Skip to content

Releases: sacriphanius/Zhilly

Zhilly M5-Stack-Cardputer & ADV v1.0.0

Choose a tag to compare

@sacriphanius sacriphanius released this 24 May 16:59

🇬🇧 English

Zhilly AI Pentester Assistant — M5-Stack Cardputer & ADV v1.0.0

This is the first official release of Zhilly firmware for the M5Stack Cardputer and M5Stack Cardputer ADV devices.

✅ Compatibility

  • M5Stack Cardputer (ESP32-S3, ST7789 135×240 display, keyboard)
  • M5Stack Cardputer ADV (Extended version with advanced pin configuration)

🚀 Features

  • 🎙️ Voice Assistant — Wake word "Nihao Miaoban", full natural language AI interaction
  • 💬 Standard LVGL Display UI — Clean emoji-based status screen (listening, thinking, speaking)
  • 📡 IR Blaster / TV-B-Gone — Send infrared kill codes to nearby TVs
  • ⌨️ BadUSB (HID Emulation) — USB keyboard emulation via AI voice commands
  • 📰 Smart News (NewsAPI) — Fetch latest headlines via voice
  • 🌐 Wi-Fi — ARP/Port scanning tools
  • 🔋 Power Management — Deep sleep, battery status query

📦 Flash Instructions

Extract the archive and see installation.txt inside for the esptool command.

Single command flash (recommended):

esptool.py -p /dev/ttyACM0 -b 460800 write_flash 0x0 merged-binary.bin

🇹🇷 Türkçe

Zhilly AI Pentest Asistanı — M5-Stack Cardputer & ADV v1.0.0

M5Stack Cardputer ve M5Stack Cardputer ADV cihazları için Zhilly firmware'inin ilk resmi sürümüdür.

✅ Uyumluluk

  • M5Stack Cardputer (ESP32-S3, ST7789 135×240 ekran, klavye)
  • M5Stack Cardputer ADV (Gelişmiş pin yapılandırmalı genişletilmiş versiyon)

🚀 Özellikler

  • 🎙️ Sesli Asistan — "Nihao Miaoban" uyandırma komutu, tam doğal dil AI etkileşimi
  • 💬 Standart LVGL Ekran Arayüzü — Temiz emoji tabanlı durum ekranı (dinleme, düşünme, konuşma)
  • 📡 IR Blaster / TV-B-Gone — Yakındaki televizyonlara kızılötesi kapatma kodu gönder
  • ⌨️ BadUSB (HID Emülasyon) — Sesli AI komutları ile USB klavye emülasyonu
  • 📰 Akıllı Haberler (NewsAPI) — Sesle en güncel haber başlıklarını getir
  • 🌐 Wi-Fi — ARP/Port tarama araçları
  • 🔋 Güç Yönetimi — Derin uyku modu, batarya durum sorgusu

📦 Flash Talimatı

Arşivi açın ve içindeki installation.txt dosyasında esptool komutunu bulabilirsiniz.

Tek komutla yükleme (önerilen):

esptool.py -p /dev/ttyACM0 -b 460800 write_flash 0x0 merged-binary.bin

Zhilly-T-Watch-S3-V1.1.2

Choose a tag to compare

@sacriphanius sacriphanius released this 20 Mar 07:34

Release Note – BadUSB Voice Command Execution (LILYGO T-Watch S3)

BadUSB functionality on the LILYGO T-Watch S3 has evolved beyond static payloads.

The device no longer depends on predefined scripts. Instead, it executes BadUSB commands dynamically based on direct instructions. For example, you can simply say “open terminal” on a Linux machine, and the device will trigger it instantly—then continue issuing further commands step by step in real time.

This brings a more fluid, interactive, and offensive-style workflow, turning the device into a live command interface rather than a passive payload runner.

Key Highlights:

USB HID (Keyboard) emulation fully active

Real-time, instruction-based command execution

No predefined payload limitations

Interactive and continuous command chaining

Designed for advanced Red Team scenarios

Sürüm Notu – BadUSB Sesli Komut Yürütme (LILYGO T-Watch S3)

LILYGO T-Watch S3 üzerinde BadUSB özelliği artık klasik payload mantığının ötesine geçti.

Cihaz artık önceden tanımlı script’lere bağlı kalmadan doğrudan verilen komutları çalıştırır. Örneğin bir Linux sistemde “terminal aç” dediğiniz anda terminali açar ve ardından yapılacak işlemleri adım adım, anlık olarak komut vermeye devam edebilirsiniz.

Bu yaklaşım, cihazı statik bir payload çalıştırıcıdan çıkarıp, canlı ve interaktif bir komut aracına dönüştürür.

Öne Çıkanlar:

USB HID (Klavye) emülasyonu aktif

Gerçek zamanlı, komut bazlı çalışma

Önceden tanımlı payload sınırı yok

Zincirleme ve interaktif komut yürütme

Gelişmiş Red Team senaryoları için tasarlandı**

Zhilly-T-Watch-S3-V1.1.1

Choose a tag to compare

@sacriphanius sacriphanius released this 19 Mar 12:14

T-Watch-S3 – Feature Update

Implemented Tesla Port Opening functionality with improved command handling and execution flow

Added RF Jammer module integration with configurable parameters

Optimized low-level RF communication layer for better stability and response time

Enhanced task scheduling and memory management for concurrent wireless operations

Refactored related services for modularity and maintainability

Improved error handling and fallback mechanisms during RF operations

General performance improvements and minor bug fixes

Zhilly-T-Watch-S3-V1.1.0

Choose a tag to compare

@sacriphanius sacriphanius released this 17 Mar 21:14
 LilyGO T-Watch S3 Exclusive Features

Specifically built for the T-Watch S3, Zhilly includes the following tools without needing a connected computer:

