ZeroTrace HID
Features
Full feature catalog for ZeroTrace HID firmware
Core injection
- Keyboard injection, keystroke payloads at configurable speed, multi-language layouts.
- Mouse injection, absolute and relative movement, click, scroll, jitter, draw.
- Gamepad emulation, buttons, dual analog sticks, D-Pad, rapid-fire.
- Live mode, virtual keyboard and joystick from the mobile app in real time.
- Repeat mode, loop blocks for persistence or continuous payloads.
- Timed execution,
delayprimitive for scheduled or rate-limited runs.
Control
- Mobile app over Bluetooth, drive the device from the ZeroTrace app: script Executor, live keyboard / mouse / gamepad, file browser, and settings.
- Trigger from your phone, run payloads on demand over the Bluetooth link, no cable to the controlling device.
- TraceNetwork mesh, link and drive multiple devices at once (see Coordination below).
Spoofing & stealth
- HID descriptor spoofing, keyboard, mouse, gamepad, MSC, printer.
- BLE peripheral spoofing, AirPods, Fitbit, Car Audio, custom.
- WiFi SSID spoofing, disguise the AP as common consumer device names.
- Recon mode, disable all LEDs (state restored on exit).
- Self-destruct, full flash erase from the mobile app.
Coordination
- TraceNetwork, link multiple devices over ESP-NOW (AES-128-GCM, ~200 m line of sight).
- Synchronized execution, fire HID payloads across the fleet within ~10–20 ms.
- Fleet WiFi scan, aggregate scan results from all agents for full RF coverage.
- Light shows, Solid, Pulse, Strobe, Rainbow, Chase, Cylon across the fleet.
- Remote admin, push/pull/delete files, read/write config, run/stop scripts on any agent from the mobile app.
- Identify, blink a chosen device's LED to physically locate it.
traceBroadcast, script primitive for fleet-wide event publishing.
Adaptive behavior
- OS detection, auto-detect Windows, macOS, Linux, Android, iOS; expose as
_@detectedOS. - SilentTrace, auto-switch between USB-HID and BLE-HID transports based on connectivity.
- Lock & USB status, live Caps/Num/Scroll Lock and USB connection state in the mobile app.
- Display support, OLED status (Kit only) for payload progress and alerts.
Storage & power
- On-device filesystem, multiple persistent payloads, hot-swappable. 10 MB on Kit, 2 MB on Mini and Ghost.
- Autostart, designate one script to run on boot.
- Power modes, Low (80 MHz / 10 dBm), Normal (160 MHz / 17 dBm), High (240 MHz / 20 dBm).
Maintenance
- Web Flasher, browser-based firmware updates via Web Serial.
- Disable Caps Lock, auto-clear before script execution.
- Cross-platform, Windows, macOS, Linux for tooling; firmware payload OS-agnostic.
- BRUTEFORCE primitive, built-in credential brute-force with configurable charset and rate.
Browse the dedicated pages for each feature in the sidebar.