v1.0.0 Changelog

v1.0.0 Changelog

This is the biggest update in the Nano's history.

If you've owned a Nano for a while, this is the one. Everything that held the device back as a single-user, single-device pocket tool is gone. The Nano you pull out of the box today talks to other Nanos, coordinates attacks across a fleet, runs full Wi-Fi handshake capture, and finally lets you edit settings and DuckyScripts directly on the device, no captive portal required.

The highlights are below, but the short version is: v1.0.0 redefines what a Nano is. 

Headline: Shiver

The Nano is now a mesh device.

Shiver is a brand-new offline mesh protocol that runs between any group of paired Nanos. No Wi-Fi infrastructure, phone tether, cloud, accounts, or any of these disadvantages. Pair a couple of Nanos once over BLE, and they stay a coordinated unit for how long you want.

Every feature on the Nano is now mesh-aware

Shiver isn't a 'sidecar' that runs a few shared tasks. The Nano's entire feature set has been re-architected around the mesh. Wi-Fi pentesting, BLE, IR, and device management, all now run as distributed commands across any subset of peers you select.

The Execute menu is the "command console" for the fleet. It has four categories:

Wi-Fi

  • Captive Portal (custom HTMLs with JSON synchronization across nodes)
  • Scan Networks (distributed, deduped, spatial coverage)
  • Deauth (three targeting modes)
  • Handshake capture (PCAP export, mesh-wide "All APs")
  • AP Spam (Rickroll / Random / Funny / Targeted)

BLE

  • Scan (aggregated device list from every peer)

IR

  • TV-B-Gone (every Nano fires at once, turn off every TV in a venue simultaneously)
  • Custom IR TX (broadcast an IR payload from many locations at once)
  • IR RX (every peer listens; aggregated capture)

Manage

  • OTA Update (push firmware to every peer from one device)
  • Diagnostic Ping (brightness pulse, identify a specific peer visually)
  • Stop All (cancel any in-flight task on every peer at once)
  • Restart (reboot the whole mesh)

Why this matters

Pentesting from a single pocket device (or laptop, phone running NetHunter, etc) has always had a ceiling - you can only be in one place, only scan one area, run one attack at a time, and only test one room, one AP, one client.

Shiver breaks that ceiling.

Walk into a venue with six Nanos in your bag. Fire a Wi-Fi scan from one. All six scan their surroundings at the same moment and stream the results back. The deduped, spatial-coverage-consolidated list lands on your screen as if one omniscient Nano had been in five places at once. Coverage scales linearly with how many you carry.

Same pattern for every other feature. Pick any subset of peers from a multi-select target picker, hit go, and every device moves at once. Results aggregate automatically.

Capture once, everyone gets it

  • Captured portal JSONs sync to every Nano in the mesh with attribution (you see which Nano grabbed it).
  • Captured WPA handshake PCAPs sync to every Nano in the mesh automatically.

Plug any Nano into a computer later and you can export the entire fleet's captures.

Shiver Chat

Pure offline text messaging between paired Nanos. Broadcast to the whole mesh or direct-message a specific peer. No phone, no carrier, no SMS gateway. Built on the same encrypted mesh fabric as the rest of Shiver.

Two UX touches added for the beta: peers receiving a message see the same brightness pulse you get from a diagnostic ping, so a glanced-at device flags the arrival even if you weren't watching. The sender sees a confirmation banner ("Sent" / "Sent to N" / "Sent N/M") once the queue drains.

Coordinated attacks

Two-phase coordinated deauth arms every peer first and fires simultaneously for maximum disruption. Distributed cancellation re-floods STOP until every peer acknowledges, so a command started by one Nano actually ends on every Nano.

Identity & discovery

  • Custom per-device node names that gossip across the mesh, every status screen shows "Node Alpha" instead of "A0:85..."
  • Shiver Dashboard shows mesh size, online peers, routing diagnostics, and data rate.
  • Routing Diagnostic screen shows the full route table, and hop counts.
  • Diagnostic brightness-pulse ping, you know which Nano is "that one" when it literally blinks at you.

Pairing & trust

Device-to-device BLE pairing with on-screen confirmation, a 30-second countdown, and encrypted master-secret exchange. Once one Nano is paired, it syncs automatically to all other Nanos paired with the central.

Long Range mode

Opt-in LR mode for extended-distance mesh operation; toggle once on any Nano and every peer follows. Trade bandwidth for reach when you need it.

Shiver is the feature. Everything else in this release is supporting cast.

Mesh Sync App

The Sync app is the new home for everything the Nano shares across the mesh: handshake PCAPs, captured portal credentials, device settings, and ad-hoc files. It includes de-dup functionality.

