●  Batch 3 orders open — ships worldwide authorized-testing hardware · FCC / CE
A AetherKey
store / aetherkey-regular
AetherKey Regular — front view
Front view Regular and Pro lineup Ports macro In hand Web panel Companion app
AK-STD-01 · Graphite · Batch 3

AetherKey Regular

The turnkey edition. Every stock capability factory-fitted, tuned and locked to the signed firmware channel — a complete pocket red-team bench you can hand to a junior consultant on day one.

$129 USD · free shipping over $150 · duties billed at checkout
In production · Batch 3 · ships worldwide from October 2026
2-year warranty · 30-day returns · lifetime OTA updates
  • DuckyScript payload engine — run-on-plug in under 900 ms
  • Full Marauder Wi-Fi suite, BLE tools, NFC / sub-GHz / IR
  • Android companion app + zero-install browser web panel
  • 16 GB microSD bundle: payloads, wordlists, IR codes, docs
  • Hash-chained engagement logging · signed OTA channel

BadUSB · payloads

  • DuckyScript-compatible engine with Aether extensions (ALT_MODE, IF_NFC, WAIT_CARD, RANDOM_ID)
  • Run-on-plug: under 900 ms from USB enumeration to first keystroke
  • 40+ keyboard layouts · target OS auto-detection (Windows / macOS / Linux / Android)
  • Payload triggers: on plug-in, on timer, on D-pad select, on NFC card tap
  • Composite HID: keyboard + mass-storage simultaneously
  • Payload library on microSD — browse, preview and arm from the D-pad

Wireless — Wi-Fi & BLE

  • Marauder-derived suite: probe sniffer, beacon spam list, packet monitor
  • PMKID & EAPOL handshake capture to PCAPNG on microSD
  • Evil-portal captive pages with credential capture log
  • Deauth detection monitor for rogue-AP audits
  • BLE scanner + peripheral emulation (device broadcast, link notifications)
  • Concurrent SoftAP + station · web panel over the device's own access point
  • MITM red-team workflow: tether over USB RNDIS and drive bettercap through AetherKey's radios

NFC / RFID — 13.56 MHz

  • Read, write and emulate ISO14443A/B · MIFARE Classic & Ultralight · NTAG · FeliCa
  • UID emulation and clone-to-writable-card workflow
  • Key-card audit mode: format, key and ACL dump to report
  • NFC tap as a payload trigger

Sub-GHz — 300–928 MHz

  • CC1101 capture, analyze, replay and library save to microSD
  • OOK / 2-FSK / 4-FSK / GFSK / MSK demodulation
  • Region-locked TX compliance tables (FCC / CE / UKCA) — RX always available
  • Signal browser with RSSI waterfall and frequency scanner

Infrared

  • 38–40 kHz learning receiver (TSOP4838)
  • Dual 940 nm blasters, ~10 m range
  • 4,000+ TV / AC / projector codes preloaded · capture unknown remotes
  • Macro sequences and IR-triggered payloads

Device & interface

  • 1.3″ OLED (128×64) + D-pad + A/B buttons — full one-handed operation
  • 12 h active / 72 h standby · USB-C charge in 2.5 h
  • 102×38×27 mm · 118 g · IP54 sealed
  • Hash-chained, tamper-evident engagement log
  • microSD slot up to 256 GB (16 GB included)

Companion ecosystem

  • Android app over encrypted BLE: payload studio, live consoles, telemetry, OTA
  • Web panel in any browser — Web Bluetooth or device SoftAP, zero installs
  • Export PCAPNG, logs and payloads · push OTA from the app

Security & updates

  • Signed firmware with secure boot — locked to the official OTA channel
  • Over-the-air delta updates with rollback protection
  • Responsible-use agreement at first boot · no interference features implemented

AetherKey Regular — graphite

  • AetherKey Regular device (AK-STD-01, graphite shell)
  • USB-C stub cable (0.3 m) for key-mode plug-in
  • USB-C to USB-C cable (1 m) for charging & console
  • USB-C → USB-A adapter
  • 16 GB microSD — payload library, wordlists, IR codes, offline docs
  • Quick-start card + responsible-use agreement card
  • Neoprene slip case
  • AetherKey decal · 2-year warranty registration

