BLEShark Nano

Explore wireless security with a pocket-sized tool for Wi-Fi, Bluetooth and infrared. Scan nearby signals and test your own devices from the built-in screen, or connect to your computer over USB-C for the SDK.

Shop Nano →$80.00 CAD $73.00 CADExplore CTF labs

Assembled in Canada

BLEShark Nano

Learn wireless security with InfiShark CTF

Work through a lab, solve its challenge, and submit a flag to record your progress.

Our capture-the-flag platform gives you a place to practice with your Nano, with a clear objective for each lab to help you understand the signals behind its tools.

Explore the labs Find your Nano setup

Digital labs

Practice wireless security on your computer through challenges that do not require a Nano.

Physical labs

Use your BLEShark Nanos to work with real radios, with one device as the target and another as the attacker. Some labs also use a third Nano.

Selected digital and physical starter labs are free; CTF Pro unlocks the premium labs. Subscriptions bought in the CTF app are billed monthly and renew until cancelled. The 3-, 6- and 12-month prepaid add-ons sold here are paid once, start on activation and do not renew.

What it does

Wi-Fi scan
Survey 2.4 GHz APs with analysis graphs and exportable JSON.
Wi-Fi finder
RSSI hot/cold locator from a scan pick.
Handshake capture
WPA handshakes - single AP, SSID group, or rotating sweep.
PMKID capture
PMKID path alongside full EAPOL captures.
Deauth testing
Authorized deauth testing (region-dependent firmware).
Deauth checker
Detect deauth activity in the air.
Wi-Fi AP spam
Rickroll, random, funny, custom, and targeted modes.
BLE scan
Discover BLE devices with manufacturer context.
BLE spam
Spoof BLE advertisements across vendor styles.
BLE finder
RSSI locator for a chosen advertiser.
Airhorn
Find My-style beep loop for separated tags.
Bad-BT
DuckyScript HID keyboard (plus host HID paths when plugged in).
TV-B-Gone
Turn off common TVs in range.
Remote slots
Up to five Flipper-style remotes with named buttons.
Learn / receive
Capture IR timings protocol-agnostically.
Transmit
Replay learned or stored codes; host IR TX/RX too.
Easy setup
On-device Wi-Fi picker and on-screen keyboard.
Config
Edit Shiver, Wi-Fi, BT, IR, display, and system settings.
Transfer portal
SoftAP file transfer for scripts, portals, and lists.
Files & storage
Browse captures and free space on SPIFFS.
DuckyScript editor
Write Bad-BT scripts on-device.
Web flasher
flasher.infishark.com for recovery and updates.
Auto updates
Signed, verified OTA over saved networks.
Battery status
On-device battery view for field use.
Scroller
Control short-form video feeds over BLE.
TxtViewer
Read plain text files on-device.
Mini keypad
Custom Bluetooth keypad macros.
Stopwatch
Millisecond-accurate stopwatch.
Timer
Custom timers with screen alerts.
Malware Hunter
Vampire-survivors action with a boss fight.
Flappy Bird
Tap to fly. Doubles as Emergency Mode.
Space Invaders
Classic alien shooter.
Pong
Battle the AI in a retro paddle game.
Breakout
Break bricks with a bouncing ball.
T-Rex
Endless runner.
Racer
Tight turns, no collisions.
Execute
Fan-out scan, portal, handshake, BLE, IR, and control to peers.
Dashboard
Multi-page mesh overview across nodes.
Pair
BLE pairing flow for new mesh members.
Self-organising mesh
Power on and discover peers over ESP-NOW.
Self-healing routes
Nodes drop; mesh re-routes.
Sync
Pull/push PCAPs, portal JSON, settings, and files.
Chat
Short team messages over the mesh.
Diagnostics
Burst/RTT probes for link health.
Long Range
Optional PHY that trades rate for distance (peers must match).
Wi-Fi router
SoftAP clients → STA upstream with NAPT - pocket edge router on-device.
USB Wi-Fi adapter
Plug into a laptop for a host network path (SLIP + NAPT).
Captive portal
SoftAP captive portal for authorized lab phishing and training.
Evil portal
Login-style lab pages; credentials captured on-device.
Host HTML stream
Lab pages live on your computer; Nano is the radio and SoftAP.
Connect & saved nets
Join networks from the OLED; multi-network store for field use.
Live monitor
Host-side promiscuous / associated monitor into pcap and Wireshark.
Host CLI
Drive Wi-Fi, BLE, and IR from one cross-platform Rust shell over USB-C.
USB Wi-Fi adapter
STA + SLIP + NAPT - a Linux tun path so the Nano acts as a pocket research radio.
Live monitor
Stream 802.11 monitor frames into Wireshark in real time.
Raw 802.11 TX
Inject frames from the host (hex path; named templates landing in the CLI).
Handshake + PMKID
4-way EAPOL and PMKID to pcap / hashcat-friendly host workflows.
BLE central
Scan, connect, enumerate GATT, read/write, subscribe to notifies.
BLE advertise & serve
Custom advertising and GATT server tables from the host.
HID + Bad-BT host
Keyboard/mouse/gamepad paths and HID bridge (Linux inputs → BLE).
Portal host stream
Serve multi-file lab HTML from your computer while the Nano runs SoftAP.
Device files
List, pull, and push captures, portals, and settings.
Vendor intel
On-host OUI and company databases, fully offline.
JSON everywhere
Every command emits JSON for automation and pipelines.
Rust libraries
Documented crates to build your own tools - no proprietary DSL.
BLEShark Nano, top-down, OLED and three buttons

