Install Public Release for KEYREAPER_2133.R4

KEYREAPER_2133.R4 — v1.0.0 Release Notes

Release Date: July 30, 2025
Codename: Phantom Injector

---

🚀 Features

• ✅ Self-hosted web interface on Arduino Uno R4 WiFi + PN532
• 🔍 RFID/NFC reading, dumping, and cracking (MIFARE Classic, ISO14443A)
• ✍️ Tag writing via block-level hex input
• 📶 Aggressive deep scan mode with multiple key dictionaries
• 🧠 20-tag history buffer (UID, type, keys, data)
• 🔧 Serial debug interface for real-time monitoring
• 🌐 Operates via onboard WiFi Access Point (192.168.4.1)

---

📉 Known Issues

• Slow tag recognition when multiple tags are present at once
• Some phones may fail to connect to AP if captive portal blocking is enabled
• On mobile Safari, UI buttons may require double-tap due to iOS interaction model

---

⚠️ Vulnerabilities and Disclosures

❗ No Authentication on Web Interface

• Impact: Anyone within WiFi AP range can access full tag read/write features
• Mitigation: Use only in isolated field/test environments or enable a proxy firewall layer externally
• Planned Fix: Auth layer with tokenized login planned for v1.1.0

❗ Tag Bricking Risk (MIFARE)

• Impact: Writing to certain protected blocks (e.g., sector trailers) can permanently brick tags
• Mitigation: User must verify target block before writing. No auto-protection in this version.
• Planned Fix: Add block-lock warning in UI + softlock toggle

❗ No HTTPS Support

• Impact: Web UI traffic is unencrypted (though local)
• Context: Due to ESP32 limitations, SSL termination not implemented
• Mitigation: Do not expose this device to WAN/LAN — field use only
• Planned Fix: Optional ESP-proxy microservice with HTTPS planned

---

📦 Roadmap (Planned)

• Supabase integration for remote event logging
• FeliCa / NTAG support expansion
• UI theme customization and OTA firmware upload
• Tag clone templates and keyfile impo
• Handheld prototype
• TFT Resistive touch screen add to build 2.8" - 3.5"
• lithium ion battery added
• sd card 4-60gb added

✅ Tests Added

• Added test/test_main.cpp to verify UID parsing and WiFi boot
• Coverage includes: tag UID parsing, dictionary loop response, web server init

See: /test/test_main.cpp