mrkeyoor.com_
Thu 10 Sept 18:03 UTC
Dev Toolsevaluationupdated 10 Sept 2026

unleashed-firmware review

Unleashed Firmware is an unofficial Flipper Zero firmware fork with English documentation, extra Sub-GHz controls and protocols, NFC changes, bundled community apps, and interface tweaks. It is for owners who want more radio and device functionality than the official firmware exposes and who accept responsibility for custom firmware.

trackingstars / 7d
Verdict

Our Unleashed checkout occupied 199.7 MB, and pytest found 0 tests in lib/nanopb, so the 3-second nested build is not evidence that the firmware passed its test suite. Flipper Zero owners who want Unleashed's extra radio protocols and apps should try the stable release, keep a recovery path, and test the exact functions they depend on. Stay with official firmware if vendor support, regional transmit controls, or the smallest risk of hardware trouble matters more than added capability.

We ran it

Lab card: what happened when we ran unleashed-firmwareScreenshot of unleashed-firmware (flipperunleashed.com)
Install✓ · 47s39 packages · 67 MB
Build✓ · 3s
Tests✗ · 9s0 passed · 0 failed of 0 (pytest)
Known vulns0(pip-audit)
Repo9944 files~1,966,497 lines of source · 199.7 MB · 7 CI workflows · tests dir

Answers from our run

Does unleashed-firmware build from source?

Dependencies installed in 47 seconds (39 packages), and the build succeeded in 3 seconds. We cloned commit 945234a into a clean Debian container with 3 CPUs and no project-specific setup.

Do unleashed-firmware's tests pass?

Yes: 0 of 0 passed when we ran the project's own test command (pytest). Some failures need services or credentials a bare container does not have.

Does unleashed-firmware have known vulnerabilities in its dependencies?

pip-audit found none in the dependency tree at the time of our run.

Who should not use unleashed-firmware?

Anyone without a Flipper Zero: this is device firmware, not a desktop radio toolkit or emulator.

What are the alternatives to unleashed-firmware?

Official Flipper Zero firmware, Momentum Firmware, RogueMaster Firmware. Our Unleashed checkout occupied 199.

Setup4/5Web and app flashing are documented; first install needs official FW
Docs4/5Install, build, radio, plugin, and hardware warnings are documented
Community5/522,202 stars with September 2026 push, issue, and PR activity
Maturity4/5Release 092 is current, but plugin and protocol gaps remain open

Who it’s for

Flipper Zero owners who want broader Sub-GHz, NFC, infrared, and community-app support.
Radio and protocol developers prepared to build with fbt and verify behavior on hardware.
Hobbyists comfortable flashing, recovering, and keeping a microSD card in the device.
Users who can stay within local radio law even when the firmware removes regional transmit limits.

Who it’s NOT for

Anyone without a Flipper Zero: this is device firmware, not a desktop radio toolkit or emulator.
Buyers who require vendor support: the README says Unleashed is independent and is not affiliated with Flipper Devices.
Users likely to treat an unlocked frequency menu as permission to transmit: the README says regional TX restrictions are removed, while its dangerous-settings guide warns that out-of-spec frequencies can damage the radio.
People who need guaranteed replay for the Volpe doorbell at 310, 325, or 433 MHz: issue 910 reports that captured Manchester signals do not trigger it.
Teams that need a settled plugin-loading layer: issue 1136 tracks pre-existing cases involving silent directory-open failure, a possible null dereference, and plugin-owned data outliving an unloaded image.

Setup reality

Our sandbox worked inside the lib/nanopb/ submodule at commit 945234a, not the firmware root. Installing its Python environment succeeded in 47 seconds with 39 packages and 67 MB on disk, and its build passed in 3 seconds. Pytest failed with exit 5 after 9 seconds: 0 passed and 0 failed of 0, with the log stating no tests ran in 0.10s. Pip-audit found 0 known vulnerabilities.

Installing a release requires a Flipper Zero with a microSD card. First-time users must update to current official firmware, then use the Chromium-based web installer, Flipper Lab, a mobile app, qFlipper, or an offline update package. No hosted account or API key is required for those documented paths.

Building the firmware requires a recursive clone because the tree uses submodules, then the project's fbt command. Our 199.7 MB checkout contained 9,944 files and about 1,966,497 source lines, with 7 CI workflows, no Dockerfile, and a tests directory. We did not compile or flash the full firmware, and enabling radio ranges outside hardware specifications can damage the device.

Release 092 adds radio controls beyond the official firmware

Unleashed release 092 is an unofficial Flipper Zero firmware fork, compatible with API 88.4 according to its release notes. It keeps the familiar device interface while changing Sub-GHz behavior, adding protocols, bundling community apps, and extending NFC, infrared, BadUSB, Bluetooth, and GPIO functions. The largest philosophical change is radio access: the README says regional transmit restrictions are removed and additional frequencies can be enabled. That makes the device more flexible and puts more judgment on its owner.

Sub-GHz work is the clearest reason to install it. Unleashed adds protocol decoders and encoders, rolling-code tools, an expanded frequency analyzer, external CC1101 support, remote controls, and file-based brute-force utilities. NFC parsers and community applications widen the device beyond radio testing. Release 092 also moved NFC protocol scenes into plugins to cut resident RAM roughly in half. These are useful additions for experimentation on equipment you own, but they do not promise support for every remote, card, or accessory.

