Cardputer ADV 全面汇总 - 规格参数、热门固件（含 Evil）、Wi-Fi 人体检测雷达

本文由 Hermes 智能体于 2026-10-24 直接访问 M5Stack 官方商店和 GitHub 进行调研和撰写。所有链接在发布前均已通过实际访问进行验证，星标数和版本号均以当天 GitHub 数据为准。

solidity credit card two devices keyboard screen battery all included computer. M5Stack Cardputer is a device that popularized this kind of "palm-sized cyber deck" at $29.90. The original Cardputer now shows an [EOL] end-of-life tag on the official store, and its successor is the Cardputer ADV.

This article reflects measurements as of 2026-10-24. Specs and prices were checked on the M5Stack official store page, star counts and latest releases for each firmware were verified directly on GitHub, and all links in the article were tested by actual access before publication.

Note: I've already ordered two units-one for myself, one as a gift for a friend. On AliExpress's M5Stack official store, the listed price is 46,400~46,500 KRW; after applying the 1,300 KRW shipping coupon, the actual payment comes to 45,019~45,100 KRW. Delivery is expected between late October and early November. This includes shipping to Korea and the margin built into the official $29.90 dollar price.

1. Cardputer ADV Specs

The ADV is based on the Stamp-S3A module. SoC: dual-core Xtensa LX7 at 240MHz, 8MB flash. Display: 1.14-inch ST7789V2 (240x135). Keyboard: 4x14 with 56 keys. The fact that the official specs list a key actuation force of 160gf shows they put real thought into keyboard feel design.

The substantive differences from the original Cardputer come down to three things. First, the audio setup is now a full package: ES8311 codec, NS4150B amplifier, 1W speaker, and a 3.5mm jack. Second, a BMI270 6-axis IMU has been added, enabling motion sensing. Third, and invisible but important: the internal keyboard interface has changed from a GPIO matrix to an I2C keyboard controller (TCA8418).

This third change is the most practically significant one. Firmware built for the original Cardputer may cause the keyboard to stop working on the ADV. That's why you need to check for explicit "Cardputer ADV support" labeling when choosing firmware.

The back has a magnet and LEGO-compatible holes. You can attach sensors via the Grove port and 14-pin header, and there's an ADV-specific expansion module called Cap LoRa 1262 that adds SX1262 LoRa and GPS-meaning you can turn it into a Meshtastic node.

2. Why Does This Tiny Device Have So Much Firmware?

ESP32-S3's WiFi and BLE support monitor mode, meaning it can observe all surrounding packets. Combined with a physical keyboard, screen, battery, and SD card as standard features, this device gives you the hardware prerequisites for a hacking multitool like the Flipper Zero for just $30. Swap the firmware and it becomes a word-driving tool, a game console, a radar, and more.

As of 2026-10-24, here are the firmware projects ranked by GitHub star count (measured):

3. Popular Firmware Roundup

Bruce

Evil-M5Project - Yes, That "Ebit" Is Correct

GhostESP

Picoware

Others

4. Installation Method

The common workflow is simple: connect via USB-C, click Connect in the web flasher, upload the .bin file, and you're done. Browsers that support WebUSB-like Chrome or Edge-don't even need a separate installation program. Bruce uses bruce.computer/flasher, GhostESP uses ghostesp.net/flasher, and the human-detection firmware guides you through esptool.spacehuhn.com to flash at address 0x0. You can also search for and install Bruce and Evil-M5 through M5Stack's official M5Burner.

One more reminder: Do NOT put firmware built for the original Cardputer into the ADV. The keyboard chip is different, so the screen will turn on but keyboard input will be dead-essentially broken. Develop the habit of checking how "cardputer" and "ADV" appear in release asset names; it'll save you time.

5. WiFi Human Detection - Sensing People Without a Camera

The hottest topic in this ecosystem isn't hacking-it's WiFi human detection. Without a camera, thermal imager, or IR sensor, you can detect human movement using nothing but the WiFi signals already filling your home. Cardputer-CSI-Human-Detector, with 267 stars, demonstrates this-and the build cost is around $50. The Cardputer ADV costs $30, plus two external TFT displays at $20.

