Skip to content

Advanced Features

Jump to bottom
charley Yu edited this page Jun 16, 2026 · 1 revision

🚀 CatZero Advanced Features & Hardware Optimization

This section covers advanced development methodologies, hardware tuning, and undocumented features for power users looking to push the CatZero platform past standard boundaries.

⚡ 1. 2.4GHz Antenna Tuning & Range Extensions

Because CatZero utilizes the ESP32-U variant, it lacks an onboard trace antenna. Instead, it relies entirely on the integrated U.FL miniature RF connector.

📡 Optimizing Your External Antenna

  • Stock Antenna: Standard 2dBi rubber ducky antennas provide adequate omnidirectional coverage for indoor labs (approx. 50-70 meters).
  • Tactical Long-Range Operations: Swapping to a 7dBi directional panel antenna or a Yagi antenna transforms the ESP32-U into an ultra-long-range wardriving machine. This allows you to collect Wi-Fi handshakes or run BLE Suite scans from over 300+ meters away with clear line-of-sight.
  • Impedance Warning: Ensure your SMA adapter cables are rated for 50 Ohms matching the ESP32-U design. Loose or poorly crimped U.FL connectors will cause massive signal attenuation (dBm loss).

📻 2. CC1101 Radio Hardware Fine-Tuning

The TI CC1101 transceiver module is incredibly versatile, but its performance on different frequencies depends heavily on physical component tuning.

🎛️ The Antenna Trap

Most cheap CC1101 modules shipping from online makers are hard-tuned for 433MHz.

  • Running the ProtoPirate engine on 315MHz or 868MHz with a 433MHz-tuned antenna will severely degrade your transmit/receive range due to a high Standing Wave Ratio (SWR).
  • The Fix: If your focus is automotive analysis (which frequently switches between regional 315MHz and 868MHz bands), replace the stock spring antenna with a wide-band telescopic SMA antenna that can be manually adjusted to match your target frequency length.

🎚️ Dynamic RSSI Threshold Configuration

Through the Sub-GHz ➡️ Config menu, advanced operators can tune the Carrier Sense Threshold:

  • Low Threshold (-90dBm): Maximum sensitivity. Captures weak signals from far away, but fills your Record Raw buffer with background radio static.
  • High Threshold (-60dBm): Low sensitivity. Filters out all background noise, only capturing clean rolling codes when you are standing right next to the target transmitter.

🔋 3. Battery Life & Power Management Modes

CatZero is engineered to operate on a raw LiPo battery cell connected to the ESP32 development board's charging circuit.

🔋 Power Consuming Assets

  1. OLED Screen: Pure black pixels consume 0mA. To save battery, screens use high-contrast text lines rather than solid white backgrounds.
  2. ESP32 Core: Running simultaneous Wi-Fi deauth hooks and BLE advertisements pins both processing cores at 240MHz, pulling roughly 160-260mA.
  3. CC1101 Transmit Modulate: Blasting signals or continuous jamming spikes power draws up an additional 30mA.

💤 Automated Sleep Triggers

If left untouched in the LOGO_CYCLE wheel status interface for more than 3 minutes, CatZero enters Light Sleep Mode. The OLED panel executes a complete pixel clear, and the ESP32 steps down its CPU speed to 80MHz to save battery life. Simply click the primary navigation button to instantly wake the OS back up.

💻 4. The Interactive Serial Console (USB Command Line)

If you keep CatZero plugged into your PC via a USB cable, you can open a Serial Terminal (Baud Rate: 115200) to access a hidden command-line interface (CLI).

⌨️ Available CLI Commands

  • catzero --status : Dumps live hardware registry metrics, current active memory allocations, and battery voltage levels.
  • brucegotchi --set-lvl [1-99] : For testing configurations; manually overrides your Cat pet's level values.
  • cc1101 --set-freq [value] : Direct raw override to freeze the radio module onto a hyper-specific frequency channel (e.g., 434.15 MHz).
  • wifi --scan : Outputs clean JSON data grids of all nearby routers, MAC addresses, encryption types, and RSSI strength points directly to your PC screen.

🧬 5. Hardware Modular Expansion (GPIO Passes)

The remaining open pins on your ESP32-U can be utilized to add secondary modules without changing the core layout of your CatZero OS:

               [ESP32-U Dev Board]
             +---------------------+

             |                     |
   GPIO 25 --+--> [ NRF24 Module ] +--> (Adds dedicated 2.4GHz Sniffing)
   GPIO 26 --+--> [ Piezo Buzzer ] +--> (Adds audible alarm tones/clicks)

             |                     |
             +---------------------+
  • Adding an NRF24L01+: By wiring an NRF24 wireless module to your extra pins, you can unlock advanced mouse-jacking, drone-sniffing, and dedicated multi-channel BLE flooding.
  • Adding a Piezo Buzzer: Wire a tiny passive buzzer to GPIO 26. This unlocks programmatic audio tones, allowing your Tamagotchi Cat to "meow" when it is hungry or emit rapid clicking geiger-counter ticks when the CC1101 intercepts radio frequencies.

Clone this wiki locally