Routing modes

Pick the source and destination independently. Both menus support the same options (All Peers, a single peer, This Device) so you can express any combination:

  • Pull every peer's portal credentials onto your Nano (FROM=All, TO=This Device).
  • Push your own captures to everyone (FROM=This Device, TO=All Peers).
  • Move a single file from peer A to peer B without going through your Nano (FROM=A, TO=B). The initiator is a coordinator in this mode: it tells the destination what to pull, then bows out; bytes flow directly between A and B over the mesh.

Multi-peer file picker

Pick a peer, browse their SPIFFS in a checkbox list, hit Send, and the chosen files flow to your Nano. Same UX the local file uploads use, but for any peer.

Truthful summaries

The DONE screen reports entries-actually-added (after dedup) instead of pulls-completed. A 15-peer portal pull that landed 2 new credentials reports "+2 new" instead of inflating the count to "+15". A successful session that found nothing to move (mesh already consistent) says "IN SYNC" instead of "0 files / 0 peers", no more reading "0/14" as failure.

Goodbye, Captive Portal Detour: On-Device Editors

Every returning user will feel this immediately.

The way it used to be

Want to change a setting on your Nano? Open Settings, launch Extra Settings, wait for the captive-portal Wi-Fi AP to appear, take out your phone, open Wi-Fi settings, connect to the AP, wait for the sign-in prompt, log in to the portal web page, navigate to the right field, type, save, disconnect, reboot.

Want to tweak a DELAY in your DuckyScript payload? Same trip, plus re-uploading the file, plus rebooting into Bad-BT, plus re-pairing to your target.

This is for every single iteration, even if it is a super tiny tweak.

The way it is now

On-device Settings Editor

Settings -> Edit. Seven categories, four widget types (toggles, numbers, pickers, strings), sub-menus for Screensaver / Updates / Upload AP, and an IR remote rename flow. Three buttons. Done. Zero captive-portal round-trips to change anything.

On-device DuckyScript Editor

You never have to open the captive portal to tweak a payload again. Open the script, edit the line, run it. Iteration drops from minutes to seconds per tweak.

If you've spent an hour debugging a HID payload on the old firmware, changing a DELAY, re-uploading, testing, changing it again, you know exactly how big this is.

Wi-Fi Pentesting

Handshake capture 

The Nano now captures WPA / WPA2 4-way handshakes on-device and exports them as PCAP files.

  • Target a single AP, a specific BSSID, or let it rip in "Capture All" mode, the Nano becomes a roaming sniffer that rotates through every visible AP automatically.
  • Smart dwell cycles one AP at a time, 8 seconds each, with upgrade-in-place for partial captures.
  • One-shot deauth strategy with per-AP cap and 10-second quiet windows so clients can actually complete the 4-way.
  • Mesh-aware: in "All APs" mode across a mesh, each peer scans its own area, and finalized PCAPs sync across.
  • Export via the web portal as a ZIP bundle.

Deauth

  • Three targeting modes now: flood-all, by SSID, by BSSID.
  • Scan-first flow with per-AP BSSID disambiguation for when you have multiple APs broadcasting the same SSID.
  • Multi-device coordinated deauth over the mesh, with distributed cancellation that re-floods STOP until every peer acknowledges.

Deauth checker

  • Three detection modes covering broadcast, per-SSID, and per-BSSID styles.
  • Live BSSID display.
  • Synchronized view across the mesh with aggregated alerts.

AP spam

  • Targeted AP spam with live Wi-Fi scan integration and mesh dispatch.
  • Random MACs instead of the broadcast-looking 00:00:XX pattern the old firmware used.
  • Millisecond time-budget scheduler replaces the old blocking loop, UI stays responsive during spam.

Wi-Fi manager

  • On-device multi-network Wi-Fi credential storage, finally.
  • Switch between saved networks without re-entering passwords.

Wi-Fi connect

Ever need to test if pentesting features work with 2.4GHz devices? Instantly test with the Nano by connecting it to a saved Wi-Fi network, have DHCP assign a local IP to your device, and re-connect after deauths. Perfect for authorized tests.

Scanning

  • Scans complete as soon as results arrive instead of always waiting the full 10 seconds.
  • Per-scan capacity raised to 24 APs so crowded areas don't drop networks.

Bluetooth & Bad-BT

  • Brand-new internal BLE state manager coordinates between spam, mouse, keyboard, and mesh pairing. Every crash-on-mode-exit case we knew about is fixed.
  • BLE node advertising uses a random MAC per boot.
  • Bad-BT device name length raised to 29 characters, fits more plausible target-specific disguises.
  • Many scan / spam memory handling and reliability improvements.
  • Mesh-wide BLE spam was prototyped for v1.0.0 but is held back. The C3's NimBLE / ESP-NOW radio coexistence requires a cooperative time-share rework before a multi-device session can stay reliable. Local BLE spam works as before.

