Glomar

small radios,
mostly.

I build little wireless things on ESP32 (SIP, LoRa, Meshtastic, the occasional police scanner) and ship them before they're done. And a cat, allegedly.

Most of it is stuff I actually run in the field. Where I'm leaning on someone else's code it says [vendored], where the data's made up [synthetic], where I got bored [paused]. No surprises.
github.com/GlomarGadaffi · a couple dozen of these, give or take · notes →

# telephony

a phone network on a chip you can lose in a drawer3

pocket-dialA whole SIP PBX on one ESP32-S3. Aim a phone at it, dial, talk. No server in a closet somewhere. tincanPush-to-talk SIP handset that registers to pocket-dial. The thing you actually hold. resiprocateThe SIP / ICE / TURN / STUN / RTP stack underneath. I didn't write this part. [vendored]

# wifi / ble

seeing what the air is up to5

wifi-ble-marauderWi-Fi/BLE security tool in straight ESP-IDF: 5 GHz deauth, Thread/Matter/Zigbee, BLE 5. No Arduino, on purpose. deauth-detectorNotices when someone's kicking devices off 802.11, and tells the other nodes over LoRa. wigle-wardriverWardriver for Wigle.net. Logs Wi-Fi/BLE to SD with a GPS fix stapled to each one. esp32s3-mgmt-scannerPassive 802.11 management-frame scanner for the ESP32-S3. Listens, doesn't transmit. ble-sign-beaconShouts a short message as a BLE advertisement. The whole point is that it's seen.

# lora / rf

long range, small power, weird waveforms2

lora-rf-toolkitFor pulling LoRa apart: frequency sweeps, I/Q capture, chirp and parameter analysis. fsk-walkie-talkieTwo of these and you've got walkie-talkies. Voice over FSK, Codec2 on an SX1262.

# scanner · uniden bcd325p2

getting data out of the box4

bcd325p2-protocolSerial command-protocol reference for the BCD325P2. The manual the manual should have been. bcd325-splunk-addonSplunk add-on that swallows the scanner's serial telemetry and parses P25/EDACS. bcd325-dashboardDecodes, draws, and keeps BCD325P2 telemetry so you can see what the scanner heard. p25-trunk-loggerLogs P25 trunked control channels and spits out trunk-recorder configs from what it learns.

# mesh / radio networking

networks with no one in charge3

meshtapQuietly siphons Meshtastic traffic into BigQuery over a cellular MQTT link. reticulumCrypto-based mesh over LoRa, packet radio, serial, TCP. Works where the internet doesn't. [vendored] rfpartyA dashboard that turns BLE/Wi-Fi telemetry into a picture of who's around. [vendored]

# mobile hotspot

getting root on the thing in your pocket1

orbic-toolkitUniversal root-access & payload installer for the Orbic RC400L ARMv7 hotspot. Command injection via SetRemoteAccessCfg, then push any ARM binary as a managed init service. Network or USB path. Built on EFF rayhunter's exploit chain.

# networking

ads resolve to nowhere1

ESP32_AdBlocker_RebornA network-wide adblocker that fits on a dev board. Sinkholes ads and trackers at the DNS layer; the blocked ones get answered down in the Ethernet driver in ~1.8 ms, never touching lwIP.

# comms / crypto

talking without everyone listening3

tor-voiceEncrypted voice over Tor: an in-process Arti onion service, Opus, and Noise doing the talking. glosshA tiny SSH 2.0 server for ESP-IDF, built on PSA Crypto. Just enough to get a shell. esp-secure-transportA MIT/PD secure-transport stack for ESP-IDF. Set down for now, not abandoned. [paused]

# hardware / tooling

making a screen turn on1

jc3248-display-driverESP-IDF driver and bring-up for the Guition JC3248W535EN (AXS15231B over QSPI). Mostly so I never have to do it again.

# agents / data

small brains, big logs2

esp32-ai-agentAn AI agent on an ESP32 that remembers things and runs a rule engine offline when the cloud's gone. ask-the-logsAsk BigQuery questions in plain English. Google ADK plus Gemini do the SQL.

# synthetic demos

made-up data, real point2

deanon-demoWhat roughly $900 of off-the-shelf gear can piece back together about someone juggling pseudonyms. Numbers are fake; the lesson isn't. [synthetic] sentinel-node-demoThe second- and third-order ways watching and counter-watching feed back on each other. [synthetic]

# other

didn't fit anywhere else1

rdp-publisher-certStamps a publisher cert onto .rdp files: self-signed, Group Policy, and the consent prompt out of the way.