Bruce open-source hacking firmware gets first official PCB

The Bruce Firmware team has partnered with PCBWay to develop a PCB that officially supports the platform. Dubbed the Bruce PCB v1 Smoochiee, this open-source PCB features compatibility with Lilygo and M5stack components as well as HASL with lead, purple solder mask, and a white silkscreen design. Once built, the device can execute various red team ethical hacking attacks. While a dedicated PCB is an exciting milestone for the firmware, getting to this point is just as impressive.

Bruce Firmware, also known as predatory firmware, is a project developed to bring the features of Flipper Zero to more cost-effective and accessible hardware while expanding the feature set. As a result, Bruce Firmware has become the de facto firmware for cybersecurity red teaming across several devices manufactured by Lilygo and M5stack. Due to the flexibility of Bruce Firmware and the expansiveness of Lilygo and M5stack products, red teams can economically craft a more capable device than a stock Flipper Zero.

For those new to red teaming, it involves executing ethical cyberattacks against an organization to test its cybersecurity practices. In this context, Bruce Firmware and the v1 Smoochie excel in network attacks and attacks against many wireless protocols, including WiFi, Bluetooth, RF, IR, and FM. While the list of exploits for each protocol is extensive, a typical WiFi attack Bruce can execute is known as "Evil Portal." This phishing attack generates a WiFi access point named something like "Free WiFi," where curious users can sign into a fake login page in an attempt to connect to the network. Once the user connects, Bruce sends all their authentication details to the device hosting the access point. For many, this is a simple enough attack to avoid; however, Bruce is capable of much more.

For those interested in the complete list of supported exploits or for more information on the Bruce PCB v1 Smoochie, kindly visit the resources below.