xiry.

Development · other

XFW - Xtreme Firmware

Custom firmware and penetration testing toolkit for the Flipper Zero.

From the Xiry library · Updated 3 October 2026

Visit github.com ↗

Xtreme Firmware was a feature-packed custom firmware for the Flipper Zero multi-tool that included interface customization, protocol expansions, and offensive security tools like BLE Spam and Bad-Keyboard. The project is now archived and no longer under active development, directing users toward Unleashed Firmware.

What it's for

  • Test device vulnerability to Bluetooth Low Energy advertisement packet flooding
  • Simulate Bluetooth and USB keyboard injection attacks via Bad-KB
  • Customize Flipper Zero UI themes, animations, and desktop asset packs
  • Wardrive and map GPS coordinates alongside Sub-GHz radio captures

Features

  • BLE Spam app for broadcasting continuous spoofed advertising packets
  • Bad-KB supporting both USB and Bluetooth HID injection with MAC spoofing
  • Asset pack engine for custom animations, icons, and fonts
  • Expanded Sub-GHz protocols and duplicate signal filtering
  • Xtreme Settings app for managing system appearance and GPIO mapping
  • On-device file manager with cut, copy, paste, and SD search

Pricing

Open source

Details

Type
other
Category
Development
Topic
Hardware Tools
Open source
Yes
Platforms
other
For
Flipper Zero owners, security researchers, and hardware tinkerers.
Alternative to
Flipper Zero Official Firmware, Unleashed Firmware, RogueMaster
Tags
flipper zero, firmware, ble, bluetooth, pentesting, security

Why it was saved

  • @0day, 8 October 2023: Demonstrates a severe denial-of-service vulnerability affecting iOS devices via background BLE advertising packets using hardware that costs under $10.

Related

  • AIMap

    Discovery and security testing platform for exposed internet-facing AI endpoints.

  • BabelStrike

    Transliterate non-Latin names and generate username wordlists for security assessments

  • Better Auth

    Open-source TypeScript authentication framework for modern web applications.

  • Browser Use Agent Sandbox Architecture

    Architecture pattern for securely running code-executing agents inside isolated micro-VMs

  • Check SSH Brute-Force Login Attempts

    Terminal commands to count and monitor failed SSH logins on Linux

  • CrowdSec

    Open-source collaborative security engine and intrusion prevention system using crowdsourced threat data.

Updated