Added 7
- Add Telcoma/Cardin EDGE protocol (32bit, Static) to SubGHz
- Support Hitag Micro chips (8265/8210/H5.5) in LFRFID
- Add ability to wipe T5577 tags with read-back verification in LFRFID
- Add native MIFARE Plus support in SL3 with read, emulation, and write capabilities in NFC
- Add Bambu Lab filament spool parser to NFC
- Show loading screen while a large CUID dictionary loads on Read in NFC
- Add Network and GPS RPC services
Changed 3
- Show MIFARE Ultralight/NTAG PWD & PACK in full info view and on read screen in NFC
- Align MIFARE type detection with NXP AN10833 in NFC
- Replace the built-in clock app with the new NightStand Clock featuring overnight display, brightness control, red LED nightlight, stopwatch, and daily alarm
Fixed 12
- Fix endless TX causing RAW files to be transmitted and crash the system in SubGHz
- Fix crash when exiting CLI subghz chat with an external CC1101
- Fix Frequency Analyzer leaving the radio in a degraded state with antenna isolated and sensitivity loss
- Fix Pecinin keeloq manufacturer in SubGHz
- Fix RAW files corruption in SubGHz
- Fix T5577 tags holding multiple EM4100 IDs hanging on Read in LFRFID
- Fix Type 4 Tag emulation crashing on malformed NDEF write APDUs in NFC
- Fix Type 4 Tag emulation corrupting the NDEF message on writes starting mid-NLEN in NFC
- Fix MIFARE Plus 2K mis-sizing in SL1 by detecting it as full 32 sectors through ISO14443-4 ATS in NFC
- Fix MIFARE Plus 2K SL1 transit parsers for Troika, Plantain, SevPPK, SZPPK and Two Cities in NFC
- Fix transit parsers skipping key recovery on a partial read in NFC
- Fix memory leaks and double-frees in the NFC app
Main changes
- Current API: 88.2
- SubGHz: Fix endless TX causing RAW files to be transmitted and crash the system (via RPC / Mobile App) (Fixes issue #1008)
- SubGHz: Fix crash when exiting CLI
subghz chatwith an external CC1101 - pressing Ctrl+C dereferenced the just-freed external CC1101 radio plugin during chat worker shutdown; internal CC1101 was unaffected (by @mishamyte | PR #1036 | Fixes #829) - SubGHz: Fix Frequency Analyzer leaving the radio in a degraded state - the worker parked the internal CC1101 with the antenna isolated and its near-field AGC profile still loaded; apps driving the radio HAL directly (without a full re-init) inherited a "sticky" sensitivity loss - the radio is now reset to its boot state on exit (by @mishamyte | PR #1045 | Fixes #1044)
- SubGHz: Add Telcoma/Cardin EDGE protocol (32bit, Static) (by @half2me | PR #1001)
- SubGHz: Fix Pecinin keeloq manufacturer (by @lifegame1lu111)
- SubGHz: RAW files corruption fix (by @Lechnio)
- LFRFID: Support of Hitag Micro chips (8265/8210/H5.5) (by @mishamyte | PR #1002)
- LFRFID: Wipe T5577 (reset to blank, with read-back verification) (by @mishamyte | PR #1003)
- LFRFID: Read T5577 tags holding multiple EM4100 IDs again - a T5577 written with several EM4100 IDs (e.g. via Multiwriter) hung on Read since the Electra protocol was added; also resets a stale PAC/Stanley decoder buffer (by @mishamyte | PR #1025 | Fixes #1024)
- NFC: Native MIFARE Plus support in SL3 - MIFARE Plus is now a first-class protocol instead of detection-only: read (AES auth + encrypted/plaintext blocks, admin keys & config, originality signature), automatic dictionary attack with a per-UID key cache (instant re-reads of saved cards), full SL3 emulation with shadow-writeback (a reader can authenticate, read & write the recovered card), write/update-to-card, GetVersion + ATS-based S/X/SE/EV1/EV2 detection, "Add Manually" for 18 Plus variants, and MIFARE-Classic-style dump & keys screens; SL0/SL1/SL2 stay untouched (by @mishamyte | PR #1032 | Closes #1031)
- NFC: Fix Type 4 Tag emulation crashing on malformed NDEF write APDUs - a reader could reboot the Flipper with a 4-to-7 byte
