ZeroTrace HID
ZeroTrace HID
Bluetooth-controlled HID injection platform built on ESP32-S3, driven from the ZeroTrace mobile app
ZeroTrace HID is a keystroke and mouse injection platform on the ESP32-S3. It runs the same firmware across the Kit, Mini, and Ghost hardware lines and is driven entirely from the ZeroTrace mobile app over Bluetooth.
The ZeroTrace mobile app is the only remote control channel. Pair over Bluetooth (BLE) for the script Executor, live keyboard / mouse / gamepad, the file browser, and device settings. The legacy desktop Companion no longer manages HID, and the device does not host an on-board web UI.
There is no compile-flash-test loop. Edit a script, tap run, watch the host react. Keyboard and media commands are delivered over both USB-HID and BLE-HID; mouse and gamepad are USB-only (the BLE HID profile doesn't carry those reports). SilentTrace switches transports automatically based on what's plugged in.
What you get
- HID injection, keyboard, mouse, gamepad, and consumer-control payloads. Keyboard and media over USB or Bluetooth; mouse and gamepad over USB.
- Mobile app over Bluetooth, the ZeroTrace app pairs with the device for the script Executor, live keyboard / mouse / gamepad control, the file browser, and full device settings (install).
- TraceNetwork, link multiple devices over ESP-NOW (AES-128-GCM) and run synchronized payloads, fleet WiFi scans, light shows, and remote admin from one app.
- 18+ keyboard layouts, accurate special-character output without payload edits.
- USB identity spoofing, custom or randomized USB VID/PID and descriptor strings.
- OS detection, runtime branching on Windows, macOS, Linux, Android, iOS.
- On-device storage, multiple payloads, hot-swappable, autostart-capable (10 MB on Kit, 2 MB on Mini and Ghost).
ZeroTrace HID has no WiFi access point and no on-board web interface. The WiFi radio runs in station mode only, and never joins an access point, it is used solely for license binding, the watchdog geofence scan, and the TraceNetwork ESP-NOW link. All device control is over Bluetooth from the mobile app.
Hardware lines
| Device | Form factor | Storage | Pick when |
|---|---|---|---|
| ZeroTrace Kit | Full-size with display, two USB-C ports | 10 MB | You want every feature plus the OLED status display. |
| ZeroTrace Mini | Compact, no display, two USB-C ports | 2 MB | You need a low-profile unit for tight enclosures. |
| ZeroTrace Ghost | Stealth lid mechanism, two USB-C ports | 2 MB | You need a plausible-deniability physical form. |
All three lines ship pre-flashed with the same firmware (firmware page). Same scripts, same mobile app.
Two ports, two roles
Every ZeroTrace HID device has a COM port and a USB port. They are not interchangeable.
| Port | Use for |
|---|---|
| COM | Firmware flashing and power. Day-to-day control is wireless, over Bluetooth from the mobile app. |
| USB | HID payload delivery to the target host. |
Plugging a target into the COM port does nothing, the COM port is for flashing and power, not control. See Installation for the full first-boot sequence.
Where to start
- Day-1 walkthrough, fifteen minutes from box to first authorized injection.
- Installation, flash, connect, verify.
- Mobile app HID control, pair over Bluetooth and drive the device from your phone.
- Scripting language, every primitive in the DSL.
ZeroTrace HID is for authorized testing, your own systems, lab environments, or engagements with written permission. The device cannot tell whether you have authorization; you must.