Upgrade your Flipper Zero with true dual-band Wi-Fi (2.4 GHz + 5 GHz) plus extended RF capability.
This expansion board uses the AI Thinker BW16 (RTL8720DN) combined with an NRF24L01+ wireless module, both connected to external SMA antennas for improved signal strength and range.

Ships with R4TKN firmware pre-installed (FULL VERSION – STABLE) — you only install the Flipper app (FAP).The 
FAP file will be sent via email.

The NRF24 module is controlled internally by the BW16, not directly by Flipper Zero.
Flipper Zero communicates with the BW16, and the BW16 manages Wi-Fi and NRF24 operations, enabling a more powerful and flexible wireless development architecture.

For authorized security research and education only. Always obtain proper permission before testing.

What you get

• Flipper Zero Dev Module (BW16 + NRF24) with Protective Case
• Module Case
• 2 × 3CM 3DBI 2.4GHZ 5GHZ Antennas
• Board arrives plug-and-play with firmware already installed
• R4TKN FAP file sent via email
  

Momentum Ready

Works great with Momentum firmware.

3-Step Setup (Momentum)

R4TKN FAP is sent via EMAIL

1. Open QFlipper
2. Connect your Flipper Zero and open the SD card view
3. Copy the .fap file into the Apps folder
4. Safely eject the device
5. Launch the app from Apps on Flipper Zero

No Flipper firmware flashing required — the board already has R4TKN firmware installed.

Features (App Side)

• Targeted (Per Client & Per Station)
• Deauth All
• Random SSID generation
• Beacon + Deauth testing modes
  
• NRF (WIFI or BLE)
• Deauth + NRF (5GHZ for BW16 , NRF for 2.4GHZ)
• EVP
• BLE SPAM

Reality check:
Access Points using 802.11w / PMF and modern configurations (especially on 5 GHz) may ignore deauth-style tests.
This behavior is normal and useful for learning about modern wireless security protections.

Architecture Overview

Flipper Zero → communicates with BW16 RTL8720DN MCU
BW16 MCU → controls Wi-Fi + NRF24 module
External antennas → improved RF performance

NRF24 is NOT directly controlled by Flipper Zero GPIO; it is handled internally by the BW16 firmware.

Support

Software support is provided only for Elecrow customers.