HoggorminoandClaude Opus 5
53ede949b8
- README: the IR engine allocates heap for payloads, so drop
"zero-allocation"; the drop folder takes the 1-bit and two-plane BMPs
the image preparer exports, not any BMP, and type 1626 targets cap
files at 24 KB; NFC scan only fills the barcode when the tag's NFC
data decodes; there is no test-pattern feature; the FAQ now says this
app needs a Flipper even though the protocol does not.
- CONTRIBUTING: the Android companion app was removed in d608afb.
- wrangler.toml pointed users at a "WiFi Setup -> Server URL" field that
never existed. Say how the URL is actually set today.
- cloud_client.h described a runtime override through
cloud_client_set_url(), which nothing calls.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
TagTinker V2.1
Infrared ESL Research Toolkit for Flipper Zero
Protocol study • Signal analysis • Digital Art
→ Launch the TagTinker Image Prep web app ←
Overview
TagTinker is a Flipper Zero app for exploring infrared electronic shelf-label (ESL) protocols. It allows you to transmit custom images and text to supported graphics tags. A companion web image preparer runs entirely in the browser and lets you drop, dither and download Flipper-ready BMPs without any install.
As the Flipper Zero team notes:
"FYI: this is pure infrared signal, same that you use in TV remotes. The whole security was relying on obscurity of protocol."
This tool is built for IoT security curiosity, learning about obscure protocols, and displaying digital art on e-ink hardware.
Warning
Hardware Warning: Many infrared ESL tags store their firmware, address, and display data in volatile RAM to save cost and energy. If you remove the battery or let it fully discharge, the tag will lose all programming and become unresponsive ("dead"). It usually cannot be recovered without the original base station.
Features
-
TagTinker Flipper App: High-performance RLE streaming IR engine.
-
TagTinker Image Prep (web): Single-file, dependency-free HTML page that lists every supported tag profile, runs a full image pipeline (tone, contrast, detail, sharpen, dither, photo-grade Oklab 3-colour quantisation) and exports a Flipper-ready BMP. Hosted at i12bp8.github.io/TagTinker (source:
web-image-prep/). -
Drop-folder image flow: Drop a prepared BMP into
apps_data/tagtinker/dropped/on the Flipper SD card, then openTargeted Payloads → <tag> → Set Imageand pick it. The Flipper rescales the 1-bit and two-plane BMPs that the image preparer exports, so one file can be sent to graphics tags of other sizes and to any page. Type 1626 (SmartTAG Color 2.6) targets only accept files up to 24 KB. -
NFC Tag Scan: Add a target by scanning the tag's NFC chip instead of typing its barcode. This works when the tag's NFC data carries an ID TagTinker can decode; otherwise use
+ Type Barcode. -
WiFi Plugins (optional): Plug a Flipper WiFi Dev Board (ESP32-S2) into the GPIO header to unlock live, network-rendered tag designs — crypto price cards, weather tiles, identicons, and more — auto-discovered by the FAP. New plugins live entirely on the cloud worker; the Flipper firmware never has to be re-flashed to add one.
-
Display text and custom images.
-
Support for monochrome and accent-color (red/yellow) graphics tags.
Getting Started
- Build the Flipper app from this repository and install it via
ufbt. The first launch createsapps_data/tagtinker/dropped/on your SD card. - Open i12bp8.github.io/TagTinker in any browser, pick your tag profile, drop an image, tweak, and download the BMP.
- Copy the BMP into
apps_data/tagtinker/dropped/on the SD card (overqFlipper, USB MTP, or whatever you use). - On the Flipper open
Targeted Payloads → <your tag> → Set Image, pick the BMP, choose a page, send.
FAQ
Does this require a Flipper Zero?
This app does. The IR protocol itself is simple enough to drive from other cheap microcontroller hardware, such as an ESP32 and an IR LED, but this repository only contains the Flipper implementation. The Flipper Zero just happens to be my favorite security research tool, which is why I built the app for this platform.
Where is the .fap release?
The Flipper app is source-first. Build the .fap yourself from this repository with ufbt so it matches your firmware and local toolchain.
What if it crashes or behaves oddly?
If you are using a custom firmware branch, custom asset packs, or a heavily modified device setup, start by testing from a clean baseline firmware.
Credits & Background
This project is deeply indebted to the incredible public reverse-engineering work by furrtek. To understand the underlying protocol, signal structure, and history, please read his research:
- Furrtek’s ESL research: https://www.furrtek.org/?a=esl
- PrecIR reference implementation: https://github.com/furrtek/PrecIR
NFC tag decoding contributed by 7h30th3r0n3.
Disclaimer
Caution
STRICTLY PROHIBITED FOR ILLEGAL USE
TagTinker is an independent project intended strictly for educational research, security curiosity, and displaying digital art on hardware that you legally own.
Under no circumstances is this software allowed to be used for illegal activities. You are strictly prohibited from using TagTinker to alter retail displays, modify electronic shelf labels in stores, interfere with third-party infrastructure, or cause any form of vandalism or financial harm.
The creator of TagTinker assumes absolutely no liability for any misuse of this software. By using this software, you agree to take full responsibility for your actions and use it responsibly and legally.
License
Licensed under the GNU General Public License v3.0 (GPL-3.0). See the LICENSE file for details.