Fl1pp3r69 is an open-source Flipper Zero field-ops suite (codename ARGUS VEIL, v4.0.0) built on Momentum. It stages captures inside named CASEFILE operations with SHA-256 manifests, a CLAIM harness for stock app files, 10 FAPs, and a desktop workbench for sync, seal, audit, and dashboard.

ARGUS VEIL is the v4.0.0 codename: Argus (many eyes, full legitimate Flipper domain coverage) and Veil (OPSEC defaults, deliberate exfil, classification, panic metadata wipe).

Does Fl1pp3r69 ship exploit proof-of-concepts?

No. The suite organizes stock Flipper captures inside CASEFILE operations. It does not ship exploit PoCs, remote exploit frameworks, jamming tools, or undocumented attack procedures.

How many FAPs are in the suite?

Exactly 10 FAPs: CASEFILE hub, DEWDROP (NFC), DAMP_CROWD (Sub-GHz), EMBER_TRACE (IR), LODGE (LF RFID), BITKEY (iButton), HAZE (BLE), GPIO LAB, INKWELL (BadUSB lab, gated), and crypttool+ (manifest browser).

Where is the GitHub repository?

https://github.com/Pitchfork-and-Torch/Fl1pp3r69 - releases at /releases

UNCLASSIFIED // FRI v4.0.0 ARGUS VEIL 10 FAPs AUTHORIZED OPS ONLY

FL1PP3R69

Name: Fl1pp3r69
Author: Pitchfork-and-Torch

The dolphin grew teeth.

The veil still holds. Argus opens every eye.

Manifest-driven Flipper Zero field ops on Momentum. Named CASEFILE operations, SHA-256 chain-of-custody, CLAIM harness, and a desktop workbench from pocket to report.

Authorized ops only. Use on hardware and systems you own or have explicit permission to test. Field captures and metadata only — no exploit PoCs, no undocumented attack procedures. Read the rules.

View on GitHub Latest release Quick start

schema v4 · CLAIM harness · desktop seal + dashboard · MIT

NFC Sub-GHz IR LF RFID iButton BLE GPIO BadUSB Manifest

Stylized toothed dolphin and multi-eyed Argus veil - Fl1pp3r69 ARGUS VEIL hero art — ARGUS VEIL - observational field instrument, not a toy for trespass

Operation model

Operation pipeline

Every capture lives inside a staged CASEFILE. Click a phase to inspect operator behavior. Spine is fixed: deliberate, recoverable, report-ready.

INTAKE

Name the op, pick type / PATHNUM, optional template. Nothing free-floats outside a CASEFILE.

ARGUS VEIL suite

Ten FAPs. One instrument.

Full legitimate Flipper domain coverage under CASEFILE discipline. Hub + probes + manifest browser - zero exploit loaders.

CASEFILE

Hub + CLAIM + recovery

flipper69_casefile_ops

DEWDROP

NFC custody

flipper69_probe_nfc

DAMP_CROWD

Sub-GHz meta

flipper69_probe_subghz

EMBER_TRACE

IR meta

flipper69_probe_ir

LODGE

LF RFID meta

flipper69_probe_rfid

BITKEY

iButton meta

flipper69_probe_ibutton

HAZE

BLE passive meta

flipper69_probe_ble

GPIO LAB

GPIO lab meta

flipper69_probe_gpio

INKWELL

BadUSB lab meta (gated)

flipper69_probe_badusb

crypttool+

Manifest browser

flipper69_manifest_viewer

Desktop workbench

Pocket to desktop without the network

Air-gapped Python toolkit: sync, migrate, seal, audit, dashboard. CLAIM on device imports stock captures into the active op.

CLI surface

Install editable desktop package, then run against an SD tree or vault.

python -m flipper69 sync SD / serial pull
python -m flipper69 migrate schema lift
python -m flipper69 seal <opId> Merkle / manifest seal
python -m flipper69 audit integrity pass
python -m flipper69 dashboard local operator view

CLAIM harness

Stock Flipper apps capture. CASEFILE owns custody.

Open CASEFILE on device
Select [3] CLAIM ARTIFACT
Largest recent stock file (Sub-GHz / NFC / IR / LF RFID / iButton) imports into the active op
Claim meta written - then VERIFY

Non-negotiable

Ethics and responsibility

Authorized ops only. Owned hardware and authorized targets. Not a toy for trespass. Field responsibility required.

1Authorized ops only — owned hardware or explicit written permission
2Field captures and metadata only — no exploit code or exploit PoCs
3No undocumented attack procedures
4No jamming / region bypass / ungated bruteforce
5Panic wipe = operation metadata only
6Deliberate exfil only

Pitchfork-and-Torch | field responsibility required

Get moving

Quick start

Build FAPs with ufbt, install desktop tooling, seal a demo op. Full detail lives in the repo README.

FAPs

# PowerShell
py -m pip install --upgrade ufbt
.\scripts\build-fap.ps1 -App all
# Copy dist/*.fap to SD apps/

Desktop

pip install -e ./desktop
python -m flipper69 sync --sd ./examples/sd_card
python -m flipper69 migrate
python -m flipper69 seal op-20260711-veil-ledger-demo
python -m flipper69 audit
python -m flipper69 dashboard

README quick start Releases

Field library

Docs and resources

Vision, design tokens, ops discipline, and migration notes for ARGUS VEIL.

AEO

FAQ

What is Fl1pp3r69?

Open-source Flipper Zero field-ops suite (ARGUS VEIL v4.0.0) on Momentum: CASEFILE operations, 10 FAPs, CLAIM harness, desktop seal and dashboard. Authorized ops only.

What is ARGUS VEIL?

v4.0.0 codename. Argus = full legitimate domain coverage. Veil = OPSEC defaults, deliberate exfil, panic metadata wipe.

Is this for unauthorized access?

No. Authorized ops only. Owned hardware and authorized targets. No exploit PoCs, undocumented attack procedures, jamming, or region bypass.

Does it ship exploit proof-of-concepts?

No. Probes write metadata into CASEFILE ops. Stock Flipper apps still do the radio work. This repo does not publish exploit PoCs or undocumented attack procedures.

What version is live?

Product version is 4.0.0 ARGUS VEIL — same number on the GitHub release, FAPs, desktop toolkit, this page, and llms.txt. Example ops under examples/ may still show 3.0.0 because they are historical VEIL LEDGER demos.

Where do I get builds?

GitHub: https://github.com/Pitchfork-and-Torch/Fl1pp3r69 and the Releases page.