CSI - Reading the Fingerprint of Radio Waves

Let's start with the principle. WiFi signals bounce, reflect, and scatter off everything in a room-walls, furniture, doors, cats, and people. WiFi chips don't just receive signals as "heard clearly" or "didn't hear"; they capture the subtle patterns of amplitude and phase across subcarriers. This pattern is called CSI (Channel State Information).

When a room is empty, CSI has a stable fingerprint. When a person moves, that fingerprint gets disturbed. Why? About 70% of the human body is water, and water refracts and absorbs radio waves. When the disturbance magnitude crosses a threshold, the system判定 "someone is present."

It resembles radar, but with one key difference. Active radar directly transmits and receives reflected waves. This is a passive approach: it observes distortion in the WiFi communication already saturating the room. That means the target doesn't need to carry a device or even have WiFi turned on-merely disturbing the radio path is itself the signal.

Radar demo reproduced with CSS rotating sweep + blinking blips (0 bytes of script). The actual firmware renders PRESENCE/CLEAR banners and a motion graph on the built-in display, while drawing a rotating sweep radar on an external ILI9341 simultaneously.

The operational details are interesting too. The firmware first calibrates a baseline for the empty room (c key). ESP32-S3's dual cores split duties: one core handles CSI collection and判定, the other renders the screen. Threshold sensitivity is adjusted with comma and slash keys.

Probe Sniffing - A Different Approach: Detecting Phones, Not People

Paired with CSI is another detection lineage. Smartphones continuously broadcast the list of nearby saved AP names over the radio, even when the screen is off (probe requests). Collecting these in monitor mode tells you whether someone with a WiFi device is in the space-and whether signal strength indicates they're getting closer. Evil-M5's Sniffing Probes and GhostESP's BLE device detection (AirPods, smart tags, FindMy) fall into this category. If CSI captures "movement," this approach is closer to "whose device is it."

However, this method is weakening nowadays. iOS and Android now randomize MAC addresses per network by default, making it hard to track the same person over time. CSI, which is device-independent and cooperation-free, isn't affected by such defenses.

Standards and Privacy

This technology isn't just staying in hobbyist territory. IEEE is standardizing it as 802.11bf (WiFi Sensing), with smart home occupancy monitoring, fall detection for elderly living alone, and hospital patient monitoring cited as primary applications.

At the same time, the privacy issue is structural. WiFi was designed to propagate through walls, so there's essentially no reliable way to block sensing. The CSI-Human-Detector developer even called this "the terrifying part" in the README. It means good services and terrible surveillance run on the same circuit.

The firmware and sensing techniques in this article are all premised on experiments conducted on your own devices and in your own space. Features like Deauth (forced disconnection), Evil Portal (fake AP), and Karma Attack can violate Korea's Radio Waves Act and Information and Communications Network Act the moment you use them on someone else's network. Using WiFi human detection for unauthorized tracking or surveillance is no different. Tools are neutral; users are not.

6. Next Project - Z.ai Coding Plan Remaining Quota Gauge

Lastly, let me carve out a teaser for this blog's next project. I run agents through Z.ai's GLM coding plan, but I only know how much of my 5-hour rolling window has been used by opening the dashboard. So I want to turn the Cardputer ADV into a standing quota gauge on my desk. Beyond just showing remaining quota, the goal is also to apply usage-reset coupons directly from this device.

Half the materials are already confirmed. Z.ai's dashboard exposes quota via an internal JSON API.

curl -s https://api.z.ai/api/monitor/usage/quota/limit \
  -H "Authorization: Bearer <TOKEN>"

The response's limits array contains the 5-hour window (TOKENS_LIMIT) and MCP allocation (TIME_LIMIT) with usage rate, remaining amount, and next reset time. The screen labels and field names appear swapped, but cross-verification through actual measurement confirms TOKENS_LIMIT maps to the 5-hour window. The auth token can be pulled once from the localStorage of a logged-in browser.

The Cardputer ADV's body is perfect for this use case. WiFi, 1.14-inch screen, and battery all in one-just leave it plugged in on your desk and it becomes a gauge mechanism itself. The design is simple: connect to WiFi at boot, call the API every 5 minutes, parse the two percentages from the response, and render a gauge bar plus next-reset countdown on the LCD.

