ESP32 Marauder Double Barrel 5G adds 5GHz deauthentication with RTL8720DN module
The ESP32 Marauder – Double Barrel 5G is a dual-chip hacking and penetration testing tool that supports both 2.4 GHz and 5 GHz Wi-Fi scanning, deauthentication, and can be used for penetration testing, wireless research, and learning security concepts.
The device is built around an ESP32, and can be used with Flipper Zero or as a standalone device. Additionally, it features a dedicated GPS receiver and a CC1101 Sub-GHz transceiver (433 MHz) for wireless experiments. Other features include a 2.8-inch touchscreen, 800 mAh rechargeable battery, micro-SD slot for logs/firmware/Flipper FAP files.
There are also dual USB-C interfaces (one for charging/ESP32 recovery and one for BW16 firmware update), and four external antenna ports (Wi-Fi ×2, GPS, Sub-GHz) housed in a 3D-printed enclosure.
Specifications
| Main module | Description |
|---|---|
| ESP32 Wi-Fi & Bluetooth SoC | The device's main module is built around an ESP32, which provides Wi-Fi and Bluetooth capabilities. |
| Storage | A microSD card slot for firmware, logging, and data storage. |
| Display | A 2.8-inch touchscreen with included stylus. |
| Wireless 2.4 GHz Wi-Fi 4 and Bluetooth 4.2/5.x | BW16 RTL8720DN module used as dual-band scanning/deauth controller with Flipper Zero. |
| Dual-band 2.4 GHz and 5 GHz (Wi-Fi 5 GHz features limited by controlling app/firmware) | Supports BLE 5.0, but it's not mentioned in the board's specifications. |
| A dedicated GPS chipset with up to ~10 dB output per antenna. | |
| Dedicated GPS chipset | NMEA/logging accessible to Marauder or Flipper. |
| 2x SMA-style connectors | 2x Wi-Fi, 1x GPS, 1x sub-GHz 433 MHz. |
| USB Type-C port for charging and programming the ESP32 | USB Type-C port used by the BW16/RTL8720DN for firmware updates. |
| Total of 2x USB Type-C ports | Expansion – Onboard headers/pads exposed for flashing. |
| Power USB Type-C for power and charging | Built with an 800mAh rechargeable battery. |
| Dimensions – TBD | Enclosure – Full 3D-printed enclosure/case included. |
Software Support
The ESP32 Double Barrel 5G relies on a dual firmware system where the onboard ESP32 runs Marauder or alternative builds like Bruce, and the BW16/RTL8720DN module is controlled by a Flipper Zero running Momemtum firmware (set UART to pins 15/16) and a small FAP file placed in /Apps/GPIO to enable 5 GHz features.
The ESP32 handles standalone functions like Wi-Fi scanning, deauth, GPS logging, and Sub-GHz functions. Update can be pushed from the microSD card or over USB-C. GPS data is sent over a UART NMEA stream, and you can switch which device powers/reads it. Full upgrade and recovery steps can be found in the GitHub repository.
Hardware Batches
The device has gone through three hardware batches with small but important changes.
- Batch 1 (June 2025): Used a 4-pin GPIO header for firmware updates, had a manual toggle switch to select GPS power, and shipped with a separate "ESP32 refresher" tool for recovery.
- Batch 2 (August 2025): Replaced the GPIO header with a USB-C port for easier updates and charging.
- Batch 3 (September 2025): Integrates the "refresher" circuit directly into the board, so reflashing the ESP32 and BW16 modules can be done through USB-C without extra hardware, and the GPS power source is now switched automatically instead of using a manual toggle.
Purchase and Shipping
The ESP32 Marauder – Double Barrel 5G (Batch 3) can be purchased from the Tindie store for $165, with case color options in black or white. The device ships from Australia and starts at $21.95, with tracked delivery in 1–2 weeks.
The package includes the unit with a 3D-printed case, four antennas, and a stylus.