โ
Build your own pocket-sized 2.4GHz wireless lab.
A DIY guide for security researchers, tinkerers & curious cats.
Your Swiss Army knife for the 2.4GHz spectrum
Understanding the nyanBOX system design
What your nyanBOX can see and interact with
Scan all 14 channels, detect access points, probe requests, and client devices. Identify Pwnagotchis and other research tools.
Monitor advertising channels 37/38/39 to detect AirTags, Tiles, card skimmers, and other BLE devices broadcasting nearby.
NRF24 modules sweep the entire 2.4GHz band (126 channels) detecting signals from drones, mice, keyboards, and Flipper Zero.
Everything you need to build your own Nya-IY device
| Component | Quantity | Notes |
|---|---|---|
| ESP32 WROOM-32U | 1 | DevKit with external antenna connector |
| NRF24L01+ PA/LNA | 3 | GTmini modules recommended for compact build |
| 0.96" OLED Display | 1 | SSD1306 I2C (128x64), 4-pin module |
| Tactile Push Buttons | 5 | 6x6mm or 5-way navigation module |
| Li-Po Battery | 1 | 3.7V 2500mAh (or larger for extended use) |
| TP4056 Charge Module | 1 | USB-C variant with protection circuit |
| 3.3V Voltage Regulator | 1 | LF33A (or LF33CV) โ low dropout, 500mA |
| WS2812B NeoPixel | 1 | Optional: status LED indicator |
| Misc Components | โ | Wires, perfboard, capacitors (10ยตF), resistors (10kฮฉ) |
Buy NRF24 modules in bulk โ they're cheap and occasionally DOA. Having spares saves headaches!
NRF24 modules are power-hungry. Add 10ยตF capacitors across VCC/GND on each module to prevent brownouts.
Connect everything together with these pinouts
| NRF24 Pin | ESP32 Pin |
|---|---|
| VCC | 3.3V |
| GND | GND |
| SCK | GPIO 18 |
| MOSI | GPIO 23 |
| MISO | GPIO 19 |
| OLED Pin | ESP32 Pin |
|---|---|
| VCC | 3.3V |
| GND | GND |
| SDA | GPIO 21 |
| SCL | GPIO 22 |
| Function | ESP32 Pin |
|---|---|
| UP | GPIO 26 |
| DOWN | GPIO 33 |
| LEFT (Back) | GPIO 25 |
| RIGHT (Select) | GPIO 27 |
| CENTER (Exit) | GPIO 32 |
| LED Pin | ESP32 Pin |
|---|---|
| VCC | 3.3V or 5V |
| GND | GND |
| DIN | GPIO 14 |
Add 10ยตF electrolytic capacitors across VCC/GND on each NRF24 module. This prevents power supply noise that causes communication failures.
Keep SPI wires under 10cm. Long wires act as antennas and pick up interference, causing erratic behavior.
Ensure all modules share a common ground. Ground loops cause mysterious bugs that are hard to debug.
Two methods to get your device running
The easiest way โ flash directly from your browser!
Build from source, customize, and contribute!
[env:nyanbox-main]
platform = espressif32
board = esp32dev
framework = arduino
lib_deps =
nrf24/RF24@^1.4.10
olikraus/U8g2@^2.36.2
adafruit/Adafruit NeoPixel@^1.12.3
bblanchon/ArduinoJson@^7.4.2
board_build.partitions = huge_app.csv
monitor_speed = 115200
Install CP210x drivers
Hold BOOT button while flashing
Join the Discord community
Protect your creation in style
nyanBOX vs other popular 2.4GHz research tools
| Feature | ๐ฑ nyanBOX | Flipper Zero | ESP32 Marauder | WiFi Deauther |
|---|---|---|---|---|
| Price | $30-50 DIY | $170+ | $50-80 | $15-25 |
| WiFi Scanning | โ Full | โ No WiFi | โ Full | โ Full |
| BLE Scanning | โ Yes | โ Yes | โ Yes | โ No |
| 2.4GHz RF Scan | โ 126 channels | โ No | โ No | โ No |
| Deauth Testing | โ Yes | โ No | โ Yes | โ Yes |
| AirTag Detection | โ Yes | โ Yes | โ ๏ธ Limited | โ No |
| Flipper Detection | โ Yes | โ N/A | โ No | โ No |
| Sub-GHz | โ No | โ Yes | โ No | โ No |
| RFID/NFC | โ No | โ Yes | โ No | โ No |
| Open Source | โ 100% | โ Yes | โ Yes | โ Yes |
| DIY Buildable | โ Easy | โ No | โ ๏ธ Harder | โ Easy |
| Customizable | โ Very | โ ๏ธ Moderate | โ Very | โ ๏ธ Limited |
Bottom line: nyanBOX excels at 2.4GHz spectrum analysis with its triple NRF24 setup โ something no other device offers at this price. Flipper Zero is more versatile across frequencies, but lacks WiFi entirely. For pure 2.4GHz research, nyanBOX is hard to beat.
Common questions about building and using nyanBOX
You can start with just 1 or 2 modules! One NRF24 gives you spectrum scanning. Two adds TX capability. Three enables simultaneous scan + jam + sniff operations. Most users find 2 sufficient, but 3 unlocks the full potential for advanced research.
The firmware is designed for ESP32-WROOM. ESP32-S3 may work with pin adjustments, but C3 lacks sufficient GPIO pins. Stick with WROOM-32U (with external antenna connector) for best results and community support.
WiFi scanning: 50-100m+ depending on AP power
BLE detection: 10-30m typical
NRF24 spectrum scan: Detects strong signals at 100m+
Deauth range: ~20-50m to target AP
Range varies significantly with antenna quality and environment.
Building and owning: Legal in most countries โ it's just an ESP32 with radios.
Using certain features: Varies by jurisdiction. Deauth attacks on networks you don't own are illegal almost everywhere. Passive scanning is generally legal. Always check your local laws and only test on networks you own or have explicit permission to test.
ESP32's built-in WiFi is great for 802.11 protocols, but NRF24 modules can:
โข Scan the entire 2.4GHz band (not just WiFi channels)
โข Detect non-WiFi devices (drones, mice, keyboards, Zigbee)
โข Operate in parallel (scan + TX + RX simultaneously)
โข Detect Flipper Zero and other 2.4GHz research tools
They complement each other perfectly.
With a 2500mAh LiPo:
โข Passive scanning: 6-10 hours
โข Active TX operations: 3-5 hours
โข Mixed use: 4-6 hours
A larger 3000-5000mAh battery can easily double these numbers. The ESP32 and NRF24s are fairly power-hungry when active.
Yes! The firmware supports additional features:
โข GPS module: For wardriving and location logging
โข SD card: Extended logging and captures
โข External antenna: Better range on ESP32
Check the GitHub repo for wiring guides and firmware flags to enable these features.
โข Discord: Join the community โ fastest way to get help
โข GitHub Issues: For bugs and feature requests
โข Reddit: r/esp32, r/hacking communities
The community is active and helpful for troubleshooting builds!
Use responsibly. This device is designed for education, security research, and authorized testing only.