GhostESP-Revival/GhostESP v2.1.1

on GitHub

Added

• Added GhostLink P1 Core and Peer support
• Added new Pong, 'Lightcycle', Breakout, Snake and Tetris games to the app marketplace for C5 and S3 targets
• Added Wake-on-LAN gadget
• Added Govee LAN light discovery and control
• Added Probe Request Flood attack (directed SSID probes with randomized MACs, supports multi-selected APs)
• Improved C5 station scans with AP-aware 5 GHz channel hopping
• Expanded wpa3check with cipher and Enterprise/EAP assessment limits, plus PMF deauth warnings
• Added per-observation sweep timestamps and PCAP capture statistics
• Added Bad Msg attack (forged EAPOL key-install frames that drop stations from WPA networks)
• Added Auth Flood attack (jittered 802.11 auth storm with randomized MACs and rate limiting)
• Added Compact, an icon-free single-screen label layout inspired by @MatthewKuKanich's Compact menu style in Next-Flip/Momentum-Firmware
• ARP host details now offer per-host Scan Open Ports, SSH Banner, NetBIOS, HTTP Banner, SNMP Probe/Walk and SMB Enum actions

Changed

• Condensed the SD card boot log into a single card summary line
• BLE manager now only deinits WiFi before init for non-PSRAM configs
• LAN scans now reuse ARP sweep results for host discovery with MAC vendor labels
• Port scan TCP connects now run 8 sockets in parallel for much faster subnet scans
• SMB enum now negotiates SMB2 and reports dialect + signing status on modern hosts
• SNMP probe now retries and validates responses; custom communities via snmpprobe communities
• LAN scans now use the real netmask (up to /20) instead of assuming /24
• Time now syncs via SNTP automatically on every Wi-Fi connection, not just manual wifi connect commands
• Random Beacon Spam now broadcasts multiple random SSIDs per channel hop
• Improved Airspace Monitor accuracy
• Card backgrounds are now off by default
• Various small optimisations to the ALPHA_8BIT LVGL rendering path
• The Banshee display is now double buffered
• Clarified Wi-Fi menu labels and standardised actions without the "Start" prefix
• Changed the pressed row styling to something a little.. cleaner
• Replaced the old splash logo on the TDeck
• Moved the Timezone settings option to it's own 'Date & Time' category
• Carousel labels now use a 60% opaque black background when an asset pack is enabled
• Moved the LVGL heap to PSRAM
• Moved UI and NFC buffers to PSRAM
• Moved GhostLink queues to PSRAM
• Removed unused NFC SPI buffers
• Removed a redundant OTA task
• Increased idle internal RAM from ~37 KB to ~75 KB
  Release: https://github.com/GhostESP-Revival/GhostESP/releases/tag/v2.1.1
  Changelog: https://github.com/GhostESP-Revival/GhostESP/blob/v2.1.1/CHANGELOG.md

Fixed

• Fixed Back navigation
• Fixed merged binary creation in GitHub workflow
• Fixed TDisplayS3-Touch touch input not working since ESP-IDF v6.0 i2c migration
• Fixed recurring "Wrong I2C status" errors on shared I2C buses: the shared I2C layer now caches device handles instead of adding/removing them per transaction
• Fixed sd read --base64 downloads sending truncated data
• Fixed OTA and Cloud Store manifest fetches failing when CDN requests were redirected from HTTP to HTTPS
• Fixed Cloud Store fetches failing TLS verification via the HTTPS proxy by enabling cross-signed certificate bundle verification on all boards
• Fixed the GhostLink BLE bridge making both paired boards advertise as "GhostESP Bridge" (duplicate devices in the companion scan) and dropping command responses
• Fixed WiFi auto-reconnect attempts during intentional WiFi shutdowns
• Fixed WiFi reconnect interfering with AP/STA scans
• Fixed the Channel Switch attack broadcasting beacons to the AP's own MAC instead of broadcast and transmitting them on the wrong channel
• Fixed EAPOL Logoff never starting in the STA-only boot configuration
• Fixed a 2-byte over-length beacon frame in Beacon Spam
• Fixed a stack buffer overflow and dropped packets in the BLE Samsung Buds spam payload
• Fixed stack overflows in the SNMP walk when formatting long OIDs
• Fixed the port scan looping forever and dividing by zero on a full 1-65535 port range, and missing ports that connect instantly
• Fixed the AP scan dropping valid results after a blocking scan
• Fixed use-after-free of ARP scan callback contexts on the lwIP thread and the packet monitor's unbalanced core-lock call
• Fixed the ARP poisoning ICMP sweep never running
• Fixed the SSH host scan ignoring a pending scan cancellation
• Fixed a stack overflow when running SMB enum on a single host from the UI
• Fixed ARP sweep hosts being missed when table entries evicted before harvest, and SMB parsing breaking on fragmented responses
• Fixed a stack overflow in the Probe Request Flood attack task
• Fixed inverted joystick/keyboard scroll direction in the Airspace Monitor
• Fixed a use-after-free panic in the display manager when a cached touch-pressed object was destroyed in-place before the release event
• Touch now doesn't affect row styling behind a settings popup when open
• Fixed Back navigation not returning to the true parent view
• Fixed Wi-Fi scan result Back navigation bouncing into stale result lists

You can flash the bins with https://ghostesp.net/flasher