LIBRARY — FIRMWARE RELEASES
Every release, one flash away.
Each release ships the same four images plus an SD-card update binary. The browser flasher always installs R150; older rows stay for reference, downloads and manual CLI installs.
R150CHAMELEON ULTRA APPCurrent2026-09-09 · 3.2 MB
- New Device > Chameleon Ultra remote: BLE central app that auto-connects, subscribes and reads device info the moment you open it, and auto-reconnects if the link drops
- Full dashboard — VERSION / MODE (tap to toggle EMULATOR ⇄ READER) / BATTERY (% + mV) / SLOT 1–8 (SLOT- / SLOT+)
- READ HF (ISO14443-A UID/ATQA/SAK) and READ LF (EM4100 tag ID); EMU HF / EMU LF write and enable the active slot for MIFARE Classic 1K or EM4100 emulation
- Connection rewrite: matches the Chameleon by name OR advertised service UUID, tries Nordic UART Service first with 0xC760 legacy fallback, and accepts the real STATUS_SUCCESS (0x68) so BATTERY/MODE/VERSION populate
- No-blink partial redraws, live USB-serial scan diagnostics, and a permanently visible full-width BACK key
- Carries everything R119–R143: splash boot-loop fix, BLE crash guard, BadUSB suite, wardrive fixes, MAC Monitor, SSID Generator, Scan AP survey, Flock dashboard, GPS SIGNALS/BEST dB meter, Matrix default theme, 40 MHz display
R143MATRIX DEFAULT2026-09-04 · 3.2 MB
- Matrix (phosphor-green terminal) is now the factory-default theme — splash art, dashboards, tiles and status pills
- Your saved theme choice is still remembered and wins; pick Matrix once in Device > Theme to switch a saved choice
- All four themes remain available in Device > Theme: Watch Dogs, Matrix, Cyber 2077, Spider
- Carries everything R119–R142: splash boot-loop fix, BLE crash guard, BadUSB suite, wardrive fixes, MAC Monitor, SSID Generator, Scan AP survey, Flock dashboard, GPS SIGNALS/BEST dB meter, 40 MHz display, SD update progress bar
R122WARDRIVE SHARK UI2026-09-02 · 3.2 MB
- Wardrive now runs as a first-class SHARK dashboard — live tiles (networks / BLE / SATS), survey log panel with GPS state and position
- CH-/CH+ merge into one wide cyan TAG POI key; PAUSE/RESUME and BACK keep their places and actually respond
- Legacy Marauder wardrive painter and its full-width POI tap interception removed on V8 — no more overpainted screens or eaten taps
- Same WiGLE CSV, GPS, SD and channel-hop logging as before — only the screen changed
R121BADUSB CONTROL FIX2026-09-02 · 3.2 MB
- BadUSB suite taps register — screens now use the true-touch threshold instead of the default that ate light taps through the case
- List rebuilt with taller rows and a wide BACK key — every target is hittable and exit always works
- Tool set and payloads unchanged from R120; BLE crash guard still active
R120BADUSB TOOL SUITE2026-09-02 · 3.2 MB
- Multi-use BadUSB tool suite: tool list with parameterized payloads instead of one-shot scripts
- Launches through the R119 BLE crash guard; OTA slot stays just under the 3,342,336-byte limit
R119SPLASH LOOP FIX2026-09-02 · 3.2 MB
- BLE start-up removed from boot — no more splash loop when the stack fails to init
- First BLE use is crash-guarded; everything else unchanged from R118
R118STABLE BOOT2026-09-02 · 3.2 MB
- Fixes the R117 splash boot-loop: the Arduino NimBLE library folder was being externally swapped mid-builds (1.4.3 vs 2.x), and R117 linked mixed objects
- NimBLE-Arduino 2.5.1 is now pinned inside the project (.build-libraries) — builds are reproducible again (same size twice)
- Carries every fix: Device Info back, true-touch keys, instant STOP, BLE scan window, IQ Family Watch
R117INFO BACK2026-09-01 · 3.2 MB
- BAD BUILD — splash boot-loop on real hardware (library swap corrupted the link). Superseded by R118
- The Device Info back-button fix itself was correct and is included in R118
R114RESPONSIVE STOP2026-09-01 · 3.2 MB
- STOP and BACK on the BLE prank screens now react the instant you tap them — scans used to block the loop for 1.2–2 s
- BLE Radar / BLE Hunt / Shark Hunt run a continuous non-blocking scan; the list redraws at ~2.5 FPS and refreshes every 8 s
- Device reports its own version; Marauder credit unchanged
R113BLE SCAN FIX2026-09-01 · 3.2 MB
- BLE Radar / BLE Hunt / Shark Hunt now actually find devices — the scan window defaulted to 0, so the radio never listened
- All prank scan setups now use the same proven interval/window pair as the BT tools
- Everything from R112: IQ Family Watch, audit trail, PIN lock, attack cap
R112IQ FAMILY WATCH2026-08-31 · 3.2 MB
- Full-screen FAMILY DEVICE DETECTED alert when a SharkDeck joins the M5SHARK access point
- Measured proximity: live station RSSI in dBm, VERY CLOSE / NEAR / IN RANGE, 5-bar meter
- Cyber Defense > IQ Family Watch toggle (default on, 60 s re-pop cooldown)
- SharkDeck OS announces itself once, only on M5-SHARK networks — nothing on other Wi-Fi
R111SECURITY OPS2026-08-31 · 3.2 MB
- GPS-timestamped audit trail on SD for every transmit session
- Attack PIN lock and attack time cap for all transmit apps
- One-tap session reports; 19 Cyber Defense detectors on real detection state
- Paused-first dashboards with in-app scanning for all 13 transmit tools
Download current binaries
releases/R150/bootloader.binreleases/R150/partition-table.binreleases/R150/ota_data_initial.binreleases/R150/firmware.binreleases/R150/update.bin
update.bin is the SD-card OTA image (Device → Update Firmware). The other four are the CLI flash set — always the current release (R150).