UPDATE BINARY: an empty data field, a truncated NLEN write that underflowed the length into a ~4 GB allocation, or an unclamped 64 KB NLEN; a partial NLEN write also no longer zeroes the byte it didn't cover (by @mishamyte | PR #1051 | Fixes #1050) - NFC: Fix Type 4 Tag emulation corrupting the NDEF message on writes starting mid-NLEN - a reader updating from file offset 1 had its payload shifted one byte and picked up a stale byte from the previous frame (by @Endika | PR #1049)
- NFC: Show MIFARE Ultralight/NTAG PWD & PACK in full info view / on read screen too (by @mishamyte | PR #1010 #1011)
- NFC: Add Bambu Lab filament spool parser (type, color, code, temps, spool specs) (ported from uzyn/flipper-bambu, GPL-3.0)
- NFC: Align MIFARE type detection with NXP AN10833 - Classic/Ultralight/NTAG/Plus sizing & security level; fixes Mifare Mini clone mis-detection and Ultralight AES read hang (by @mishamyte | PR #1014)
- NFC: Read MIFARE Plus 2K in SL1 as full 32 sectors / 64 keys - a Plus 2K in SL1 is byte-identical to a Classic 1K in SAK/ATQA and was mis-sized as 1K; it is now told apart by its ISO14443-4 ATS (Plus S/X signature), while Plus SE, SmartMX, magic "Perfect CUID" and plain 1K stay 1K (by @mishamyte | PR #1016)
- NFC: Fix MIFARE Plus 2K SL1 transit parsers - Troika, Plantain, SevPPK, SZPPK and Two Cities stopped parsing once Plus 2K SL1 cards began reporting as the new
2Ktype (PR #1016): the parsers only knew1K/4Kand required a full-card read. They now treat 2K as the 1K these cards present and accept a partial read (by @mishamyte | PR #1038 | Fixes #1037) - NFC: Fix transit parsers skipping key recovery on a partial read - Troika, Plantain, SevPPK, SZPPK and Two Cities reported a read as successful on any partial read (needed for Plus 2K SL1), so a card whose data sector wasn't actually read skipped the dictionary/nested attack instead of recovering its keys; a partial read is now accepted only when the sector the parser needs is read (by @mishamyte | PR #1043 | Fixes #1042)
- NFC: Show a loading screen while a large CUID dictionary loads on Read - animated spinner + "CUID dictionary is loading" label instead of a blank/frozen-looking screen while a per-UID (MFKey-recovered) dictionary is scanned (by @mishamyte | PR #1022)
- NFC: Fix memory leaks & double-frees in the NFC app - heap-corrupting double-frees in the Plantain and SZPPK/SEVPPK/SK transit parsers (crash on two-trip tickets), leaks in the Saflok parser, the app API resolver (per launch) and the CUID-dictionary error path, plus a ~15x RAM over-allocation of the MIFARE DESFire file-data array (by @mishamyte | PR #1030 | Fixes #1029)
- OFW: NFC: Fix iso15693 emulation dropping Read Multiple Blocks for tags >64 blocks
- OFW PR 4383: NFC FeliCa: Add Standard card emulation support (by @nikachu2012)
- RPC: Add Network and GPS RPC services (by @apfxtech (Network based on @noproto code and idea) | PR #1013)
- Clock: New NightStand Clock as the default Clock app - the built-in clock app is replaced by the NightStand Clock: overnight display with Up/Down screen-brightness control, red LED nightlight, stopwatch, and a daily alarm with a 12h/24h-aware picker that follows the system locale; the alarm and brightness level are saved under
/ext/apps_data/clock/and restored on launch (by @nymda | fixes by @WillyJL & @mishamyte | alarm by @xMasterX) - Apps: NFC Magic 2.0 - magic Ultralight/NTAG (USCUID-UL) write, clone & wipe: transport auto-selected from detection (direct CUID/ATS or backdoor), PWD-AUTH to write protected tags, "write anyway" for unconfirmed tags, per-page Partial Write with a details list of the pages that didn't take (and resume if the card is briefly removed), plus family-first detection of UL11/UL21, NTAG213/215/216, UL-C and UL-5; Gen2 CUID/static-nonce detection, Gen1 4b/7b UID, length-aware wipe & write guard, and honest per-block Success/Partial/Fail reporting on Gen2/MFC wipe & clone (by @mishamyte)
