HaleHound CYD // segfault.solutions

about

HaleHound CYD is the ESP32-DIV HaleHound Edition ported to the Cheap Yellow Display — a 2.8" ESP32 touchscreen device. It's a multi-protocol offensive security toolkit covering WiFi, Bluetooth, 2.4GHz (NRF24) and Sub-GHz (CC1101) with GPS wardriving — all controlled via the touchscreen. Currently on firmware v2.9.0. CYD board in hand — remaining modules on order, 3D printed case to design.

hardware

boardESP32-2432S028 — Cheap Yellow Display 2.8"

MCUESP32-WROOM-32 — dual core, WiFi + BT built in

displayILI9341 2.8" 320×240 TFT + XPT2046 resistive touch

sub-GHzCC1101 HW-863 — 300–928 MHz capture, replay, jam

2.4GHzNRF24L01+PA+LNA — WiFi/BLE/Zigbee jamming, MouseJack

GPSGT-U7 / NEO-6M — wardriving, GPS logging

storageBuilt-in MicroSD — PCAP captures, wardriving logs, OTA

firmwareHaleHound v2.9.0 — PlatformIO / Arduino IDE

features

WiFi

Packet monitor — live 802.11 frame stats Beacon spammer — flood SSIDs WiFi deauther — tap-to-deauth AP Probe sniffer → Evil Twin chain GARMR captive portal — credential harvest Auth flood — exhaust AP client table

Bluetooth

BLE jammer — flood advert channels BLE spoofer — clone device identity BLE scanner + sniffer WhisperPair — CVE-2025-36911 scanner AirTag detector — FindMy tracker scan BLE beacon broadcast

2.4GHz (NRF24)

Spectrum analyser — 2400–2525 MHz Channel scanner — activity detection WLAN jammer — broadband disruption Proto Kill — multi-protocol attack

Sub-GHz (CC1101)

Replay attack — record and replay RF Brute force — automated code gen SubGHz jammer — wideband disruption Spectrum analyser — 300–928 MHz Saved profiles — load from SD card

SIGINT

EAPOL capture — WPA handshake + PMKID Karma attack — auto-respond probes Wardriving — GPS-tagged AP scanning Saved captures — browse from SD

Tools

Serial monitor — UART passthrough OTA firmware update from SD Touch calibration — 4-corner auto GPS live view — NMEA data Radio test — SPI hardware verify

flashing

Flash HaleHound directly from the browser — no drivers or software needed on most systems.

web flasheresp.huhn.me — Chrome / Edge / Opera only

single fileHaleHound-CYD-FULL.bin at address 0x0

driverCH340 USB-Serial — Windows/macOS only, Linux built-in

first bootauto touch calibration + rotation fix in Settings

download firmware ↗

images

HaleHound CYD running in yellow 3D printed case

// HaleHound CYD v2.9.0 — firmware running, yellow 3D printed case, powered via power bank. skull menu with WiFi / Bluetooth / SIGINT / 2.4GHz / SubGHz / Tools / Setting / About

build progress

✓

ESP32 CYD 2.8" board in hand

✓

Flash HaleHound firmware done

✓

3D printed case — design + print done

CC1101 HW-863 — sub-GHz radio to order

NRF24L01+PA+LNA — 2.4GHz radio to order

GPS module (GT-U7 / NEO-6M) to order

MicroSD card to order

LiPo battery + boost converter to order

Wire and test all radios pending

Field test — wardriving + attacks pending

log

2026-04-01 major progress — firmware flashed and running, 3D printed yellow case completed, HaleHound skull menu confirmed working. radios (CC1101, NRF24, GPS) still to order and wire
2026-03-21 hardware partial — CYD 2.8" in hand, remaining modules to order (CC1101, NRF24+PA+LNA, GPS). 3D printed case to design and print
2026-03-21 started — researching HaleHound CYD v2.9.0, reviewing hardware requirements and wiring guide

links

github — HaleHound-CYD ↗ releases ↗ flash package ↗