Updated: Mar 28, 2024
Disclaimer on Legal Use of the Flipper Zero
Like many hacking tools, the Flipper Zero is perfectly legal to own and use—provided you follow local laws and regulations. It’s a powerful educational device for learning about wireless protocols, penetration testing, and signal manipulation. IT Audit Labs does not condone illegal activity and encourages all users to operate the Flipper Zero responsibly and ethically.
My name is Cameron Birkland, and outside of my day job as a security engineer, I’ve been spending quite a bit of time experimenting with the Flipper Zero.
Due to its small form factor and numerous abilities to “hack” objects within reasonable proximity, the Flipper Zero has received some extensive news coverage, and not always in a positive light. Suddenly, it’s not so hard for someone with little knowledge of radio frequencies to capture and replay a garage door remote, or perform a DoS attack on an entire room of smartphones. Over the course of this article, I cover what I’ve learned about the device, review its capabilities, how its functionality can be expanded through firmware or additional hardware, and share a few tips for how you can get started.
What is a Flipper Zero?
The Flipper Zero is a portable multi-tool for pentesters, hackers, tinkerers, and anyone curious about wireless security. This compact device allows users to interact with Sub-1GHz RF signals, NFC, RFID, infrared, Bluetooth Low Energy (BLE), and even iButton technology.
About the size of a smartphone and loaded with an intuitive UI, the Flipper Zero has gained viral popularity for making wireless signal experimentation accessible—without needing a lab or expensive equipment.
What can you do with a Flipper Zero?
The Flipper Zero’s core strength lies in its ability to capture and replay Sub-1GHz signals. That means users can interact with:
- Garage door remotes
- Wireless doorbells
- Smart plugs and switches
- Remote-operated gates
- Security sensors
With minimal setup, you can clone, store, and replay a signal. Personally, I’ve used my Flipper Zero to open my garage door and activate a smart outlet—no computer required.
NFC and RFID Capabilities
The Flipper Zero can read, emulate, and even write to NFC and RFID tags. Whether you’re working with contactless access cards, RFID fobs, or NFC tags, the Flipper Zero offers a gateway to analyzing and experimenting with these commonly used technologies.
There are even use cases where people have used the Flipper Zero to read pet microchips and help reunite lost pets with their owners.
Cloning Keycards and Fobs (With Permission)
While modern access systems using secure protocols are harder to break, many buildings still rely on outdated systems that the Flipper Zero can clone easily. Before testing on any access control system, always get proper authorization.
Bluetooth Low Energy (BLE) and DoS Attacks
The Flipper Zero can interact with BLE devices, making it possible to annoy nearby smartphones with spammed pairing requests using firmware like Xtreme. In some cases, users have triggered endless pop-ups on iPhones, Apple TVs, and other BLE-enabled devices. These Flipper Zero Bluetooth attacks are limited in range, but highlight real-world vulnerabilities in consumer electronics.
Expanding the Flipper Zero With Firmware and Accessories
Popular Flipper Zero Firmware Options
- Unleashed
- Xtreme
- RogueMaster
Each firmware unlocks advanced features like support for rolling code protocols, customizable UIs, and additional wireless attack modules—far beyond the stock firmware capabilities.
These firmware packages transform the Flipper Zero into a far more powerful hacking tool, making it ideal for advanced pentesting experiments.
Flipper Zero GPIO & Peripheral Devices
The Flipper Zero includes GPIO pins that allow you to connect it to compatible hardware, such as:
- Wi-Fi Devboards (for remote access and wireless firmware updates)
- NRF24 Boards (for sniffing and injecting 2.4GHz signals from wireless mice/keyboards)
- Video Game Module (featuring HDMI output, Raspberry Pi RP2040 chip, and more)
These accessories drastically expand what the Flipper Zero can do—from emulating keyboards to acting as a lightweight gaming console.
2024 Update: Flipper Zero Video Game Peripheral
The new Video Game Module adds an HDMI port, accelerometer, gyroscope, and 14 GPIO pins—powered by the Raspberry Pi RP2040 microcontroller. This module turns your Flipper Zero into a standalone platform for gaming, embedded development, or additional I/O experimentation.
