, UART shell, plus the SaltyJack arsenal (DHCP starve, rogue DHCP, Responder, WPAD NTLM, on-device cracker).
Plug-in ESP32-C5 node over ESP-NOW. Adds what the S3 can't do: 5 GHz deauth (targeted + broadcast, binary patch bypassing ieee80211_raw_frame_sanity_check), 802.15.4 Zigbee sniffer, 5 GHz PMKID capture, dual-band WiFi scan with auth column (WPA3 red-flagged). Pairs automatically on channel 1.
Autonomous handshake hunter with cyberpunk helmet face. RL channel picker persisted to SD. 4 modes: HUNT, STEALTH, SURGICAL, STORM. Inherits the full deauth correctness stack.
Unified hot/cold proximity submenu under Tools. BLE tracker hunt + passive tracker scan + sub-GHz (CC1101) finder + 2.4 GHz (nRF24) finder, all with the same geiger-style UI. Pick what you're hunting first, radio switches automatically.
Full SX1262 stack on the CAP-LoRa1262 hat — canonical init with BUSY pin, HSPI shared with SD, antenna-switch-before-begin. Scan / beacon / Meshtastic listener (with from/to/id header parse) / spectrum, all working on 433 / 868 / 915 / US LongFast.
USB-HID payload runner. TV-B-Gone. Samsung remote. Flashlight, stopwatch, calculator, morse, MAC randomizer, SD format, file browser. 6-palette theme engine.
POSEIDON ships with six swappable color schemes. Pick your mood.