HackerOS v3

Table of Contents

Device Overview

The SGP PHANTOM HackerOS is a compact, touchscreen-based cybersecurity multi-tool built on the ESP32-S3 microcontroller. It is designed for security researchers, penetration testers, and enthusiasts.

The device runs HackerOS v3, a custom firmware with a hacker-themed graphical interface offering dozens of tools organized in a scrollable main menu.

Hardware Specifications

First Boot & Navigation

⚡ Physical Buttons

The device has 3 physical buttons. Understanding each one is important before using the device.

Powering On

Press and hold the Power button for ~2 seconds. The HackerOS green boot animation will appear on screen, followed by the main menu. The buzzer will play a startup chime.

Touch Gestures

Audio Feedback

Secret Mode

Triple-press the BOOT button rapidly (within ~1 second) to toggle the hidden Apple Watch face display. Triple-press again to return to the Main Menu.

🛠️ Stock Firmware = Demo Only

The SGP PHANTOM is a fully open, programmable ESP32-S3 development board with a touchscreen, sensors, and connectivity built in. The HackerOS firmware is just one example of what it can run.

🎯 This device is designed for you to build your own code

What the stock firmware gives you

Apps & Features

4.1 — WiFi Tools

📡 MAC Scanner (WiFi Scan)

Scans all nearby WiFi networks and displays SSID, BSSID (MAC address), RSSI signal strength, and channel. Runs an async scan so the display stays responsive.

📡 Deauth Target

Sends 802.11 deauthentication frames to disconnect devices from a selected access point.

1. Device scans for nearby networks

2. Tap a target network from the list

3. Attack runs continuously — tap the green header to stop

📡 Beacon Spam

Floods the WiFi environment with hundreds of fake network names (SSIDs). Nearby phones and laptops will see their WiFi scanner fill up with ghost networks.

📡 Probe Sniffer

Passively listens for 802.11 probe request frames. Captures the MAC address and the saved SSID name that each nearby device is searching for. Tap CLEAR LOG to reset.

📡 Packet Monitor

Puts the WiFi adapter in promiscuous mode and counts raw packets by type (beacons, deauths, data). Displays a live packet rate graph.

📡 WiFi Recon (Channel Hopper)

Automatically sweeps all 13 WiFi channels while collecting AP information — essentially a full-band reconnaissance sweep.

📡 Net Stresser

Floods a selected WiFi target with authentication and/or association request packets to stress-test router hardware.

Tap FIRE to start. Packet count is shown in real-time. Tap STOP to end.

🎣 Free WiFi — Captive Portal Phishing

Creates an open hotspot named FreeWiFi_Movistar and serves a fake carrier login page. Any credentials entered by connecting users are captured and stored in the device.

4.2 — Bluetooth (BLE) Tools

4.3 — RFID & NFC Multitool EXTERNAL MODULE

The RFID & NFC tool supports 13.56 MHz technology — the global standard for contactless access cards, hotel keys, transit cards, payment cards, and NFC stickers.

Compatible Cards & Tags

App Buttons

How to Clone a Card — Step by Step

1. Open RFID Cloner from the Main Menu

2. Tap READ CLONE — log shows > MODE: READ CLONE

3. Hold the source card near the RFID antenna for ~1 second

4. Log shows [*] COPIED TO RAM! with a success beep ✅

5. (Optional) Tap EMULATE/SAVE → SAVE TO MEM to persist for later

6. Place a blank writable card near the antenna

7. Tap PASTE CLONE — log shows [*] Injecting... then [*] DONE! ✅

Log Viewer Controls

4.4 — USB HID Tools

⌨️ Bad USB — Payload Injector

Emulates a USB keyboard and automatically executes pre-programmed keystroke sequences on the connected host. Used for HID injection testing and security awareness demos.

⌨️ OTG BruteForce — PIN Cracker

Automatically tries all numeric PINs from 0000 to 9999 by typing them as a USB keyboard with Enter after each attempt.

