Flipper Zero
What it does
The Flipper Zero packages a 433/868 MHz sub-GHz radio together with NFC, an infrared transceiver, GPIO pins, and USB HID (BadUSB) in one portable device, with the capture-and-replay tooling built into the firmware. Where a bare CC1101 wants a host and rfcat, the Flipper runs the same class of sub-GHz attacks standalone from its own screen, which is what you pay the extra for: convenience and breadth, not raw radio capability a cheap module lacks.
Use cases
Record a fixed-code garage or doorbell transmission and resend it from the device, no laptop needed.
Dump a low-frequency or 13.56 MHz card and replay it to test how a reader validates it.
Capture an IR remote, or emulate a USB keyboard to drop a scripted payload into an unlocked host.
How you use it
Sub-GHz capture and replay runs entirely on-device; qFlipper on a host manages firmware and saved captures:
# on the device: Sub-GHz -> Read -> capture a transmission -> Save -> Send
# fixed-code remotes replay cleanly; rolling-code ones do not
# qFlipper (desktop) to update firmware and pull saved .sub captures offFixed-code vs rolling-code. A pure replay only works against fixed-code remotes; rolling-code systems invalidate a captured frame after one legitimate use.
Not a substitute for a real SDR. For wide-band survey or custom modulation work, a receive-only SDR and a bare module still do more than the Flipper's fixed radio front-end.
Regional bands. 433 MHz and 868 MHz allocations and power limits vary by region - check what's legal to transmit on where you are.