BruceButBetter is an offensive-security / red-team tool published for authorized testing, research, and education only. Use it solely on systems, devices, and radio spectrum you own or have explicit written permission to test. Many of its capabilities (RF transmission, deauth, NFC cloning, HID injection) are regulated and may be illegal to use against equipment or networks you do not control. You are solely responsible for complying with the laws of your jurisdiction.
The maintainers do not condone, and will not assist with, unauthorized or malicious use.
If you find a security issue in the firmware or the web flasher:
- Open a private security advisory if possible, or
- Open a regular issue for non-sensitive bugs.
Please include: affected version/commit, board/environment, reproduction steps, and impact. Allow a reasonable window to address it before public disclosure.
This is a fast-moving fork of pr3y/Bruce; fixes land on master.
Always build or flash from the latest release.