ESP32 Marauder Double Barrel 5G adds 5GHz deauthentication with RTL8720DN module

The ESP32 Marauder – Double Barrel 5G is a dual-chip hacking and penetration testing tool that supports both 2.4 GHz and 5 GHz Wi-Fi scanning, deauthentication, and can be used for penetration testing, wireless research, and learning security concepts.

The device is built around an ESP32, and can be used with Flipper Zero or as a standalone device. Additionally, it features a dedicated GPS receiver and a CC1101 Sub-GHz transceiver (433 MHz) for wireless experiments. Other features include a 2.8-inch touchscreen, 800 mAh rechargeable battery, micro-SD slot for logs/firmware/Flipper FAP files. There are also dual USB-C interfaces (one for charging/ESP32 recovery and one for BW16 firmware update), and four external antenna ports (Wi-Fi ×2, GPS, Sub-GHz) housed in a 3D-printed enclosure.

ESP32 Marauder Double Barrel

ESP32 Marauder Double Barrel 5G specifications

  • Main module – ESP32 Wi-Fi & Bluetooth SoC
  • Storage – MicroSD card slot for firmware, logging, and data storage.
  • Display – 2.8-inch touchscreen with included stylus
  • Wireless
    • 2.4 GHz Wi-Fi 4 and Bluetooth 4.2/5.x via ESP32
    • B&T BW16 RTL8720DN module used as dual-band scanning / deauth controller with Flipper Zero
      • Dual-band 2.4 GHz and 5 GHz (Wi-Fi 5 GHz features limited by controlling app/firmware)
      • Supports BLE 5.0, but it’s not mentioned in the board’s specifications
    • CC1101 Sub-GHz transceiver (433 MHz), up to ~10 dB output per antenna
    • Dedicated GPS chipset (NMEA/logging accessible to Marauder or Flipper).
    • 2x SMA-style connectors (2x Wi-Fi, 1x GPS, 1x sub-GHz 433 MHz)
  • USB
    • USB Type-C port for charging and programming the ESP32
    • USB Type-C port used by the BW16/RTL8720DN for firmware updates
    • Total of 2x USB Type-C ports
  • Expansion – Onboard headers/pads exposed for flashing
  • Power
    • USB Type-C for power and charging
    • Built with an 800mAh rechargeable battery
  • Dimensions – TBD
  • Enclosure – Full 3D-printed enclosure/case included.

ESP32 Marauder Double Barrel Front and Back View
Front and Back View

In terms of software support, the ESP32 Double Barrel 5G relies on a dual firmware system where the onboard ESP32 runs Marauder or alternative builds like Bruce, and the BW16/RTL8720DN module is controlled by a Flipper Zero running Momemtum firmware (set UART to pins 15/16) and a small FAP file placed in /Apps/GPIO to enable 5 GHz features. The ESP32 handles standalone functions like Wi-Fi scanning, deauth, GPS logging, and Sub-GHz functions. Update can be pushed from the microSD card or over USB-C. GPS data is sent over a UART NMEA stream, and you can switch which device powers/reads it. Full upgrade and recovery steps can be found in the GitHub repository.

While writing, the batch information got me confused at first. The device has gone through three hardware batches with small but important changes. Batch 1 (June 2025) used a 4-pin GPIO header for firmware updates and had a manual toggle switch to select GPS power, plus it shipped with a separate “ESP32 refresher” tool for recovery. Batch 2 (August 2025) replaced the GPIO header with a USB-C port for easier updates and charging. Batch 3 (September 2025) integrates the “refresher” circuit directly into the board, so reflashing the ESP32 and BW16 modules can be done through USB-C without extra hardware, and the GPS power source is now switched automatically instead of using a manual toggle.

ESP32 Marauder Double Barrel Front and Side View
ESP32 Marauder Double Barrel 5G Front and Side View

Previously, we have written about other ESP32-based penetration testing tools and add-on boards for Flipper Zero, some of which include the DisruptorX V2, Minino security tool’s kitty-shaped ESP32-C6 board, the ESP32 Marauder Pocket Unit, the Interrupt wireless hacking tool, the Flipper Blackhat, and others do chek those out if you wnat to compare form factors, RF capabilities, and available firmware to find the tool that best fits your workflow.

The ESP32 Marauder – Double Barrel 5G (Batch 3) can be purchased from the Tindie store for $165, with case color options in black or white. The device ships from Australia and starts at $21.95, with tracked delivery in 1–2 weeks. The package includes the unit with a 3D-printed case, four antennas, and a stylus.

ESP32 Marauder - Double Barrel Demo - 1

Share this:
FacebookTwitterHacker NewsSlashdotRedditLinkedInPinterestFlipboardMeWeLineEmailShare

Support CNX Software! Donate via cryptocurrencies, become a Patron on Patreon, or purchase goods on Amazon or Aliexpress. We also use affiliate links in articles to earn commissions if you make a purchase after clicking on those links.

Radxa Orion O6 Armv9 mini-ITX motherboard

2 Replies to “ESP32 Marauder Double Barrel 5G adds 5GHz deauthentication with RTL8720DN module”

  1. Just ordered one to see how well it does, will report my findings here, thank you for the article. I hadn’t heard of this particular Marauder unit until this article!

Leave a Reply

Your email address will not be published. Required fields are marked *

Boardcon MINI1126B-P AI vision system-on-module wit Rockchip RV1126B-P SoC
Boardcon MINI1126B-P AI vision system-on-module wit Rockchip RV1126B-P SoC