 IR

  • Mesh-wide TV-B-Gone via Shiver, every Nano in the mesh fires at once. Turn off every TV in a large venue simultaneously from a single button press.
  • Mesh-wide Custom IR TX, pick a saved code on one Nano, every peer's IR LED fires the same code in unison. Peers do not change screens or interrupt whatever they were doing; a brief "IR TX" notification shows what just happened. The receiver de-arms during local transmits so a Nano's own LED doesn't echo back into its own receiver and produce phantom captures.
  • Mesh-wide IR RX. The initiator lands on a "Waiting for captures" collector view; peers run a background IR receiver while keeping their current screens and continuing to be usable. Decoded codes from any peer land on the initiator's screen with three controls: Skip / Send / Save. Save opens the standard remote-picker so you choose where to file the new command.
  • TV-B-Gone now shows an animated slot-reel of codes with region and count info while firing.

UI / UX

Fluid, modern menus

  • Complete rewrite of the vertical file-menu system, fluid scrolling animation, hold-to-scroll with acceleration, compact mode for denser lists.
  • Animated checkboxes for inline toggles, per-item indicator glyphs (submenu arrow, checkbox, etc.).
  • Marquee for long labels with bounded regions and pixel-precise ellipsis on overflow.

New screens & editors

  • Interactive JSON viewer for browsing saved data files.
  • Text viewer gained smooth scroll and an auto-hide scrollbar.
  • Redesigned number editor with proper fly-in animation.
  • IR remote rename flow using the character editor.

And hundreds of small polish items

Word-break text wrapping, consistent [S] hint placement, redesigned animations with proper easing, battery label cleanup at 100%, central screen-change input reset that eliminates the old "button press carries over into the next screen" glitch, and dozens more.

Apps & Games

Malware Hunter

A full Vampire-Survivors-style auto-shooter roguelike on a 64x48 pixel OLED with three buttons (definitely was tricky to implement!)

Eight unlockable weapons:

  • Slash (starter): sword swing on cooldown. Multi-slash upgrade fans additional sword directions.
  • Aura: per-enemy-over-time damage ring around the player; levels scale radius and tick rate.
  • Bit Cannon: auto-aim single bullet at the nearest enemy.
  • Multi-Shot: spread of bullets aimed at the nearest enemy cluster.
  • Chain Lightning: zaps hop between multiple nearest enemies with a jagged lightning visual.
  • Orbiter: rotating pixels that orbit the player and damage on contact; breathing radius.
  • Mines: proximity drops that detonate when an enemy walks over them.
  • Shockwave: radial burst out from the player that damages everything inside a growing ring.

Enemies include basic walkers and Bombers: contact with a Bomber doesn't kill it; it arms a fuse that detonates and hurts you if you don't escape the radius.

Bosses with cinematic spawn sequences, off-screen direction indicators, HP scaling, and a victory state with save reset. A shop between rounds with leveled upgrades, a Luck stat that speeds potion spawns, and four rarity tiers.

Screensavers

Game of Life and Pipes join DVD, Cube, and Matrix.

Web Portal & Data Export

  • New, revamped "Transfer" portal (Config -> Transfer) for uploading / exporting files.
  • Upload DuckyScripts, .txt documents, portal HTML files, and Wi-Fi network lists from your browser.
  • Export handshake PCAPs (single file or ZIP bundle), saved portal credentials, Wi-Fi lists, and settings JSON.

Power, Stability, Boot Speed

  • Boot is measurably faster: OTA check is deferred, NVS writes are batched, mesh init runs in the background after the UI is already interactive.
  • Eliminated two classes of "system-wide freeze" that plagued the old firmware.
  • Wi-Fi modem sleep and OLED power-save kick in automatically when the device is idle, longer battery life without you doing anything.
  • Low Battery threshold is now a configurable setting.
  • Boot Screen preference lets you pick which screen opens first.

Compatibility & Upgrade Notes

  • Everything you've saved transfers over: settings, paired BLE HID devices, DuckyScripts, portal HTML, Wi-Fi networks, and IR remotes.
  • If you were a single-device user, nothing new is forced on you. Shiver is opt-in and stays disabled until you pair at least one other Nano.
  • If you already have Nanos paired from the new setup firmware, the mesh auto-enables on first boot and your devices find each other automatically.

Release builds are available for US, EU, UK, CA, and ROW on both stable and beta tracks.

Enjoy.

Back to blog