WifiKiwi

A handheld, open-source, multi-radio Wi-Fi / RF research tool for use inside a Faraday cage against access points and devices you own.

⚠️ Legal & safety notice. This device is intended for cybersecurity research on equipment you own, in a properly shielded enclosure, where permitted by your local regulator. In Mexico the relevant authority is the IFT. Operating any RF transmitter outside its authorized bands or power limits is illegal almost everywhere, and using this device against networks or devices you do not own is illegal almost everywhere. You are solely responsible for how you use it.

Overview

WifiKiwi is built around the Espressif ESP32-C5, the first sub-$5 SoC with native dual-band 2.4 GHz and 5 GHz Wi-Fi 6, plus BLE 5.3. It pairs the C5 with discrete radios for sub-GHz work (CC1101), wideband signal generation (ADF4351), and wideband receive (socketed RTL-SDR v4), all under a 3.5" capacitive touchscreen UI built on LVGL 9.

Capabilities

Band	Hardware	TX	RX
Sub-GHz (300 – 928 MHz)	TI CC1101	✅ OOK / 2-FSK / GFSK / MSK	✅
2.4 GHz Wi-Fi (802.11 b/g/n/ax)	ESP32-C5	✅	✅ monitor mode
5 GHz Wi-Fi (802.11 a/n/ac/ax)	ESP32-C5	✅	✅ monitor mode
Bluetooth LE 5.3	ESP32-C5	✅	✅
35 MHz – 4.4 GHz CW (single tone)	ADF4351	✅ test signal only	—
500 kHz – 1.75 GHz IQ wideband	RTL-SDR v4 (USB)	—	✅

What it does not do

• No broadband jamming. No high-power PA. No reserved board area for adding one. (See the project non-goals.)
• No 6 GHz Wi-Fi 6E/7 — no microcontroller-class chip exists for it.