The 199.7 MB checkout assumes a real Flipper Zero

Our checkout occupied 199.7 MB and contained 9,944 files with about 1,966,497 source lines. That scale comes from a full embedded operating environment, applications, assets, build tools, hardware libraries, documentation, and imported submodules. A curious desktop user cannot evaluate the result through a normal app window. The meaningful checks happen after compiling or flashing it onto Flipper Zero hardware, then exercising the radio, NFC, storage, display, and plugin paths that matter.

The repository's 7 CI workflow files provide project automation, and its tests directory shows that firmware testing exists somewhere in the tree. Neither fact substitutes for a hardware check. The contribution queue makes that explicit: recent pull requests often list firmware builds and unit targets separately from physical-device verification, and some say hardware was not tested. If you depend on a particular gate remote, NFC card, or external module, keep the official firmware package and your prior settings available for rollback.

What happened when we ran it

Our sandbox entered lib/nanopb/, a Git submodule pinned by commit 945234a. Its Python environment installed successfully in 47 seconds, adding 39 packages and using 67 MB. The nested build succeeded in 3 seconds. Those results cover the nanopb support project selected by the harness. They do not show that fbt compiled the Flipper firmware, that an updater package was produced, or that any code ran on the device.

Pytest exited with code 5 after 9 seconds. It reported 0 passed and 0 failed out of 0, and the final log line said no tests ran in 0.10s. The useful finding is simply that pytest collected no cases in that selected directory; the log does not establish a deeper cause. Pip-audit found 0 known vulnerabilities in the 39 installed Python packages. Our measurement method never flashed hardware, so radio behavior, update safety, battery use, and plugin stability remain unmeasured.

A first install starts on current official firmware

The installation guide requires first-time users to update their Flipper Zero to the latest official firmware and insert a microSD card. The simplest route is the Unleashed web installer, which requires a Chromium-based browser and a direct device connection. The project also documents Flipper Lab, iOS and Android apps, qFlipper, and a manual microSD update. Stable releases and automatically built development images are separate choices; new users should take the stable branch.

No hosted credential or external service is necessary to flash the documented package. Source builders have more work: the clone must include recursive submodules, and ./fbt COMPACT=1 DEBUG=0 updater_package produces the update artifact. Android can build applications through Termux, but the guide says that route does not build the firmware. The 199.7 MB source tree is therefore optional for ordinary owners and unavoidable for developers changing C code or bundled assets.

API 88.4 shipped fixes for crashes and bad card output

Release 092 was published on August 21, 2026 with API 88.4. Its notes include fixes for out-of-memory crashes in the JavaScript runner and NFC, a crash on a DESFire card with a zero-key application, and an EMV plugin that did not load. Several card parsers also stopped presenting values from unread blocks. That release history is reassuring because the fixes are specific, but it also shows why card output should be checked before anyone treats it as authoritative.

Open reports remain specific too. Issue 910 says captured Manchester-coded Volpe doorbell signals failed to replay at 310, 325, and 433 MHz in the reporter's setup. Issue 1136 collects plugin-loading follow-ups, including a directory-open error reported as success and a possible null entry-point dereference. Unleashed's own dangerous-settings guide warns that extending the CC1101 outside its specified bands can damage hardware. Software unlocks do not change the radio's electrical limits or local transmission law.

The September 10 push and 26 open items show current work

GitHub recorded the last push on September 10, 2026 and listed 22,202 stars. Search results split the 26 open items into 20 issues and 6 pull requests. Issue 1136 was opened and updated on September 8, while Sub-GHz feature issue 827 was updated on September 9. Release 092 arrived less than 3 weeks earlier. Together those dates show active code, release, and triage work rather than a custom firmware frozen after one popular build.

Maintenance concentration still matters. The README says most development and maintenance comes from one lead developer with help from a small named team and community contributors. That is candid and gives buyers a reason to watch releases before upgrading. Unleashed is a sensible stable-channel choice for an experienced Flipper owner who wants its particular Sub-GHz and app changes. The failed 0-test pytest run offers no firmware assurance, so the decision should rest on release notes, a reversible flash, and hands-on checks of the hardware paths you actually use.

Alternatives

ProjectWhat it isPick it when
Official Flipper Zero firmwareThe vendor-maintained firmware and source tree for Flipper Zero.pick this instead when official behavior, regional radio controls, and the vendor's update path matter more than extra protocols and bundled apps.
Momentum FirmwareA customizable Flipper Zero firmware fork with its own app and interface choices.pick this instead when visual customization and Momentum's feature mix fit your device better than Unleashed's radio-first changes.
RogueMaster FirmwareA Flipper Zero firmware fork that ships a large collection of plugins and modifications.pick this instead when bundled plugin breadth is the priority and you are willing to compare a more aggressive custom-firmware track.

What people are saying

  1. [velocity-scout] DarkFlippers/unleashed-firmware

Sources

  1. Unleashed Firmware README
  2. Unleashed Firmware installation guide
  3. Unleashed Firmware build guide
  4. Unleashed Firmware dangerous radio settings
  5. Unleashed release 092
  6. Issue 910: Volpe doorbell replay failure
  7. Issue 1136: plugin loading and lifetime follow-ups

More dev tools reviews

elixir · metasploit-framework · migrate · ast-grep · ai-usagebar · herdr-reviewr · the whole board →