The Secure Circuit
Hey crew,
A few years ago I built a tiny board for exploring NFC, WiFi, GPS, and radio experiments without needing a full workbench every time. I recently brought it back to life, and it has become one of my favorite ways to teach how small connected devices actually work.
Cypherbox Mini is an ESP32-C3 pocket lab with a PN532 NFC reader, a small OLED screen, a microSD card, GPS, WiFi, and Bluetooth LE.
Once flashed, it gives you a simple three-button menu for hands-on experiments: scan an NFC tag, write a safe NDEF link, save GPS data, run a passive WiFi scan, browse files on the SD card, and talk to the board over USB or BLE serial.
That is a lot for a board you can hold between two fingers.
The beginner-friendly part is not that it hides the complexity. It gives the complexity labels. NFC, GPS, WiFi, SD cards, serial ports, and firmware builds are easier to understand when each one becomes a menu item, a command, or a file you can inspect afterward.
That is why I like Cypherbox Mini: it turns invisible systems into something you can hold, test, and learn from one step at a time.3
THE WHY
🌎 Why This Matters
Small hardware is a great teacher because it makes invisible systems tangible. NFC becomes a card tap instead of a protocol acronym. WiFi becomes channels, BSSIDs, RSSI, GPS coordinates, and CSV logs. GPS becomes a fix you can wait for, save, and compare. The field kit stops being a laptop balanced on a bench and becomes a device with a screen, buttons, storage, and a repeatable workflow.
The catch is that a small tool can still touch real systems. That means beginners need a clear path: start with passive observation, use hardware you own, save your results, and learn what each feature is doing before trying anything active.
The good first questions are simple:
Can I build and flash the firmware?
Can I open the USB shell and see the board respond?
Can I scan an NFC tag I own?
Can I save a GPS fix or WiFi log to the SD card?
Can I tell the difference between a passive scan and an active test?
That is the frame I like for Cypherbox Mini. It is not a magic hacking gadget. It is a learning board with enough real-world pieces to teach useful habits.
WHAT WE’RE BUILDING
The Project
The back of the Cypherbox Mini showing it’s PN532 NFC module. This reads the tags.
The project is based on an ESP32-C3, some external modules, and some special firmware. You can find it at my Github here. The README documents the hardware map, build flow, SD-card layout, web server defaults, USB shell, and current validation status.
Think of it as four beginner labs in one board:
Lab | What you learn | First safe proof |
|---|---|---|
NFC | Tags, UIDs, NDEF links, Type 4 basics | Read or write a tag you own |
GPS | Fixes, satellites, coordinates, saved logs | Save one location file |
WiFi/Bluetooth | Channels, RSSI, nearby APs, CSV logging | Run a passive scan |
USB + SD | Serial commands, files, repeatable tests | Run help and list the card |
The useful bits:
NFC and NDEF: scan/read/clone/emulate tags, read UID/NDEF data, dump MIFARE or NTAG data, write URL/text NDEF payloads, and serve an SD-backed NDEF payload. Emulation is for Type 4 tags only.
Type 4 NDEF emulation: NDEF from SD now serves a read-only NFC Forum Type 4 NDEF tag over ISO14443-4 APDUs, which is the right direction for iPhone-friendly URL tap testing.
Wardriver: passive WiFi logging that waits for a fresh GPS fix and writes WiGLE-compatible CSV plus a session summary to SD.
USB/BLE shell: Connect via USB or BLE to get a serial terminal w/ mini> prompt at 115200 baud with commands for NFC, APDU, GPS, wardriving, WiFi, BLE, SD, and stop/reset flows.
Storage-first workflow: presets and outputs live on the microSD card, so the device is not just an toy demo.
There are active tools in the firmware too: deauth, beacon/probe floods, PMKID capture, captive portal, BLE advertising spam, and HID workflows. Those belong in an authorized lab. The beginner path is simpler: build the device, prove the passive tools first, and keep the permission boundary clear.
That line matters.
THE WORKBENCH
The AI Angle

ChatGPT Codex can act as your computer assistant to compile/flash your board automatically. Helpful for fixing bugs or getting ideas on your projects.
This is the kind of project where AI agents like ChatGPT Codex can be a real helper, especially if you are new to working with microcontrollers.
The repo includes an AGENTS.md file. Think of that file as the instruction sheet for Codex. It tells Codex what kind of board this is, how the firmware should be built, what command to run, what serial settings to use, and what counts as a real check. Read more about AGENTS.md files here.
That means you can open the project in Codex and ask it to help with the boring but important parts:
check the build instructions
compile the firmware
find the connected board
flash the device if it is plugged in
open the serial monitor
look for errors
explain what failed in plain English
For Cypherbox Mini, the basic compile command is:
arduino-cli compile --profile cypherbox_mini cypherbox_miniA good beginner prompt would be:
Use the AGENTS.md instructions for Cypherbox Mini. Help me build the firmware, check for errors, find my ESP32-C3 board, flash it if the board is connected, then open the serial monitor at 115200 and confirm the mini> prompt appears. If you can only compile it and cannot prove the hardware is working, say that clearly.
That last part matters. With hardware, “it compiled” and “it works on the board” are not the same thing. Codex is useful because it can help you keep those steps separate. This is how I can quickly build and filter out all errors to keep on developing.
TOOLS
Your First 20-Minute Bench Test
If you are new to boards like this, do not try every feature on day one. Start with the smallest proof that the device is alive.
First, build and flash the firmware. Then open the serial monitor at 115200 and look for the mini> prompt. That prompt is your first win. It means the board is running and you can talk to it.
From there, keep the first session simple:
run
helpso you can see the available commandsrun
statusso you know what the board can seelist the SD card so you know storage is working
scan an NFC tag you own
save one GPS fix if you have signal
run one passive WiFi scan
check the CSV or summary file afterward
That is already a complete first test: firmware, serial, storage, NFC, GPS, and WiFi.
Save the more powerful features for an authorized lab. Tools like active WiFi tests, BLE/HID workflows, and anything that touches other devices need permission and a controlled setup.
The goal is not to press every menu item. The goal is to prove one thing at a time and write down what actually worked: compile, upload, shell, SD card, NFC tap, GPS fix, or WiFi log.
Showing the WIFI penetration tests that you can do on the Cypherbox Mini.
Showing the main menu on the Cypherbox Mini.
WHY I LIKE IT
Cypherbox Mini is a long-time favorite because it turns a messy pile of radio, NFC, GPS, WiFi, SD, and firmware ideas into something you can actually hold, navigate, test, and understand.
The SD card is not glamorous, but it is the quiet hero. Preset files make NFC tests repeatable. Saved dumps and logs make each session inspectable. Wardriving output becomes a CSV instead of a vague memory. And the USB/BLE shell means the board is not trapped behind three buttons when it is time to debug or use it. Actually, no screen is required at all.
That is the real value: This is not a magic cyber gadget. It is a pocket lab with menus, files, commands, and boundaries. It shows beginners what is possible with a few pieces of hardware and an idea.
Until next time,
Cypher
Website

