New Additions in v.0.4.0

kvxputer 0.4.0 adds Tools apps and three detectors, tightens a few existing apps, and fixes screen flicker on the main menu and the two hunters that redraw while they scan. Full builds get the detectors and the heavier Tools. Keyboard boards get the generators and audio tools. BadUSB Hunter needs USB OTG.

Apps

Roku Remote (BETA). Finds a Roku with SSDP, or takes an IP you type. The last device (IP, name, serial) is saved and probed first next time. The remote covers d-pad, select, back, home, play, pause, rewind, fast-forward, volume, mute, info, and instant replay. Hold P to power off (with a confirm). S types into Search. A lists installed apps, filters them as you type, and launches one. D picks another device. Fn shows the key legend. The Roku needs Settings, System, Advanced, Control by mobile apps set to Enabled.

New tools

Barcode (Tools). Code 128, Code 39, Codabar, EAN-13, EAN-8, and UPC-A, drawn full screen until you leave.
Passgen (Tools). Random passwords with length, character sets, and batch size, plus an optional site and username. Saves under /kvxputer/myPasswords.
Combo (Tools). Master-lock candidates from the dial positions you enter.
DTMF (Tools). Dialer, Bluebox, Redbox (US, CA, UK), and Misc. Boards with a microphone can listen and print digits. Needs a speaker or buzzer. Off on lite builds.
Morse (Tools). Play a typed line, key dits and dahs by hand, or decode from the microphone. Speed is saved in words per minute (default 20). Same speaker and lite gates as DTMF.
Drone ID (Tools). Listen-only OpenDroneID, with separate WiFi and BLE scans. The list shows ID and RSSI. Detail shows position, altitude, speed, heading, and operator location when the broadcast includes them. A new ID beeps once. Full builds only.
BLE Hunter (BLE). Counts advertisements and unique devices in 10-second windows and beeps past a saved threshold. Select pauses the alert. Full builds.
PineAP Hunter (WiFi). Groups scan results by BSSID and beeps when one radio advertises at least the saved number of SSIDs (default 5). Select opens that SSID list. Full builds.
BadUSB Hunter (USB). Reads a plugged-in device as a USB host and shows VID:PID, class, and interfaces. A keyboard is HID-Only, storage is Device OK, and a composite HID device or a Hak5 Rubber Ducky (03EB:2403) is marked suspicious. The LED blinks red for HID and stays green otherwise. Leaving the app restores USB device mode. Full builds with USB OTG.

Updates to existing apps

Jam Detect. Select freezes the channel hop. The last-frame RSSI is drawn against an adjustable floor, and a burst over the packets-per-second threshold beeps. Both thresholds are saved.
BadUSB. Insert adds one DuckyScript line (Text, Timing, Modifiers, or Keys) and returns to the editor.
QR codes. Space flips light and dark modules.
Evil Portal. The softAP DHCP lease now includes the gateway as DNS, DHCP option 114 (captive portal URI) on newer ESP-IDF, and an RFC 8908 application/captive+json reply so phones open the page instead of sitting on “no internet.”
Mainscreen shortcuts. A key can have a tap app and a separate hold app. Hold about 450 ms for the hold binding. A short press still launches the tap binding.

Bugfixes

Main menu. Moving between tiles no longer shimmers the grid. The whole frame is drawn offscreen, and each tile is clipped so icon arcs cannot paint into the next cell.
PineAP Hunter. The list redraws only when the BSSIDs, SSID counts, cursor, or threshold change, so the scan counter no longer repaints the screen every two seconds. Columns stay fixed width. Opening an SSID list is safe if that BSSID drops out of the scan.
BadUSB Hunter. The body redraws when a device connects or leaves, not on every poll. A device that stays plugged in is not analyzed again.
Microphone. Capture silences the speaker first, so DTMF and Morse listen do not squeal or come back empty. Samples are read in bulk from I2S instead of one sample at a time.

SD pack

New Evil Portal pages grouped by airlines, brands, hotels, gyms, railways, ISPs, shops, and theme parks, including forgot-password variants and ap.config.txt files. Check the Github repository for instructions
Extra BadUSB scripts, including WiFi stealers and a kiosk-evasion script. Check the Github repository for instructions

You can install it directly via M5burner or manually with the repository instructions

Repo: github.com/kvx17/kvxputer

If you have issues, or want to request a feature, feel free to submit a request on GitHub

Only use it on stuff you own or have permission to test.

Special thanks to all the people downloading the firmware <3

PS: I'm working on porting this to the Tab5 to use with the keyboard and larger screen, stay tunned! Sneak peak below 😜 I will post the firmware file on m5burner soon, although is still in development so be patient

https://preview.redd.it/y3g9tasxfeuh1.jpg?width=2880&format=pjpg&auto=webp&s=7276e71230e14d8737a08cf85e5cd737a2dfd6f7

I kept switching between Bruce and Evil Cardputer depending on what tools I needed, since each had things the other didn't. And I thought, what if a firmware can do both? So I started combining them into one codebase, picking the best parts of each, rebuilding what didn't fit together, rebuilding the UI, and adding what was missing from both. Where I spent most of my time is customization.

At this point it's grown well past being just a merge of the two. UI and module setup got rebuilt, and a lot of the feature set isn't from either original. So while I'll always credit both projects for where this started, I don't really call it a fork anymore.

That became kvxputer.

Key features of the firmware:

kvxkeyboard HID, my own version of a multi device bluetooth controller via bluetooth or USB, with lots of features (full keyboard, mouse, media, video, presenter, etc.) and native Joystick support for mouse simulation.
Charging app, intended to use while charging the Cardputer to put it in sleep mode, with some extra features when active like clock, calendar, progress bar, and LED light to indicate charge.
Main menu now supports key shortcuts you can bind to any app or setting, so the stuff you use constantly is one press away.
Use G0 to fake a shutdown of the Cardputer, this turns off the LED and display instantly to mimic an off state, while whatever you're running stays active. Holding G0 always takes you back to the main menu.
LEDs are fully customizable now too, colors and effects, not just on/off.
Modules got a lot easier to set up, Unit Scroll, Joystick, PaHub, RFID readers, RF modules, all have their own config screens now instead of hoping the device picks them up.

Also included all the tools and features you would expect from a security-focused firmware:

wifi tools (scanning, portals, deauth, sniffing, plus NetOps)
BLE with a full HID remote
BadUSB scripting
sub ghz
RF
NRF24
IR with a flipper style universal remote
RFID/NFC
GPS wardriving
LoRa/FM/Ethernet depending on your board

Runs on Cardputer, Cardputer ADV, and builds for the StickS3 too.
Lite build available, and it's fully usable button-only on the StickS3 (still under development).
You can flash it directly from M5Burner or manually by checking the repo below