Select your board and flash over USB →
Current builds
| Board | Current firmware | Qualification |
|---|---|---|
| Screenless ESP32-C5 · 8 MB | WLAN Commander C5 All-in-One · built October 20, 2026 | One board: browser installation, device MD5 and USB identity/idle-state readback |
| Waveshare Touch-LCD-2.8 · 32 MB | October 28 launcher and matching sensor application | Physical board flashed; repeat sequence and Stop during a gap verified through USB controls; approval retained |
| Touch-LCD-1.69 · 16 MB | October 28 launcher and matching sensor application | Build and source checks passed; hardware QA pending |
| Screenless C5 · 4 or 8 MB | 2026.09.07+1876915 legacy stable BLE sniffer |
Retained as an explicit installer option |
Other ESP32 chip families are not supported. The installer checks chip family and flash capacity, SHA-256 before writing and device MD5 after writing. Models sharing capacity cannot be distinguished automatically; choose the correct physical model.
Passpoint
Touchscreen Passpoint defaults to networks advertising the WFA HS2.0 vendor IE. Turn on Include Interworking-only for 802.11u Interworking advertisements too. This identifies advertised capability, not successful Passpoint authentication.
Touchscreen AirHORN update — October 28
DFS radar repeat runs 1–100 complete preset events with a configurable gap. Stop cancels the rest of the sequence, including while waiting in a gap. Runs remain bounded by the existing RF session timeout.
Attenuation now has one-tap 0 dB, 10 dB, and 20 dB presets alongside the quarter-dB fine adjustment. Lower attenuation means stronger output; 0 dB does not mean calibrated 0 dBm. Device approval and the per-session containment acknowledgement still apply.
The 2.8-inch app update was flash-verified. A 20-event sequence and Stop during a gap were checked on the board; the operator reported blips on an independent analyzer. These observations do not qualify radiated radar timing or access-point DFS detection. The 1.69-inch build has not been physically tested.
Download and source
Image ZIP: 838,509 bytes. Corresponding source: 103,373,696 bytes. Image ZIP SHA-256 Corresponding source archive SHA-256 ZIP checksum file · ZIP detached signature · Complete experimental manifest 2.8-inch application slots flashed and digest verified; finite 20-event repeat and Stop in a gap verified through USB control; attenuation preset layout rendered on device. Operator reported RF blips; radar timing and AP DFS detection remain unverified. Build, source and binary checks passed. No physical 1.69-inch QA for this release. Download both source archives to rebuild. Image ZIPs contain the exact flash parts and offsets for each model.Experimental 2026.10.20
c38fd74d0898ce5f63b6b8b8d3d630f5a3d77900c11a094c4baa128a7263f8cc
a0ccd97b580f50db9073646e2e0122e8f9cb5d18fa5619f1cfb6b8f72a9d69f4
Waveshare ESP32-C5-Touch-LCD-2.8 · 2026.10.28+a3392df0
9e399a70b60d993ec058ba2744f89acdfc8e5f70a9b2a95d95bbf9d36a1af219
Waveshare ESP32-C5-Touch-LCD-1.69 · 2026.10.28+bddcd551
0b714248cbc503367c9dc1aa3f4b06173b23d46e8542d6fcd0630436f26c0413
Touchscreen corresponding source
The October 28 touchscreen release contains both touchscreen image ZIPs and their corresponding source archive. Download the touchscreen source and the headless SDK/source archive together to obtain all pinned SDK and library sources for rebuilding. Each image includes exact offsets, configuration and source hashes. Signatures authenticate downloads; these builds do not enforce secure boot.
Manual installation
Extract the ZIP for your exact model. Close serial monitors. Use esptool and all parts and offsets listed in that ZIP's manifest. Screenless has four regions; touchscreen has five. Keep erase-all disabled to preserve NVS approval data. If needed, hold BOOT, tap RESET, release BOOT, and retry.
For the screenless 8 MB all-in-one:
python -m esptool --chip esp32c5 --port YOUR_PORT \
--before no-reset --after watchdog-reset write-flash \
--flash-mode dio --flash-freq 80m --flash-size 4MB \
0x2000 bootloader.bin 0x8000 partition-table.bin \
0xe000 ota_data_initial.bin 0x10000 wlc_sniffer_sdr.bin
The screenless image uses a 4 MB layout but is qualified on physical 8 MB boards. That does not qualify this experimental build for physical 4 MB hardware.
Operation and limits
2.4 and 5 GHz only; spectrum is relative, uncalibrated and gapped. No 6 GHz. Stop current operations before changing radio ownership. AirHORN requires device approval and a per-session shielding acknowledgement. This release was not independently qualified for RF transmission or actual FTM ranging. Static SRAM margin for the screenless build is 728 bytes. Stable OTA remains on September 7; this is an experimental browser download, not an automatic update promotion.
Public firmware source · Touchscreen screenshots and portrait video
Preserve GPL-3.0-or-later notices for the combined ESP-SDR variant and all ESPARGOS, Espressif, NimBLE and CodeHedge attribution. The root MIT license does not override component licenses.