    High-Speed ARP Scanner: Sweeps your subnet using direct Layer-2 ARP table 
    inspection to instantly uncloak hidden network devices (IoT, secure cameras) 
   along with their physical MAC Addresses.
        Voice Command: "Scan the network for devices"
    Port Scanner: Performs rapid concurrent select() TCP checks on the top 21 
   vulnerable/administration ports of a target IP.
        Voice Command: "Scan ports on 192.168.1.10"
    DNS Resolver: Converts website domains directly into 
   physical IPv4 addresses on the watch display.
    IR Hacking: Transmit TV-B-Gone kill codes (NA/EU) or initiate  
   directed Infrared parrasite Jamming directly from the watch.
        Voice Command: "Turn off the TV" or "Start the IR jammer"
    OTA Upgrade & Power: Update the watch firmware via URL or 
   perform software reboots entirely through voice chat.

Zhilly-T-Watch-S3-V1.0.1

Choose a tag to compare

@sacriphanius sacriphanius released this 16 Mar 21:48

For now, It can only communicate with you.

Zhilly-V1.3.3

Choose a tag to compare

@sacriphanius sacriphanius released this 15 Mar 19:20

🇹🇷 Türkçe

BadUSB için önemli iyileştirmeler yapıldı.
Cihaz RAM’inde yer açılarak sistem daha stabil ve hızlı hale getirildi.

Artık SD kart takılı olmasa bile,
“Tesla portu aç” komutunu verdiğinizde cihaz otomatik olarak payload göndererek işlemi gerçekleştirecektir.

🔧 Stabil ve Kullanılabilir Özellikler

Aşağıdaki özellikler artık stabil ve kullanılabilir durumda:

🔹 BadUSB

🔹 TV-B-Gone

🔹 RF Jammer

🔹 IR Jammer

🔹 LED Control

🔹 Tesla Port Control

⚡ Yeni güncellemeler ve geliştirmeler çok yakında yayınlanacak.

🇬🇧 English

Significant improvements have been made to BadUSB.
Memory space has been optimized in the device RAM, making the system more stable and responsive.

Now, even if your SD card is not inserted,
when you say “open Tesla port”, the device will automatically send the required payload.

🔧 Stable and Usable Features

The following features are now stable and ready to use:

🔹 BadUSB

🔹 TV-B-Gone

🔹 RF Jammer

🔹 IR Jammer

🔹 LED Control

🔹 Tesla Port Control

⚡ More updates and improvements are coming very soon.

Zhilly-V1.3.2

Choose a tag to compare

@sacriphanius sacriphanius released this 11 Mar 20:57

🌍 Bad Usb Supported Keyboard Layouts

You can set the keyboard language via voice command (e.g. "Set keyboard layout to Turkish").

# Language Code Voice Command Example
1 🇺🇸 English (US) en_US "Set layout to English"
2 🇬🇧 English (UK) en_UK "Set layout to English UK"
3 🇹🇷 Turkish tr_TR "Set layout to Turkish"
4 🇩🇪 German de_DE "Set layout to German"
5 🇫🇷 French fr_FR "Set layout to French"
6 🇪🇸 Spanish es_ES "Set layout to Spanish"
7 🇮🇹 Italian it_IT "Set layout to Italian"
8 🇵🇹 Portuguese (BR) pt_BR "Set layout to Portuguese Brazil"
9 🇵🇹 Portuguese (PT) pt_PT "Set layout to Portuguese"
10 🇩🇰 Danish da_DK "Set layout to Danish"
11 🇸🇪 Swedish sv_SE "Set layout to Swedish"
12 🇭🇺 Hungarian hu_HU "Set layout to Hungarian"
13 🇸🇮 Slovenian si_SI "Set layout to Slovenian"

Default layout: en_US — The layout resets to US English after each session.

Zhilly-V1.3.1

Choose a tag to compare

@sacriphanius sacriphanius released this 07 Mar 20:00
e6a0e55

All cc1101 Bugs Fixed

t-embed-ai-pentester-V1.3.0

Choose a tag to compare

@sacriphanius sacriphanius released this 06 Mar 20:28

⌨️ Bad USB & HID
Keyboard Emulation: Your assistant can act as a standard USB keyboard when connected to a computer.
DuckyScript Support: Run automated keystroke scripts through it.

t-embed-ai-pentester-V1.2.0

Choose a tag to compare

@sacriphanius sacriphanius released this 04 Mar 20:18

📰 Smart News (News API)
Fetch the latest global or local headlines via voice commands.
Example: "Tell me the latest technology news" or "What's the news in Turkey?"
Integrated via the news.get_top_headlines tool using NewsAPI.
📡 RF & IR Pentest Tools
Complete control over Sub-GHz and Infrared spectrums:

RF Jammer: Start/Stop signal jamming on specific Sub-GHz frequencies.
RF Replay (Test): Re-transmit .sub files stored on your SD card.
IR Jammer: Disrupt and evaluate infrared-controlled devices.
TV-B-Gone: Universal remote off-codes to switch off nearby TVs.
IR Replay (Test): Record and re-transmit infrared signals.
RAW Capture: Capture Sub-GHz signals with microsecond precision.
SD Card Storage: Save captured signals to the SD card for later use.
🌈 LED Strip & Visual Effects
Control the 8x WS2812 RGB LED ring:

Dynamic Control: Set colors, brightness (0-8), and animations like Blink or Scroll.
Voice Command: "Make the LEDs blue and set brightness to max."
🔋 System & Power
Battery Status: Ask about battery level or charging status.
Deep Sleep: Long-press the Power (PWR) button to enter deep sleep for maximum battery saving.
Brightness Control: Voice-adjust screen and LED intensity.