Wi-Fi and BLE, on the device

Locate by RSSI. Capture handshakes and PMKID. Run a captive portal. Authorized deauth. Plug in and the same radio is a USB Wi-Fi adapter over SLIP, or a pocket router.

  • Locate

    RSSI hot/cold for a picked AP or BLE advertiser.

  • Handshake / PMKID

    Capture on the Nano. Pull to the host when you want.

  • Portal

    SoftAP captive pages on the device, no laptop in the loop.

  • USB adapter

    SLIP + NAPT. The host treats the Nano as a research radio.

  • Router

    SoftAP clients through STA upstream, on the device.

BLEShark Nano IR window and thickness

Transmit and learn

IR emitter and receiver on the front edge. TV-B-Gone, up to five stored remotes, learn a code and play it back. The same IR path is available from the SDK when the Nano is plugged in.

  • TV-B-Gone

    A built-in library for common TVs in range.

  • Remotes

    Up to five named remotes with stored buttons.

  • Learn / replay

    Capture timings, then transmit them again.

BLEShark Nano internals, front, labeled BLEShark Nano internals, back, labeled
Six BLEShark Nanos linked in a Shiver mesh

Shiver

Two to sixteen Nanos talk over ESP-NOW. Fan out a scan, portal, handshake, BLE, or IR job. No phone in the middle. This is why a 3-pack exists.

  • Pair

    BLE pairing for new mesh members.

  • Execute

    Send a job to every peer on the mesh.

  • Heal

    Nodes drop; the mesh re-routes.

Control it from your computer

Plug the Nano into a USB-C port. The SDK talks to the same Wi-Fi, BLE, and IR radios from your machine. Open source, for Linux, macOS, and Windows.

One SDK, every radio
Drive Wi-Fi, BLE, and IR from your computer.
Device files
Pull captures, portals, and settings off the Nano.
Libraries
Build your own tools on the documented SDK.
Linux / macOS curl -fsSL https://cdn.infishark.com/install.sh | sh
Windows irm https://cdn.infishark.com/install.ps1 | iex
Docs Open source · Linux, macOS, Windows

Tech specs

BLEShark Nano
[01]
SoC
XIAO ESP32-C3RISC-V2.4 GHz Wi-Fi 802.11 b/g/n and BLE 5.0.
[02]
Size
65 × 42.5 × 15 mmunder 50 gPocketable. USB-C on the bottom edge.
[03]
Battery
500 mAh Li-ionAbout 7 hours of average use. Hardware power switch.
[04]
Display
0.66" OLEDOn-device menus. Three navigation buttons.
[05]
IR
TX + RXTSAL6200 emitter, TSOP4838 receiver.
[06]
Host
USB-CCharge, firmware, and the SDK when you want a computer in the loop.
Buy →