The display shows the current PIN in large digits, a progress bar, percentage complete, speed (PINs/sec) and estimated time remaining (ETA).

🖱️ USB Mouse

Emulates a USB HID mouse via OTG, allowing you to control cursor movement on any connected device.

4.5 — Remote Control & BLE Bridge

🌐 Remote Control — Web Interface

Creates a WiFi Access Point and hosts a browser-based control panel. Connect from any phone or laptop to control the device remotely.

🌐 SGP Wired — Advanced Dashboard

Hosts a full-featured web dashboard over WiFi for remote access to multiple device features simultaneously.

🔵 BLE Bridge — Wireless Bluetooth Keyboard

Turns HackerOS into a wireless Bluetooth keyboard that can be controlled from any phone browser on the same WiFi network.

1. Launch BLE Bridge from the menu

2. Connect your phone/laptop to WiFi: SSID HackerOS-BLE · Password hacker123

3. Open a browser and go to 192.168.4.1

4. On the target PC, pair via Bluetooth to HackerOS Keyboard

5. Use the web page to type text or send special keys (arrows, Win, Enter)

6. Tap EXIT BRIDGE on device or tap header to stop

4.6 — Watch Faces

Select Watch Faces from the Main Menu to access 10 different clock designs, including analog, digital, and hybrid styles. Time is tracked using the device's uptime timer.

Tap the screen to cycle between watch face designs.

4.7 — Games (Arcade Ops)

Select Arcade Ops from the Main Menu to open the games sub-menu. All games are fully playable on the touchscreen.

4.8 — BME680 Environmental Sensor BUILT-IN

The Bosch BME680 is a precision multi-parameter environmental sensor. It gives HackerOS the ability to monitor air quality and environmental conditions in real-time.

How the Gas / Smoke Sensor Works

The BME680 heats a metal-oxide element to ~320 °C and measures how its electrical resistance changes when exposed to reducing gases. A high resistance = clean air. A low resistance = smoke, VOCs, alcohol, or chemical fumes present.

Apps that use the BME680

4.9 — Utilities & Other Apps

Wiring the Modules

MFRC522      ESP32-S3
───────      ────────
SDA   ──────  GPIO 43
SCK   ──────  GPIO 18
MOSI  ──────  GPIO 2
MISO  ──────  GPIO 17
RST   ──────  GPIO 3
3.3V  ──────  3V3
GND   ──────  GND

BME680     ESP32-S3
──────     ────────
SDA  ──────  GPIO 11
SCL  ──────  GPIO 10
VCC  ──────  3V3
GND  ──────  GND
SDO  ──────  GND
CS   ──────  3V3

Programming the Device

What You Need

Step 1 — Install ESP32 Board Support

1. Open Arduino IDE → File → Preferences

2. In "Additional Board Manager URLs", add:

3. Go to Tools → Board → Board Manager

4. Search esp32, install "esp32 by Espressif Systems" version 2.x or 3.x

Step 2 — Board & Settings

Go to Tools → Board → ESP32S3 Dev Module, then configure:

Step 3 — Install Libraries

Go to Sketch → Include Library → Manage Libraries and install all libraries in Section 7.

Step 4 — Open the Project

1. Go to File → Open

2. Navigate to the HackerOS_v3/ folder

3. Open HackerOS_v3.ino

Step 5 — Upload Firmware

1. Connect the device via USB-C

2. If not detected: hold BOOT, press RESET, release BOOT to enter bootloader mode

3. Click the Upload (→) button in Arduino IDE

4. Wait for compilation and upload to complete (~2–3 minutes)

5. The device reboots automatically into HackerOS ✅

Required Libraries

Install from Sketch → Include Library → Manage Libraries:

Troubleshooting

Legal Disclaimer

This device is sold as a hardware and firmware development tool for professional use only.