Firmware Controller

Firmware-aware Android controller for Heltec V4 Bruce and ESP32 Marauder builds

Security and operating limits Detection never starts a scan, transmission, attack, or firmware update. WebUI and Wi-Fi credentials are held in memory and are not persisted. Bruce's WebView receives only the current in-memory session cookie, scoped to the configured local WebUI origin, and clears it when the embedded browser closes. Phone GPS fixes and Wi-Fi observations go only to the selected Bruce device over its local BruceNet or USB link. Exports are staged in private app storage before Android opens the selected document, and a failed export never asks the document provider to delete it. GhostESP and Bruce allow cleartext HTTP only for their device-local addresses, because both embedded Web UIs are HTTP-only. Use radio and network tools only on systems, devices, and spectrum you own or are explicitly authorized to test.