Compute & memory

  • SoC: ESP32-S3-WROOM-1-N8R8 — dual-core Xtensa LX7 @ 240 MHz + RISC-V ULP
  • 512 KB on-chip SRAM · 8 MB PSRAM · 16 MB flash
  • Hardware AES / SHA / RSA / RNG crypto accelerator

Radios

  • Wi-Fi 4 (2.4 GHz) + BLE 5.0 — concurrent SoftAP + station
  • NFC: PN532, 13.56 MHz, ISO14443A/B, MIFARE, FeliCa
  • Sub-GHz: CC1101, 300–928 MHz (region tables)
  • IR: TSOP4838 RX + 2× 940 nm TX LEDs, ~10 m

Power & I/O

  • 1,900 mAh LiPo (103450) — 12 h active / 72 h standby
  • BQ25895 charger + MAX17048 fuel gauge · 2.5 h full charge
  • USB-C, USB 2.0 OTG — HID, mass storage, CDC serial, RNDIS
  • microSD (SPI) up to 256 GB

Physical

  • 102 × 38 × 27 mm · 118 g
  • Graphite PC-ABS shell · IP54
  • Operating: −10 °C to +45 °C
  • Compliance: FCC / CE / UKCA — TX region-locked

AetherCore OS

Both editions run AetherCore OS, a FreeRTOS-based modular runtime. Every capability — payloads, Marauder suite, NFC, sub-GHz, IR — is a firmware module with the same interface. On the Regular, the module set is fixed to the factory configuration and updates arrive only through the signed OTA channel, so the tool you certify is the tool that runs on Monday.

What you can customize on Regular

  • Payload library — write and load your own DuckyScript files
  • Wordlists, IR code library and sub-GHz capture library
  • Evil-portal pages and captive-portal content
  • Display theme, key debounce, capture thresholds

What Regular won't do

  • No unsigned or third-party firmware — secure boot locked
  • No community module packs (.AEM sideloading is Pro-only)
  • No expansion pads (unpopulated on this edition)

Need to compile your own tools, sideload community modules or wire in new hardware? That's the Pro edition.

Second screen

The same bench, twice

The Android companion and the browser web panel expose the identical feature set over an encrypted BLE link or the device's own access point — payload studio, live Marauder console, NFC and IR tools, telemetry and OTA. No installs, no accounts, fully offline.

Companion app dashboard
Browser web panel
Regular · questions

Before you order

Can the Regular run my own scripts?

Yes, within the payload system — your DuckyScript files, wordlists, IR codes and portal pages all live on the microSD and are fully yours. What Regular won't run is custom compiled firmware or community module packs; secure boot is locked to the signed channel. If you want to write code that becomes part of the device itself, that's the Pro edition.

Will it run my existing Rubber Ducky scripts?

Yes. The payload engine is DuckyScript-compatible and imports stock scripts unchanged. Aether extensions (conditional logic, NFC triggers, OS detection) are additive — a stock script behaves exactly like it does on the ducky it came from, only about 900 ms faster to first keystroke.

How does the web panel work with no install?

Join the access point AetherKey hosts (or connect over Web Bluetooth in Chrome, Edge or the Android app) and the panel is served from the device itself. It works on iPhone, Windows, macOS, Linux and ChromeOS, entirely offline — the tool never phones home.

Is this legal to own and use?

AetherKey is authorized-testing hardware, FCC / CE / UKCA certified with region-locked transmission tables. Owners accept a responsible-use agreement at first boot. Using it against systems you're not contracted to test is illegal almost everywhere — we build the tool, you carry the authorization.

Responsible use. AetherKey is manufactured for authorised security assessment, research and education. Buyers accept the responsible-use agreement at first boot. Radio transmission is governed by region-locked compliance tables (FCC / CE / UKCA). Interference features are not implemented. If you're not sure whether your engagement is authorised, it isn't.
One platform, two editions

Need the doors unlocked?

If you're the one who builds the tooling your team runs — custom firmware, community modules, expansion hardware — the Pro edition is the same device with every door open.

See AetherKey Pro → Compare editions