| Bash Bunny | Multi-function USB attack platform — HID injection, storage emulation, and Ethernet over USB |
| Bluefruit LE Sniffer | BLE 4.0 packet sniffer — nRF51822 with Adafruit Sniffer firmware for Wireshark integration |
| Bus Pirate 3.6 | Universal bus interface — UART, SPI, I2C, JTAG with open-source firmware |
| Bus Pirate 5 | Universal bus interface — UART, SPI, I2C, JTAG, 1-Wire for hardware reverse engineering |
| CANable (USB-CAN) | CAN bus interface for automotive and industrial control system security testing |
| CatSniffer v3 | CC1352P7 multi-protocol sniffer — BLE, Zigbee, Thread, and sub-GHz in one device |
| CC-2531 | Zigbee USB sniffer dongle — IEEE 802.15.4 packet capture for smart home and ICS testing |
| Chameleon Ultra | NFC card emulator and cloner — multi-slot credential capture and replay for access control testing |
| Cynthion | USB protocol analyzer — deep USB traffic inspection, device emulation, and fuzzing |
| DWM3000EVB | Qorvo DW3000 UWB evaluation board — IEEE 802.15.4z HRP UWB protocol analysis |
| DWM3001CDK | Qorvo/Nordic UWB development kit — ranging, localization, and proximity access system testing |
| ESP32-D | Wi-Fi + BLE development board — custom implant development and wireless testing platform |
| Flipper Zero | Multi-protocol tool — sub-GHz RF, NFC/RFID, infrared, HID, iButton, and GPIO |
| GreatFET One | USB protocol analysis and testing — USB fuzzing, sniffing, and host/device emulation |
| Heltec UWB Sniffer Dongle | NXP NCJ29D5 UWB sniffer — passive capture of UWB ranging and secure sessions |
| Heltec WiFi LoRa32 v3 | ESP32-S3 + SX1262 LoRa transceiver with OLED display — Meshtastic and LoRaWAN testing |
| J-Link EDU Mini | SEGGER ARM/Cortex debugger — high-speed SWD/JTAG with JLinkExe commander interface |
| Key Croc | Keylogger with pattern-triggered keystroke injection and Wi-Fi exfiltration |
| LAN Turtle | Covert network access tool — USB Ethernet adapter with remote shell and tunneling |
| LilyGo LoRa32 v1.6.1 | ESP32 + SX1276 LoRa transceiver — long-range low-power wireless protocol testing |
| LilyGo T-Deck | ESP32-S3 handheld with keyboard, display, and LoRa — portable field operations terminal |
| LilyGo T-Zigbee v1.2 | ESP32-C3 + CC2652P Zigbee coordinator — network sniffing, key extraction, and device enumeration |
| Nordic nRF52833-DK | nRF Sniffer for BLE — passive Bluetooth Low Energy packet capture via Wireshark |
| Nordic nRF52840 | BLE 5 / Thread / Zigbee SoC development kit — multi-protocol wireless security research |
| nRF52840 Dongle | BLE 5 / Thread / Zigbee sniffer and injector dongle (PCA10059) |
| Nucleo-F429ZI | STM32F429ZI development board with integrated ST-Link debugger — custom firmware platform |
| Packet Squirrel | Inline Ethernet implant for packet capture, logging, and man-in-the-middle |
| Photon 2 | Particle IoT platform with Wi-Fi + BLE — cloud-connected device security testing |
| Plunder Bug | Passive Ethernet tap for inline packet capture without network disruption |
| Raspberry Pi 4B | ARM64 host platform — pentest appliance and drop box for remote engagements |
| Raspberry Pi 5 | ARM64 host platform — high-performance pentest appliance with USB 3.0 and PCIe |
| Raspberry Pi Pico | RP2040 microcontroller — MicroPython/CircuitPython for custom HID and sensor payloads |
| Raspberry Pi Pico 2W | RP2350 + Wi-Fi — next-gen dual-core microcontroller with wireless connectivity |
| Raspberry Pi Pico W | RP2040 + CYW43439 Wi-Fi — wireless-capable microcontroller for remote payload delivery |
| Rubber Ducky 3 | Next-gen keystroke injection with RP2040 processor and DuckyScript 3.0 |
| RZUSBSTICK / AVR Raven | KillerBee Zigbee attack platform — packet injection, replay, and key sniffing |
| Screen Crab | Inline HDMI man-in-the-middle for screen capture and video recording |
| Shark Jack | Portable Ethernet network attack and recon implant |
| Signal Owl | Signal intelligence platform for Wi-Fi and Bluetooth reconnaissance |
| Sonoff ZBDongle-E | EFR32MG21 Zigbee 3.0 coordinator with Thread support — smart home protocol analysis |
| ST-Link V2 | ARM Cortex debugger and programmer — SWD/JTAG interface for firmware extraction and flashing |
| TI CC1352P-4 LaunchPad | Dual-band BLE + sub-GHz sniffer with Sniffle — simultaneous Bluetooth and ISM band monitoring |
| TI CC26X2R1 LaunchPad | BLE 5.x sniffer running Sniffle firmware — long range, coded PHY, and connection tracking |
| Ubertooth One | Bluetooth and BLE sniffer — raw 2.4 GHz monitoring, connection following, and spectrum analysis |
| USB Rubber Ducky | Keystroke injection attack tool disguised as a USB flash drive |
| WiFi Duck | Wi-Fi-controlled keystroke injection via WebSocket — deploy scripts remotely over the air |
| WiFi Pineapple MK7 | Wireless audit platform — rogue AP, evil twin, probe request capture, and client deauth |
| Yardstick One | Sub-GHz RF transceiver (300–928 MHz) with RfCat framework for keyfob and ISM band testing |