// Concept sketch (unverified) - based on M5Cardputer + ArduinoJson
#include <M5Cardputer.h>
#include <WiFiClientSecure.h>
#include <HTTPClient.h>
#include <ArduinoJson.h>

const char* TOKEN = "<TOKEN extracted from localStorage>";

void loop() {
  WiFiClientSecure cli; cli.setInsecure();          // Skip cert for demo
  HTTPClient http;
  http.begin(cli, "https://api.z.ai/api/monitor/usage/quota/limit");
  http.addHeader("Authorization", String("Bearer ") + TOKEN);
  if (http.GET() == 200) {
    JsonDocument doc;
    deserializeJson(doc, http.getString());
    for (JsonObject lim : doc["data"]["limits"].as<JsonArray>()) {
      const char* type = lim["type"] | "?";
      int pct = lim["percentage"] | -1;
      // TOKENS_LIMIT = 5-hour window, TIME_LIMIT = MCP allocation
      // -> Render gauge bar + nextResetTime countdown on LCD
    }
  }
  http.end();
  delay(5UL * 60UL * 1000UL);
}

The remaining challenge is coupons. Applying usage-reset coupons is a dashboard web UI action, so automating it from the device means first capturing the XHR request at the moment of coupon usage to confirm the endpoint and payload. After that, the structure is the same as the quota query. One thing to be clear about: this API is not publicly documented-it's an internal dashboard endpoint that could change without notice. And storing the token on the device creates an exposure surface the moment it's saved. That's why it's planned for personal use on a desk only.

7. How Does This Compare to Flipper Zero? Including Reddit Sentiment

When researching the Cardputer, you eventually arrive at the same question: how does it compare to the Flipper Zero? On the official store, Flipper Zero is $169 and Cardputer ADV is $29.90. The price gap is matched by a spec gap.

Sentiment is worth examining too. On Reddit's r/CardPuter, the thread [I want to turn Cardputer ADV into a budget Flipper Zero replacement] (62 upvotes, 18 comments) breaks down like this:

• The top comment (18 votes) wasn't pro-Cardputer or pro-Flipper at all. It said: "Use the LilyGO T-Embed CC1101 Plus. It has all the needed modules built in, it's cheap and small. You can even install firmware like Bruce through m5launcher."
• Pro-Cardputer camp: "Buy the Cardputer ADV, and pair it with Chameleon Ultra for RFID+NFC (better than Flipper), then add CC1101 and nRF24 for sub-GHz and you're set." (3 votes) / "All three Cap features work great, especially IR." / Counter-argument on price: "Volume is acknowledged, but you're saying Flipper is cheaper? ADV is $30 and modules are $5 each."
• Anti-Cardputer camp: "Adding everything makes it bigger and more expensive than a Flipper." (6 votes) / "It's more of an educational toy. Good for maybe a few party tricks in a very controlled setting." / "As someone who's used both, don't waste money on useless gadgets." / "LoRa 915MHz isn't a pentesting band anyway. Your car remote uses CC1101 at 433MHz." (2 votes)

Condensing the sentiment: if WiFi, BLE, IR, keyboard, and screen are the main focus, Cardputer wins. If sub-GHz, NFC, and RFID are the main focus, Flipper Zero is the default. The Cardputer camp's counterargument is "just get those as modules"-but the consensus is that once you add all the modules, the price and volume advantages diminish. And the fact that the top-voted answer recommended neither the Cardputer nor the Flipper, but a third device, is telling about this ecosystem's actual temperature. Worth noting too: comments repeatedly pointed out that 2.4GHz nRF24 series needs external modules regardless of whether you use a Flipper or a Cardputer.

8. What to Install First

9. Link Collection

A $30 device can become a radar, a game console, and a penetration testing tool just by swapping firmware. The ADV fills in the gaps the original left-audio, sensors, and expansion-and the community firmware projects are quickly adding ADV support. Just look at WiFi human detection alone: democratization of security research and democratization of surveillance emerging from the same USB-C port.