Menu
Flipper Zero app development (FAP), Sub-GHz scripting, badUSB automation, and GPIO hardware bridging.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Drive the MCPwn Kali-backed MCP server cleanly and fast: create a session, discover tools via the catalog (list_catalog/get_tools/get_tool/run_tool) instead of guessing names, pick the right execution path (execute_command vs detach+poll_job vs interactive shell), move files with the correct mechanism (write_workspace_file, request_upload/request_download data plane, import_artifact_to_workspace, upload_to_target, list_payloads/get_payload), and bring up connectivity (tunnel_up VPN/proxy/forward, tunnel_revshell, penelope reverse shells, run_in_shell/stabilize_shell). Use whenever running MCPwn / mcpwn_* tools, a Kali MCP, or when a run stalls on timeouts, lost output, missing routes, wrong tool names, or clumsy file transfer.
Keep the context window lean when reading large data. Use before opening big files, logs, dumps, PCAPs, decompiler output, research corpora, or a folder of worker artifacts. Enforces grep-first + windowed reads, extract-don't-hoard, and context quarantine (delegate a huge read to a sub-agent that returns a digest).
Auth assessment: web impact-validation; SQLi, SSTI, XXE, command injection, SSRF, XSS, uploads, deserialization, smuggling, WAF/parser checks.
Mode: /1337 - structured operator behaviour for coding and security; forces explicit reasoning, fast decisions, todos/lists, exact terms, evidence, verification, safety override.
Lab/CTF: pwn/binary challenges; native binaries, memory corruption, format strings, heap/ROP/SROP, shellcode artifacts, seccomp, kernel labs.
Auth/lab: reverse engineering methodology; malware triage, patch diffing, firmware/protocol RE, protections, exploitability handoff evidence.
| name | flipper-zero |
| description | Flipper Zero app development (FAP), Sub-GHz scripting, badUSB automation, and GPIO hardware bridging. |
Goal: Develop Flipper Application Packages (FAPs) in C, create BadUSB/Ducky scripts, or interface the top GPIO pins with external hardware.
Flipper apps are compiled out-of-tree using ufbt (Micro Flipper Build Tool).
#include <furi.h>
#include <gui/gui.h>
int32_t my_app_app(void* p) {
UNUSED(p);
FURI_LOG_I("MY_APP", "Hello Flipper!");
// Basic infinite loop until exit
while(1) {
furi_delay_ms(1000);
}
return 0;
}
Compilation: Run ufbt to build the .fap. Run ufbt launch to deploy to a USB-connected Flipper.
furi_hal_gpio_write()) for bit-banging or peripheral API.Using the CC1101 chip. You can invoke Sub-GHz transmissions directly in firmware, or using .sub files.
.sub file format supports raw AM/FM modulation plots (Raw IQ) or pre-parsed protocols like KeeLoq.Drop standard Ducky Script 1.0/2.0 .txt files onto the MicroSD card under badusb/.
DELAY 1000
GUI r
DELAY 200
STRING cmd
ENTER
DELAY 500
STRING echo "Hacked" > proof.txt
ENTER