Flipper Zero WiFi Multiboard (ESP32-S2) — Complete Guide
One-liner: the WiFi multiboard is an ESP32-S2-powered WiFi tool for the Flipper Zero — typically pre-flashed with the ESP32-S2 Deauther firmware — giving you AP scanning, packet monitoring and (on your own networks) deauth testing, plus a standalone web UI you control from any browser.
Specs at a glance
| Item | Specification |
|---|---|
| WiFi chip | Espressif ESP32-S2 (2.4 GHz) |
| Firmware (typical) | ESP32-S2 Deauther or Marauder port |
| Frequency band | 2.4 GHz only (no 5 GHz) |
| Interface | Plugs into the Flipper GPIO header |
| Web UI | AP mode at 192.168.4.1 (default SSID pwned, password deauther) |
What you can do with it
The ESP32-S2 Deauther is the classic pocket tool: scan for networks, pick a target, and run attack modes (deauth, beacon spam) — with the Flipper as the control surface. Because the ESP32-S2 also exposes its own access point, you can drive everything from a phone browser at http://192.168.4.1 — the Flipper screen is optional.
Use it on networks you own or have explicit permission to test. Deauth attacks actively disrupt other people's connections; using them on networks you don't control is illegal in most places. The whole point of this tool in a university lab is to learn why unsecured WiFi fails and how to defend it.
Setup
1. Firmware on the Flipper
Install a custom firmware (e.g., Momentum) so the WiFi deauther/Marauder apps are available — see the Flipper Zero section.
2. Flash the ESP32-S2 (first time only)
Most boards ship pre-flashed with Deauther. To (re)flash:
- Put the board in flash mode per your vendor's instructions (often a button while powering).
- Connect via USB/UART (or use the Flipper's own flasher app).
- Flash the ESP32-S2 Deauther binary — sources and pre-built files: SpacehuhnTech/esp32_deauther.
3. Attach to the Flipper
Plug the board onto the Flipper GPIO header. The vendor does not publish pin or power details for this board, so follow the instructions that came with your unit.
4. First run — scan
- Plug the board in, open
Apps → WiFi → WiFi Deauther. - Wait for the startup scan to finish.
- A list of nearby APs appears: SSID, channel, RSSI.
Expected app screen:
# SSID CH RSSI
1 yupitek-lab 6 -55
2 Library_Guest 1 -78
...
Using the web UI
- On your phone/PC, join the WiFi network
pwned(passworddeauther). - Browse to
http://192.168.4.1. - The full Deauther interface loads: scan, select target, configure attacks, save settings.
- Tip: when only using the Flipper for serial control, you can disable the web interface (
set webinterface false, save, reboot) to hide thepwnedAP.
Troubleshooting
| Problem | Cause | Fix |
|---|---|---|
| Web UI unreachable | Client joined another network | Disable auto-join/mobile data; join pwned; browse 192.168.4.1 |
| No networks listed | Board not seated or firmware not running | Re-seat the board on the GPIO header; re-flash the firmware |
More help: the SDRLAB troubleshooting hub.
Related
- 5G Expansion Board — 2.4/5 GHz Marauder with GPS.
- NRF24 module — 2.4 GHz packet radio sniffing.
- Flipper Zero section — firmware basics.