💀☠️HaleHound-CYD 3.5"☠️💀 — Prebuilt Multi-Radio Security Toolkit
Hand-built. Fully tested. Ready to enjoy. NO BATTERY INSTALLED and neither is the PN-532 ... Additionally you will need your own Antennas as everyone has there favorite ! I recommend Bolton Darts , for 2.4 ghz and the ANT700 , for SubGhz !!! the links will be at the bottom of the description THE UNITS SHIP WITHOUT FIRMWARE, YOU WILL NEED TO GO TO FLASH.HALEHOUND.COM, ONCE YOUR UNIT ARRIVES. CURRENTLY 5 1/2 WEEKS SHIPPING AFTER ORDER. I HAND BUILD EACH ONE SOME TIMES ITS FASTER
Recommended antennas & battery:
I SHOULDN'T HAVE TO SAY THIS BUT SOME PEOPLE JUST DON'T COMPUTE 🤪🤪 YOU KNOW WHO YOU ARE 🤡 This is not a kit — the assembly and wiring are done. Two jobs are yours , flash the firmware at FLASH.HALEHOUND.COM, and solder your battery.. to the BAT+ / BAT− pads. Then turn it on and go!!
The HaleHound-CYD 3.5" is a fully assembled, hand-wired multi-radio security research tool, hand-built on the Hosyond 3.5" ESP32 touch display (ST7796U, 320x480). Every unit is built and tested on all radios by me !!
Over 40 attack modules span WiFi, Bluetooth, SubGHz, 2.4GHz, NFC/RFID, and GPS — all driven from a full-color 3.5" touchscreen. WiFi attacks include a deauther, beacon spammer, probe sniffer with automatic Evil Twin deployment, captive portal credential harvesting (GARMR), packet monitor, auth flood, and station scanner. Bluetooth includes BLE Predator (scan, GATT recon, clone, honeypot credential trap), BLE vibe check, BLE spoofing across Apple/Samsung/Google/Tile, Airoha RACE CVE exploits for link key extraction from Sony/JBL/Marshall headphones, and Lunatic Fringe for AirTag/SmartTag/Tile tracking and replay. The external NRF24L01+PA+LNA at 27dBm handles 2.4GHz spectrum analysis, promiscuous packet sniffing, MouseJack keystroke injection against wireless keyboards, and broadband 2.4GHz vibe check. The CC1101 SubGHz radio covers 300-928 MHz for signal replay, brute force attacks, SubGHz vibe check, spectrum analysis, Tesla charge port opening, and Flipper Zero .sub file playback from SD card. Add a PN-532 (not included) and the NFC/RFID suite reads, writes, clones, brute forces, and emulates MIFARE Classic cards. GPS enables wardriving with SD card logging and live positioning. A full detection suite monitors WiFi, SubGHz, and 2.4GHz bands for hostile RF activity — defensively.
The firmware runs a dual-core architecture — all radio operations on Core 0, all UI rendering on Core 1. You can be running a vibe check at full power and scrolling menus with zero stutter. Every radio transmits at maximum power with proper external power regulation and decoupling for reliable field operation.
What's included: Fully assembled HaleHound-CYD 3.5" unit with CC1101 SubGHz radio, NRF24L01+PA+LNA 2.4GHz radio, ATGM GPS module, and USB-C cable. Everything wired, mounted, and tested. Not included: battery, PN-532, antennas, or firmware.
Built for: Authorized penetration testing, security research, red team operations, RF experimentation, and wireless security education. This device is for use on networks and systems you own or have explicit written permission to test. You are responsible for compliance with all applicable laws and RF regulations.
All units are sold AS-IS with NO WARRANTY, express or implied. All sales are
final. No refunds, no returns, no exchanges. Each unit is tested and verified
functional before shipping.
By purchasing this device, the buyer acknowledges and agrees:
1. This device is a security research tool intended exclusively for authorized
penetration testing, security research, education, and lawful RF
experimentation on systems and networks the buyer owns or has explicit written
authorization to test.
2. The buyer assumes ALL responsibility for how this device is used. Any
illegal, unauthorized, or malicious use is solely the responsibility of the
buyer.
3. The seller assumes NO liability for any damages, legal consequences, fines,
injury, or loss arising from the use or misuse of this device.
4. The buyer agrees to comply with all applicable local, state, federal, and
international laws, including but not limited to FCC regulations, the Computer
Fraud and Abuse Act (CFAA), and all wireless transmission laws in their
jurisdiction.
5. The buyer agrees to indemnify and hold harmless the seller from any and all
claims, damages, or legal actions resulting from the buyer's use of this
device.
6. By completing this purchase, the buyer confirms they are 18 years of age or
older and accepts these terms in full.
halehound.com | github.com/JesseCHale