2024 Update: Flipper Zero Faces Potential Ban in Canada
In early 2024, Canada’s Ministry of Innovation proposed a Flipper Zero ban, citing rising car thefts using devices capable of cloning remote keyless entry systems. The policy also targets tools like the HackRF One, but the Flipper Zero is clearly the primary focus.
Critics argue that banning the Flipper Zero stifles security research and does nothing to fix the root issue: insecure wireless protocols in modern vehicles and devices. Outlawing security tools won’t stop bad actors—it will only hinder ethical hackers and cybersecurity professionals.
The M1: A New Flipper Zero Competitor?
In February 2024, the Monstatek M1 launched on Kickstarter as a direct competitor to the Flipper Zero. It features nearly identical hardware, with built-in Wi-Fi and a cleaner design—but lacks the playful personality of the Flipper’s dolphin mascot.
While the M1 looks promising, its similarity to the Flipper Zero means that owning both is likely redundant.
Getting Started With the Flipper Zero
To begin using the Flipper Zero, purchase from the official Flipper Zero Store. Avoid third-party sellers to steer clear of counterfeit devices.
Recommended starter items:
- Screen protector (to prevent scratches)
- Silicone case (for drop protection)
- Wi-Fi devboard (for firmware updates and wireless hacking experiments)
Once you’ve got your device, explore the Flipper Forum, Reddit, and GitHub projects. There’s a huge community sharing plugins, payloads, and tutorials. And remember—if an experiment doesn’t work, there’s always another signal to capture.
Why Flipper Zero Matters for Cybersecurity
The Flipper Zero is more than a toy—it’s a wake-up call for physical and wireless security. Many commonly used protocols are outdated and vulnerable to capture and replay. That includes systems tied to homes, businesses, and even vehicles.
At IT Audit Labs, we view the Flipper Zero as an essential part of modern penetration testing. From RF signal auditing to physical access assessments, this device helps us identify real-world weaknesses before attackers do.
2024 Update: What is the M1 and how does it compare to the Flipper Zero?
As of February 2024, a new device with some striking similarities to the Flipper Zero was announced on Kickstarter by the company Monstatek. The campaign has been very successful, raising well over $1,000,000. Known as the M1, the hardware and features are nearly parity with the Flipper Zero, with the exception of the M1 having built-in Wi-Fi. These devices are extremely similar in size and shape, and the button layout on the new M1 is identical. A notable difference between the two devices is that the Flipper Zero takes on a more “fun” personality with its dolphin character, while the M1 has a cleaner, more mature look. The M1 has a retail price of $165 and the Flipper Zero sells for $169.
Given the novelty of the Flipper Zero, it’s surprising to see such a similar device attempting to occupy the same niche. Because the devices are so extremely similar, there are few advantages to owning both of them – they have the same capabilities in a similarly-sized case.
Want to know more?
This blog post was initially inspired by our bi-monthly podcast – The Audit – check out the full podcast episode below, or you can listen in on Apple Podcasts or Spotify.
For even more information on the Flipper Zero, I’ve listed a few relevant links below:
- Flipper Zero Supported Frequencies
- Awesome-FlipperZero – A great collection of FZ resources
- Unleashed firmware on GitHub
- Xtreme firmware on GitHub
- RogueMaster firmware on GitHub
- M1 Kickstarter Page
- Video Game Module for Flipper Zero
Need Help With Flipper Zero Security Assessments?
If your business relies on wireless protocols—whether for door access, IoT devices, or remote controls—now is the time to act.
IT Audit Labs offers:
- Wireless security assessments using Flipper Zero and other tools
- Red teaming and physical pentesting services
- Guidance on hardening your systems against replay, cloning, and DoS attacks
🔒 Don’t wait for a security breach to discover your vulnerabilities. Let our experts assess your exposure and help you stay ahead of emerging threats.
👉 Contact IT Audit Labs today to learn how we use the Flipper Zero in real-world cybersecurity engagements—and how we can help you protect what matters most.
