Hackbat ESP32

Build your own sub-GHz and Wi-Fi pentest board from open files.

Sub-GHzWi-Fi 6Bluetooth LEOpen hardwareBuild it yourself

Availability: In development
Design: Open

Compare with similar devices

The maker publishes this as a project, not a product listing.

Radio equipment needs certification where you live (FCC, CE, UKCA, ISED, Anatel). Some devices are uncertified or restricted in Brazil. Buyers are responsible for their local law.

Bring along: A JLCPCB order with the published BOM and centroid files, and your own firmware.
Keep in mind: Not sold assembled; the C6 version is still under test and has no NFC.

Source checked · Sep 17, 2026

Image credit
Maker 3D render of the Hackbat ESP32 board · The Hackbat

(02) Blueprint

Build it yourself

Open hardware

Both the current ESP32-C6 'Hackbat ESP32' and its RP2040-based predecessor are open hardware: KiCad schematic/PCB, Gerbers and BOM are published on GitHub by the same maker.

Original RP2040 HackBat schematic (KiCad)

Read straight from the maker’s repository. Open on GitHub

Original RP2040 HackBat schematic (KiCad)

GitHub

Design files 6

Source 2

git clone https://github.com/thehackbat/hackbat_esp32.git

Key parts 4

TI CC1101 All CC1101 devicessub-GHz radio (315/433/868/915 MHz)Datasheet
Espressif ESP32-C6-WROOM-1 All ESP32-C6 devicesMCU (current ESP32 version)Datasheet
Raspberry Pi RP2040 All RP2040 devicesMCU (original version)Datasheet
NXP/ams PN532All PN532 devices13.56 MHz NFC (original RP2040 version only)

Research notes

thehackbat/hackbat_esp32 README states it is the 'new version...based on the ESP32 C6', superseding controlpaths/hackbat's RP2040 design; both list the same JLCPCB affiliate link ('?from=controlpath'), indicating the same maker/lineage. Both repos' KiCad/Gerber/BOM links curl-verified 200; thehackbat_esp32 carries no LICENSE file despite being described as open-source, controlpaths/hackbat is CC0-1.0.

Every link checked 2026-09-27.

Hand this device to your agent. Everything on this page, as clean Markdown and JSON: specs, shops, prices, design files, parts.

Markdown JSON

Made the Hackbat ESP32? Put the badge on your README; it links here, with every shop that sells it.

Specifications

Hackbat ESP32 (current version)

Microcontroller: ESP32-C6 WROOM-1; compatible with the 1U variant for an external antenna
Sub-GHz radio: TI CC1101 for 315, 433, 868 and 915 MHz ISM/SRD bands; on-board antenna, J2 for SMA
Display: Monochrome OLED, SH1106 or SSD1306 drivers in ESP-IDF
Storage: microSD over SDIO
Board: Two-layer PCB with parts on both sides; black solder mask on the original
Files: KiCad schematics and PCB, production files for JLCPCB assembly

Original Hackbat (RP2040)

Microcontroller: Raspberry Pi RP2040, dual Cortex-M0+ at 133 MHz, USB host and device
Radios: CC1101 sub-GHz · ESP-12F (ESP8266) Wi-Fi
NFC: PN532 at 13.56 MHz over I²C
Display: 128 × 64 OLED, SH110X (SSD1306 with resistor change)
Licence: CC0-1.0

Getting one

How: Zip the production files, upload to JLCPCB, add assembly with the BOM and centroid files; choose lead-free HASL
Related: A DEF CON 32 badge on the ESP32-C3 with the same order-it-yourself approach

What still needs checking

No price: the board is fabricated to order, so cost is the fab’s quote plus the OLED and any antenna.
No firmware release is documented for the ESP32-C6 version; the repository is hardware only.
Battery, dimensions, weight and enclosure are not stated.
The maker’s website is a JavaScript page with no readable product information.

Downloads & docs

Hackbat ESP32 repositorygithub.com README at the reviewed commitgithub.com KiCad and production filesgithub.com Original RP2040 Hackbat repositorygithub.com Original README at the reviewed commitgithub.com DEF CON 32 badge repositorygithub.com Maker websitethehackbat.com

Source & revision notes

Maker listing checked Sep 17, 2026. Detailed documentation reviewed Sep 17, 2026. Not hands-on tested.

Specifications come from the ESP32-C6 version's README and KiCad files at commit 6596eb4 (December 2024). The maker marks this version as still under test.

Nothing is sold: the maker’s site has no shop and both READMEs tell you to upload the production files to JLCPCB and order an assembled board. Cost depends on the fab’s quote.

The original RP2040 Hackbat (999 GitHub stars, CC0) adds an ESP-12F Wi-Fi module and a PN532 NFC reader; the ESP32-C6 board drops NFC.

Reviewed at commit 6596eb40c666e6807d89d7880e599a52a3ac7c4c (ESP32 version) and 816d0acb7881e823c6b60f0ee02bc06544d12f2e (original). Photo is the maker’s 3D render, not a built board.

Build or list hardware with us