Skip to content

ZeroTrace HID

ZeroTrace HID

Bluetooth-controlled HID injection platform built on ESP32-S3, driven from the ZeroTrace mobile app

ZeroTrace HID is a keystroke and mouse injection platform on the ESP32-S3. It runs the same firmware across the Kit, Mini, and Ghost hardware lines and exposes its full feature set through the ZeroTrace mobile app over Bluetooth.

Drive it from the mobile app

The ZeroTrace mobile app is how you use ZeroTrace HID, pair over Bluetooth for the script Executor, live keyboard / mouse / gamepad, the file browser, and device settings. The legacy desktop Companion no longer manages HID, and the device no longer hosts an on-board web UI.

There is no compile-flash-test loop. Edit a script, tap run, watch the host react. Live mouse and keyboard control work the same way over both USB-HID and BLE-HID, SilentTrace switches transports automatically based on what's plugged in.

What you get

  • HID + BLE injection, keyboard, mouse, gamepad, and consumer-control payloads over USB or Bluetooth.
  • Mobile app over Bluetooth, the ZeroTrace app pairs with the device for the script Executor, live keyboard / mouse / gamepad control, the file browser, and full device settings (install).
  • TraceNetwork, link multiple devices over ESP-NOW (AES-128-GCM, ~200 m line of sight) and run synchronized payloads, fleet WiFi scans, light shows, and remote admin from one app.
  • 18+ keyboard layouts, accurate special-character output without payload edits.
  • Spoofing, HID descriptor (gaming mouse, keyboard, MSC), BLE peripheral identity (AirPods, Fitbit, etc.), WiFi SSID.
  • OS detection, runtime branching on Windows, macOS, Linux, Android, iOS.
  • On-device storage, multiple payloads, hot-swappable, autostart-capable (10 MB on Kit, 2 MB on Mini and Ghost).

Hardware lines

DeviceForm factorStoragePick when
ZeroTrace KitFull-size with display, two USB-C ports10 MBYou want every feature plus the OLED status display.
ZeroTrace MiniCompact, no display, two USB-C ports2 MBYou need a low-profile unit for tight enclosures.
ZeroTrace GhostStealth lid mechanism, two USB-C ports2 MBYou need plausible-deniability physical form.

All three lines ship pre-flashed with the same firmware (firmware page). Same scripts, same mobile app.

Two ports, two roles

Every ZeroTrace HID device has COM and USB ports. They are not interchangeable.

PortUse for
COMFirmware flashing and power. Day-to-day control is wireless, over Bluetooth from the mobile app.
USBHID payload delivery to the target host.

Plugging a target into the COM port does nothing. The COM port is for flashing and power, not control. See Installation for the full first-boot sequence.

Where to start

  1. Day-1 walkthrough, fifteen minutes from box to first authorized injection.
  2. Installation, flash, connect, verify.
  3. Mobile app HID control, pair over Bluetooth and drive the device from your phone.
  4. Scripting language, every primitive in the DSL.

ZeroTrace HID is for authorized testing, your own systems, lab environments, or engagements with written permission. The device cannot tell whether you have authorization; you must.

Command Palette

Search for a command to run...