v1.1.0 Changelog

v1.1.0 Changelog

The host SDK release. The Nano is the radio; your computer is the brain.

v1.1.0 is the largest capability jump since Shiver (v1.0.0). It turns the BLEShark Nano from a fixed set of OLED workflows into a host-driven RF research platform: a full USB serial control plane, an open-source CLI and SDK (infishark), scriptable BLE and Wi-Fi primitives, monitor-to-Wireshark capture, a USB Wi-Fi adapter path, host-streamed captive portals, and more.

On-device menus still work without a computer. This release unlocks the radio for lab workflows that never fit on a 0.66" screen.

Headline: Host SDK And USB Control Plane

The Nano now speaks a stable framed protocol over USB serial. Your laptop can discover the device and read identity/status, drive Wi-Fi, BLE, and IR tools without touching the OLED, stream events (scans, frames, GATT notifies, portal requests, IR captures), and pull or push files on SPIFFS.

The open-source host project is infishark (Rust SDK + CLI). Guides live on the docs site under SDK & CLI.

This is the architectural shift: the device is an RF peripheral; the host provides compute, storage, and scripting.

Wi-Fi

USB Wi-Fi adapter

On Linux, the Nano can join a network and present a tun interface to the host over a SLIP tunnel (NAPT on-device). Options include random STA MAC, DHCP hostname, MTU/MSS, and route-all mode.

Promiscuous monitor

Live 802.11 capture streams to the host as radiotap pcap: pipe to Wireshark or write a file. Filters cover frame types, subtypes, EtherType, BSSID, RSSI, PHY, length, encrypt/clear, and custom byte matches.

Associated monitor: join a network first (--ssid / --pass or a saved network index), then enable promiscuous mode while staying connected so capture stays on the AP channel. Other clients' unicast remains encrypted with their keys; this is on-BSS capture, not full-LAN cleartext.

Handshake and PMKID

PMKID and 4-way captures unify on per-AP hs_*.pcap files. The host produces hashcat mode 22000 (optional --crack). Crackable-save rules are stricter. Multi-AP "Saved" tallies no longer run past the target count, and hidden-AP captures are named by BSSID to avoid collisions.

Deauth, raw TX, scan, saved networks

Host-driven deauth, raw 802.11 inject, Wi-Fi scan with host OUI enrichment, and a unified STA connection engine with a multi-network saved store (Connect / OTA / adapter).

Captive portal (SoftAP)

Start a SoftAP from the host with session options: SSID, open or WPA2 password, channel, hidden SSID, max clients, MAC or random MAC, IP/netmask, and beacon interval.

Host-streamed HTML: multi-file pages live on your computer and stream over USB when a phone requests them, so you are no longer limited to one small SPIFFS page. The CLI prints rich request metadata (User-Agent, headers, client IP, station MAC/RSSI, SoftAP identity).

The phone-facing SoftAP uses standard 2.4 GHz PHY so normal phones can see the network.

Bluetooth LE

GATT central

Connect, enumerate services and characteristics, read, write, and subscribe to notifications (NDJSON on the host). Pairing options include bond, MITM flag, Secure Connections, IO capability, and passkey.

Peripheral and HID

Custom advertising and a user-defined GATT server. HID keyboard, mouse, gamepad, and consumer presets, or raw report maps. Type text or send reports from the host.

HID bridge (Linux): grab host inputs and drive the paired BLE device, or clone a raw hidraw device.

Stack and RF polish

  • BLE 5 extended advertising path (legacy PDUs for compatibility).
  • On-demand BLE stack with keepalive and reset for long host workflows.
  • Scan hardening for dense environments.
  • Shared MAC spoof helper for identity experiments.

IR

Host IR receive with noise filtering. Transmit protocol codes, raw timings, and TV-B-Gone. Flipper-style .ir parse/write on the host, and push remotes into on-device slots. Transfer-portal import/export for remotes; mesh file sync for remote slots on supporting builds.

On-device UX

  • Signal finder: hot/cold RSSI locator for BLE and Wi-Fi targets from the tool menus (snapshot pick list; back without forced re-scan).
  • Input debounce: held Select no longer auto-fires after a long-press exit or screen change.
  • Menu title/index layout cleanup.
  • Mesh radio return helper: Long Range PHY is correctly restored after features, so LR mesh peers do not silently partition.

Handheld menus still include deauth, handshake, AP spam, portals, BLE spam, HID, IR, DuckyScript, games, Shiver mesh, OTA, and settings.

Host Tooling Note

New CLI commands require this firmware family (or newer).

  • CLI/SDK repository: see product docs SDK & CLI.
  • Docs site: https://docs.infishark.com (SDK section).

Authorized testing only: networks and devices you own, with written permission, or in controlled labs.

Compatibility

Existing settings, paired Nanos, saved Wi-Fi networks, captures, portal data, IR remotes, and user files are preserved across OTA.

For best results, update every node in a mesh to v1.1.0 before relying on new host-driven workflows. Stable release builds are available for US, EU, UK, CA, and ROW.

Back to blog