# Current ESP32-C5 firmware.

> WLAN Commander C5 All-in-One built October 20, plus October 28 touchscreen images and matching source.

[Select your board and flash over USB →](/sensors/esp32-c5/flash/)

## Current builds

| Board | Current firmware | Qualification |
|---|---|---|
| Screenless ESP32-C5 · 8 MB | WLAN Commander C5 All-in-One · built October 20, 2026 | One board: browser installation, device MD5 and USB identity/idle-state readback |
| Waveshare Touch-LCD-2.8 · 32 MB | October 28 launcher and matching sensor application | Physical board flashed; repeat sequence and Stop during a gap verified through USB controls; approval retained |
| Touch-LCD-1.69 · 16 MB | October 28 launcher and matching sensor application | Build and source checks passed; hardware QA pending |
| Screenless C5 · 4 or 8 MB | `2026.09.07+1876915` legacy stable BLE sniffer | Retained as an explicit installer option |

Other ESP32 chip families are not supported. The installer checks chip family and flash capacity, SHA-256 before writing and device MD5 after writing. Models sharing capacity cannot be distinguished automatically; choose the correct physical model.

## Passpoint

Touchscreen Passpoint defaults to networks advertising the **WFA HS2.0 vendor IE**. Turn on **Include Interworking-only** for 802.11u Interworking advertisements too. This identifies advertised capability, not successful Passpoint authentication.

## Touchscreen AirHORN update — October 28

**DFS radar repeat** runs 1–100 complete preset events with a configurable gap. Stop cancels the rest of the sequence, including while waiting in a gap. Runs remain bounded by the existing RF session timeout.

Attenuation now has one-tap **0 dB**, **10 dB**, and **20 dB** presets alongside the quarter-dB fine adjustment. Lower attenuation means stronger output; 0 dB does not mean calibrated 0 dBm. Device approval and the per-session containment acknowledgement still apply.

The 2.8-inch app update was flash-verified. A 20-event sequence and Stop during a gap were checked on the board; the operator reported blips on an independent analyzer. These observations do not qualify radiated radar timing or access-point DFS detection. The 1.69-inch build has not been physically tested.

## Download and source


The October 28 touchscreen release contains both touchscreen image ZIPs and their corresponding source archive. Download the touchscreen source and the headless SDK/source archive together to obtain all pinned SDK and library sources for rebuilding. Each image includes exact offsets, configuration and source hashes. Signatures authenticate downloads; these builds do not enforce secure boot.

## Manual installation

Extract the ZIP for your exact model. Close serial monitors. Use esptool and all parts and offsets listed in that ZIP's manifest. Screenless has four regions; touchscreen has five. Keep erase-all disabled to preserve NVS approval data. If needed, hold BOOT, tap RESET, release BOOT, and retry.

For the screenless 8 MB all-in-one:

```sh
python -m esptool --chip esp32c5 --port YOUR_PORT \
  --before no-reset --after watchdog-reset write-flash \
  --flash-mode dio --flash-freq 80m --flash-size 4MB \
  0x2000 bootloader.bin 0x8000 partition-table.bin \
  0xe000 ota_data_initial.bin 0x10000 wlc_sniffer_sdr.bin
```

The screenless image uses a 4 MB layout but is qualified on physical 8 MB boards. That does not qualify this experimental build for physical 4 MB hardware.

## Operation and limits

2.4 and 5 GHz only; spectrum is relative, uncalibrated and gapped. No 6 GHz. Stop current operations before changing radio ownership. AirHORN requires device approval and a per-session shielding acknowledgement. This release was not independently qualified for RF transmission or actual FTM ranging. Static SRAM margin for the screenless build is 728 bytes. Stable OTA remains on September 7; this is an experimental browser download, not an automatic update promotion.

[Public firmware source](https://github.com/WiFivomFranMan/wlan-commander-esp32) · [Touchscreen screenshots and portrait video](/sensors/esp32-c5/flash/#passpoint-on-the-touchscreen)

Preserve GPL-3.0-or-later notices for the combined ESP-SDR variant and all ESPARGOS, Espressif, NimBLE and CodeHedge attribution. The root MIT license does not override component licenses.