Introduction

Willy is an alternative to Flipper Zero based on an ESP32.

Idea, development and implementation of this firmware: h-RAT (https://github.com/h-RAT/)

Summary

• SubGhz
• Infrared

Features

SubGhz -> Record

• Record Signal
  
  
  
  • Send Last Signal
  • Save Last Signal
    
    
    

    SubGhz -> Transmit

    • Send Key*
      
      
      

      *Protocol List

      • Ansonic (12bit)
      • BETT (18bit)
      • CAME (12bit, 18bit, 24bit, 25bit)
      • Clemsa (18bit)
      • Doitrand (37bit)
      • Dooya (40bit)
      • FAAC SLH (64bit)
      • GateTX (24bit)
      • Holtek HT12X (12bit)
      • Holtek (40bit)
      • Honeywell (48bit)
      • Hormann (44bit)
      • IntertechnoV3 (32bit)
      • KeeLoq (64bit)
      • Kinggates (89bit)
      • LinearDelta3 (8bit)
      • Linear (10bit)
      • Magellan (32bit)
      • Marantec (49bit)
      • Nero Radio (56bit)
      • Nero Sketch (40bit)
      • Nice FLO (12bit, 24bit)
      • PhoenixV2 (52bit)
      • Power Smart (64bit)
      • Princeton (24bit)
      • Security+ V1 (21bit)
      • SMC5326 (25bit)
      • Starline (64bit)
      • UNILARM (25bit)

      SubGhz -> Bruteforce

      • Bruteforce Key**
        
        
        

        **Protocol List

        • Ansonic (12bit)
        • CAME (12bit)
        • Chamberlain (7bit)
        • Chamberlain (8bit)
        • Chamberlain (9bit)
        • Holtek HT12X AM (12bit)
        • Holtek HT12X FM (12bit)
        • LinearDelta3 (8bit)
        • Linear (10bit)
        • Nice FLO (12bit)
        • Princeton (24bit)
        • SMC5326 (25bit)
        • UNILARM (25bit)

        SubGhz -> Tesla

        • Send EU Tesla Charge Door
        • Send US Tesla Charge Door
          
          
          

          SubGhz -> DeBruijn

          • Send Linear Multicode
          • Send Stanley Multicode
          • Send Charmberlain
          • Send Linear MooreMatic
            
            
            

            SubGhz -> Jukebox

            • Send Free Credit
            • Send Pause Song
            • Send Skip Song
            • Send Volume UP
            • Send Volume DOWN
            • Send Power OFF
            • Send Lock Queue
              
              
              

              SubGhz -> Attack Switch Mode

              • Receiver/Jammer mode (Need two devices to perform the attacks properly)
                
                
                

                SubGhz -> Attack : Receiver : Rolljam

                • Set Jammer Power
                • Set Send First Signal Auto.
                • Start Rolljam Attack
                • Send First Signal
                • Send Second Signal
                  
                  
                  

                  SubGhz -> Attack : Receiver : Rollback

                  • Set Jammer Power
                  • Set Num. Signal Required
                  • Set Time Frame
                  • Start Rollback Attack
                  • Send Sequence
                  • Save Sequence
                    
                    
                    

                    SubGhz -> Jammer

                    • Set Jammer Power
                      
                      
                      

                      SubGhz -> Scanner

                      • Start Hoop Freq Scan
                      • Set Frequency Found
                        
                        
                        

                        SubGhz -> SD Card

                        • Send .sub file***
                          
                          
                          

                          ***Protocol List

                          • RAW
                          • AlutechAT
                          • Ansonic
                          • BETT
                          • CAME
                          • Clemsa
                          • Doitrand
                          • Dooya
                          • FAAC SLH
                          • GateTX
                          • Holtek HT12X
                          • Holtek
                          • Honeywell
                          • Hormann
                          • IntertechnoV3
                          • KeeLoq
                          • Kinggates
                          • LinearDelta3
                          • Linear
                          • Magellan
                          • Marantec
                          • Nero Radio
                          • Nero Sketch
                          • Nice FLO
                          • PhoenixV2
                          • Power Smart
                          • Princeton
                          • Security+ 1.0
                          • Security+ 2.0
                          • SMC5326
                          • Starline
                          • UNILARM

                          SubGhz -> Settings

                          • Set Frequency
                          • Set Preset
                            
                            
                            

                            Infrared -> Universal Remotes

                            • TV
                              
                              
                              
                              • Digital Signs
                                
                                
                                
                                • Projectors
                                  
                                  
                                  
                                  • Audio
                                    
                                    
                                    
                                    • LED
                                      
                                      
                                      
                                      • Fans
                                        
                                        
                                        

                                        Infrared -> Learn

                                        • Receive IR Signal*
                                        • Save Last IR Signal
                                        • Send Last IR Signal
                                          
                                          
                                          

                                          *Protocol List

                                          • NEC / APPLE / ONKYO
                                          • Kaseikyo
                                          • Sony
                                          • Samsung
                                          • RC5
                                          • RC6

                                          Device

                                          • Set Theme Color
                                          • Device Information
                                            
                                            
                                            

                                            Video

                                            Demo: https://www.youtube.com/watch?v=r5-hpoPlQkU
                                            Demo: https://www.youtube.com/shorts/5iebprjgEjE

                                            Build

                                            
                                            
                                            

                                            Board:

                                            • 1x ESP32-S3 T-Display Touch Version - Soldered | https://www.aliexpress.us/item/3256804741686185.html

                                            CC1101 Shield:

                                            • 1x S3 T-Display TF/SD Shield - Female | https://www.aliexpress.us/item/3256804956138540.html
                                            • 1x CC1101 V2.0 Module | https://www.aliexpress.us/item/2251832873028557.html

                                            IR Shield:

                                            • 1x S3 T-Display TF/SD Shield - Female | https://www.aliexpress.us/item/3256804956138540.html
                                            • 1x Infrared Receiver TSOP4838 ( or any IR receiver model ) | https://www.aliexpress.us/item/1005004481948853.html
                                            • 1x Infrared LED TSAL6400 ( or any IR LED model ) | https://www.aliexpress.us/item/32670031000.html
                                            • 1x Transistor 2N4401 (Optional) | https://www.aliexpress.us/item/1005005484591463.html

                                            Buy

                                            Due to a lot of abuse, the firmware is no longer free.

                                            Firmware: https://willyfirmware.mysellix.io/product/64ca6015d3acc

                                            Complete device: https://willyfirmware.mysellix.io/product/6509a82a3cec7
                                            

                                            Add me on discord for more info.

                                            Contact

                                            • Discord: h-RAT#2465

                                            Disclaimer

                                            This device is a basic device for professionals and cybersecurity enthusiasts.

                                            We are not responsible for the incorrect use of this device.

                                            Be careful with this device and the transmission of signals. Make sure to follow the laws that apply to your country.