4in HaleHound COMPLETE BUILD

4in HaleHound COMPLETE BUILD

$245.00
Skip to product information
4in HaleHound COMPLETE BUILD

4in HaleHound COMPLETE BUILD

$245.00
💀☠️HaleHound-CYD 4"☠️💀 — Prebuilt Multi-Radio Security Toolkit 

Hand-built. Fully tested. Ready to enjoy.   NO BATTERY INSTALLED  and neither is the PN-532 ... Additionally you will need your own Antennas as everyone has there favorite !  I recommend Bolton Darts , for 2.4 ghz and the ANT700 , for SubGhz !!! the links will be at the bottom of the description  THE UNITS SHIP WITHOUT FIRMWARE, YOU WILL NEED TO GO TO FLASH.HALEHOUND.COM, ONCE YOUR UNIT ARRIVES.   CURRENTLY 5 1/2 WEEKS SHIPPING AFTER ORDER. I HAND BUILD EACH ONE SOME TIMES ITS FASTER 
Recommended antennas & battery:
I SHOULDN'T HAVE TO SAY THIS BUT SOME PEOPLE JUST DON'T COMPUTE  🤪🤪 YOU KNOW WHO YOU ARE  🤡  This is not a kit — the assembly and wiring are done. Two jobs are yours , flash the firmware at FLASH.HALEHOUND.COM, and solder your battery.. to the BAT+ / BAT− pads. Then turn it on and go!! 

The HaleHound-CYD 4" is a fully assembled, hand-wired multi-radio security research tool, hand-built on the QDtech 4" ESP32 touch display (ST7796U, 320x480). Every unit is built and tested on all radios by me 

 

 

 


Over 40 attack modules span WiFi, Bluetooth, SubGHz, 2.4GHz, NFC/RFID, and GPS — all driven from a full-color 4" touchscreen. WiFi attacks include a deauther, beacon spammer, probe sniffer with automatic Evil Twin deployment, captive portal credential harvesting (GARMR), packet monitor, auth flood, and station scanner. Bluetooth includes BLE Predator (scan, GATT recon, clone, honeypot credential trap), BLE vibe check, BLE spoofing across Apple/Samsung/Google/Tile, Airoha RACE CVE exploits for link key extraction from Sony/JBL/Marshall headphones, and Lunatic Fringe for AirTag/SmartTag/Tile tracking and replay. The external NRF24L01+PA+LNA at 27dBm handles 2.4GHz spectrum analysis, promiscuous packet sniffing, MouseJack keystroke injection against wireless keyboards, and broadband 2.4GHz vibe check. The CC1101 SubGHz radio covers 300-928 MHz for signal replay, brute force attacks, SubGHz vibe check, spectrum analysis, Tesla charge port opening, and Flipper Zero .sub file playback from SD card. Add a PN-532 (not included) and the NFC/RFID suite reads, writes, clones, brute forces, and emulates MIFARE Classic cards. GPS enables wardriving with SD card logging and live positioning. A full detection suite monitors WiFi, SubGHz, and 2.4GHz bands for hostile RF activity — defensively.
The firmware runs a dual-core architecture — all radio operations on Core 0, all UI rendering on Core 1. You can be running a vibe check at full power and scrolling menus with zero stutter. Every radio transmits at maximum power with proper external power regulation and decoupling for reliable field operation.

What's included: Fully assembled HaleHound-CYD 4" unit with CC1101 SubGHz radio, NRF24L01+PA+LNA 2.4GHz radio, ATGM GPS module, and USB-C cable. Everything wired, mounted, and tested. Not included: battery, PN-532, antennas, or firmware.

Built for: Authorized penetration testing, security research, red team operations, RF experimentation, and wireless security education. This device is for use on networks and systems you own or have explicit written permission to test. You are responsible for compliance with all applicable laws and RF regulations.

All units are sold AS-IS with NO WARRANTY, express or implied. All sales are
  final. No refunds, no returns, no exchanges. Each unit is tested and verified  
  functional before shipping.
                                                                                     
  By purchasing this device, the buyer acknowledges and agrees:

  1. This device is a security research tool intended exclusively for authorized 
  penetration testing, security research, education, and lawful RF
  experimentation on systems and networks the buyer owns or has explicit written 
  authorization to test.
  2. The buyer assumes ALL responsibility for how this device is used. Any
  illegal, unauthorized, or malicious use is solely the responsibility of the    
  buyer.
  3. The seller assumes NO liability for any damages, legal consequences, fines, 
  injury, or loss arising from the use or misuse of this device.                 
  4. The buyer agrees to comply with all applicable local, state, federal, and
  international laws, including but not limited to FCC regulations, the Computer 
  Fraud and Abuse Act (CFAA), and all wireless transmission laws in their
  jurisdiction.                                                                  
  5. The buyer agrees to indemnify and hold harmless the seller from any and all
  claims, damages, or legal actions resulting from the buyer's use of this       
  device.
  6. By completing this purchase, the buyer confirms they are 18 years of age or 
  older and accepts these terms in full.



halehound.com | github.com/JesseCHale

✍️ Signature required on delivery.

I’m a one-person shop, and I’ve been hit hard by fraudulent chargebacks — people who receive their order, then dispute the charge to take it for free. As a small business I can’t afford to eat those losses, so I don’t have a choice: every order over $100 ships signature-required, with tracking and delivery confirmation. Someone just needs to be home to sign. Honest customers are never the problem — thank you for supporting a small builder.

You may also like