- Apps: Build tag (27jul2026) - Check out more Apps updates and fixes by following this link
Other changes
- OFW: CLI: consistent quoted path handling for loader and Sub-GHz
- OFW: bit_lib: don't read past the buffer when the bits fit one byte
- OFW: js_event_loop: reject a non-positive timer interval
- OFW: LFRFID: fix the Pyramid trailing Wiegand parity bit
- OFW: LFRFID: NUL-terminate the PAC/Stanley card id before parsing it
- OFW: NFC FeliCa: check the poller error before reading the system-code response
- OFW: Infrared: initialize timings_cnt on decoder alloc and fix its bounds check
- OFW: Allow for checking if an id is in use before adding to view dispatcher
- OFW: CCID: move USB layer from firmware HAL into ccid_test app
- OFW: Storage Python script: add retry on file copy to Flipper
- Apps: Update FindMy app
- Fix BLE sync, fix possible delay related issues
- Disabled debug and trace logs in the FW binary (apps .fap's are not affected) to free up some flash space for new features
- NFC: Fix typo in SLIX poller (by @WillyJL)
- NFC: Internal MIFARE Plus cleanup - data-drive the "Add Manually" generator variants and unify the admin-key address mapping into one source of truth; small internal-flash saving, no functional change (by @mishamyte | PR #1035)
- NFC: Fix wrong parent protocol in the Type 4 Tag listener assert - copy-pasted from the SLIX listener, so debug builds crashed as soon as Type 4 Tag emulation received a frame; release builds were unaffected (by @mishamyte | PR #1051)
Please support development of the project
| Service | Remark | QR Code | Link/Wallet |
|---|---|---|---|
| Patreon | patreon.com/mmxdev | ||
| Boosty | patreon alternative | boosty.to/mmxdev | |
| CloudTips | only RU payments accepted | pay.cloudtips.ru/p/7b3e9d65 | |
| YooMoney | only RU payments accepted | yoomoney.ru/fundraise/XA49mgQLPA0.221209 | |
| USDT | TRC20 | TSXcitMSnWXUFqiUfEXrTVpVewXy2cYhrs | |
| ETH | BSC/ERC20-Tokens | 0xFebF1bBc8229418FF2408C07AF6Afa49152fEc6a | |
| BTC | bc1q0np836jk9jwr4dd7p6qv66d04vamtqkxrecck9 | ||
| SOL | Solana/Tokens | DSgwouAEgu8iP5yr7EHHDqMNYWZxAqXWsTEeqCAXGLj8 | |
| DOGE | D6R6gYgBn5LwTNmPyvAQR6bZ9EtGgFCpvv | ||
| LTC | ltc1q3ex4ejkl0xpx3znwrmth4lyuadr5qgv8tmq8z9 | ||
| BCH | qquxfyzntuqufy2dx0hrfr4sndp0tucvky4sw8qyu3 | ||
| XMR | Monero | 41xUz92suUu1u5Mu4qkrcs52gtfpu9rnZRdBpCJ244KRHf6xXSvVFevdf2cnjS7RAeYr5hn9MsEfxKoFDRSctFjG5fv1Mhn | |
| TON | UQCOqcnYkvzOZUV_9bPE_8oTbOrOF03MnF-VcJyjisTZmsxa |
Thanks to our sponsors who supported project in the past and special thanks to sponsors who supports us on regular basis:
@mishamyte, ClaraCrazy, Pathfinder [Count Zero cDc], callmezimbra, Quen0n, MERRON, grvpvl (lvpvrg), art_col, ThurstonWaffles, Moneron, UterGrooll, LUCFER, Northpirate, zloepuzo, T.Rat, Alexey B., ionelife, ... and all other great people who supported our project and me (xMasterX), thanks to you all!
Recommended update option - Web Updater
What e, , c means? What I need to download if I don't want to use Web updater?
What build I should download and what this name means - flipper-z-f7-update-unlshd-090(e / c).tgz ?
flipper-z = for Flipper Zero device
f7 = Hardware version - same for all flipper zero devices
update = Update package, contains updater, all assets (plugins, IR libs, etc.), and firmware itself
unlshd-090 = Firmware version
| Designation | Base Apps | Extra Apps |
|---|---|---|
| ✅ | |
c | ||
e | ✅ | ✅ |
To enable RGB Backlight support go into LCD & Notifications settings
⚠️RGB backlight hardware mod, works only on modded flippers! do not enable on non modded device!
Firmware Self-update package (update from microSD) - flipper-z-f7-update-unlshd-090.tgz for mobile app / qFlipper / web
Archive of scripts folder (contains scripts for FW/plugins development) - flipper-z-any-scripts-unlshd-090.tgz
SDK files for plugins development and uFBT - flipper-z-f7-sdk-unlshd-090.zip