Flipper Zero explained: What to know about the viral hacker tool (2024)

How does Flipper Zero work?

Flipper Zero contains a few different antennas. These help it capture, store, clone and emulate wireless signals. It can interact with several signal types:

• Near field communication (NFC). Bank cards and building access cards use NFC signals.
• 125kHz RFID. Older proximity cards and animal microchips use this frequency.
• Infrared. Many remotes use infrared signals.
• Sub-1 GHz. Garage door remotes and remote keyless systems use Sub-1 GHz frequencies to communicate.

To read a wireless signal, the user holds Flipper Zero up to source of the signal, selects the program that corresponds to the signal type, and selects "Read." Flipper Zero then saves the signal type to memory. The user can access the saved signal and emulate it. Flipper Zero doesn't allow users to save and emulate NFC bank cards, but it can read them.

Part of Flipper Zero's appeal is its versatility. Three simple hacks showcase Flipper Zero's capabilities via radio signal communication and other means. It can unlock a car that uses a radio fob, control a TV that uses infrared and create a two-factor authentication token for websites.

Flipper Zero also features the following:

• 18 general purpose input/output connectors that connect it to other hardware devices.
• A USB 2.0 port, type C, to connect with computers.
• iButton 1-Wire support. iButtons are often used in asset control and tracking.
• Removable storage in the form of an SD card.
• An LCD display screen and five-button control pad.
• The FreeRTOS embedded operating system for microcontrollers.

Is Flipper Zero a serious security threat?

Flipper Zero has potential to be a security threat in the wrong hands. However, it is not inherently dangerous. To engineer a security attack would take a fair amount of planning and intent. Flipper Zero is better suited to light pen testing activities and general reconnaissance to gain awareness of the digital environment. For novice hackers, pen testing is the act of intentionally finding vulnerabilities in a computer system to fix the vulnerabilities and make the system stronger.

Flipper Zero is a learning tool primarily, designed to make cybersecurity information more accessible and change the way users think of the digital devices around them. Much of the technology and techniques Flipper Zero uses have been around for years. Flipper Zero just makes them slightly more accessible and user friendly.

Is it legal?

Flipper Zero reported on its social media channels that U.S. Customs and Border Patrol seized a shipment of Flipper Zeros in September 2022. Despite this event, the device is legal. It simply has the potential to be used illegally.

Flipper Zero shouldn't be used to tamper with devices or systems that the user doesn't have permission to access.

The device's firmware prevents users from transmitting frequencies that are banned in the country where they are using it.

Flipper Zero is banned on Amazon because it was tagged as a card-skimming device. There is a third-party Flipper locator application that lets people monitor Flipper restocks by country and vendor.

Alternatives to Flipper Zero

Flipper Zero is just one hacking gadget. While Flipper Zero can perform a range of actions, there are many products and software that can also perform one or several of those same functions:

• The USB Rubber Ducky. The USB Rubber Ducky can perform BadUSB attacks and run ducky scripts.
• ChameleonMini. The ChameleonMini is a portable tool for NFC security analysis.
• Smartphones. Smartphones can read and store NFC codes.
• Raspberry Pi. Raspberry Pi can be set up as an NFC signal reader.
• The Wi-Fi Pineapple. Both Flipper Zero and the Wi-Fi Pineapple can be used for pen testing wireless networks.
• John the Ripper. This tool does password-cracking attacks, like Flipper Zero does with its BadUSB function.

Cost of Flipper Zero

The gadget was originally sold for $169 by the manufacturer. However, the device is often sold out and only available through third-party vendors, increasing the price. There are also many scammers that claim to be selling Flipper Zero when they aren't. It's best to only buy Flipper Zero through a reputable distributor.

Flipper Zero generally works on devices and systems that were vulnerable to begin with. Learn how to fix five of the most common cybersecurity vulnerabilities to prevent data loss and hacking.