⚙ SETTINGS
Interface Theme
Privacy Screen
Stealth overlay
Key combo covers the page with a black screen · on mobile: triple-tap any blank area
Mobile: long-press the header bar to toggle stealth
Status LED on black screen
Tiny dot mirrors active status — lets you monitor without revealing display
Display
Background animations
Particle canvas — disable on low-end hardware or for focus
Storage & Data
CLEAR ALL removes all IndexedDB chunks and transfer state.
Settings (theme, defaults) are kept in localStorage.
Error Handling Coverage
Worker pipeline — all CPU ops off main thread (no freezes)
Per-chunk SHA hash verified on receipt
Final file hash verified before download
Sequence validation before assembly
AES-GCM auth tag detects wrong password or corruption
IndexedDB quota/permission errors caught
Decompression errors surfaced with detail
API availability checked at startup
Cross-transfer chunk mismatch detected
Empty/malformed chunk data caught before storage
Protocol
7YP3X-L1N3F33D PROTOCOL FORMAT
ibv1;{idx};{total};{chunkHash};{fileHash};{comp};{compAlgo};{enc};{salt};{iv};{hashAlgo};{hexdata};{nameHex}

13 fixed fields · hex+semicolon only · zero shift keys
All previous formats not supported — re-encode with this version.
7YP3X-L1N3F33D v4.0 · TX-T3RM1N4L
Web Worker pipeline · AES-256-GCM · PBKDF2
CompressionStream · IndexedDB

Flipper Zero · NetHunter · Home Lab · CTF · Red Team
■ HID-KBD FILE TRANSFER PROTOCOL — TX-T3RM1N4L v4.0
7YP3X-L1N3F33D
TX-T3RM1N4L
HID · ENCODE · ENCRYPT · COMPRESS · INJECT
STANDBY
01FILE SELECTION
Drop file here · or browse
Any format · Any size · Android drag & drop supported
NAME
SIZE
TYPE
MODIFIED
⚠ Pre-compressed format detected (.zip/.jpg/.mp4 etc). Compression is safe but will provide negligible size reduction — consider leaving it off.
02ENCODING CONFIG
Chunk Size 2 KB
Hash Algorithm
Output Format
ibv1 uses only 0-9 a-f ;. Zero shift keys on any keyboard layout. JSON is for file-based transfer only.
03COMPRESSION (off by default)
Enable compression
Deflate-raw, Gzip, or Deflate/zlib
Algorithm
Original
Compressed
Saved
SAFE ON ALL FILES — file hash is computed before compression. Hash mismatch = loudly fails. Never silent corruption.
04ENCRYPTION BETA
Enable AES-256-GCM encryption
PBKDF2 key derivation · 210,000 iterations · random salt + IV per encode
⚠ Set password before encoding — not stored in transfer
Password must be shared with the decoder operator. Salt and IV are embedded in every chunk automatically.
⚠ SAVE NOW — FILE UNRECOVERABLE WITHOUT THIS PASSWORD
PASSWORD
SALT
IV
Processing... 0%
11ENCODE LOG
// TX-T3RM1N4L v4.0 — ready.
◉ WAITING FOR CHUNKS
No active transfer. Load files or paste chunk strings.
⚠ ENCRYPTED TRANSFER — ENTER DECRYPTION PASSWORD
01INPUT
Multi-select: hold Ctrl/Shift for multiple .chunk files. Load the full _transfer.json to import all chunks at once.
AUTO-INJECT: Focus this textarea before running DuckyScript. Each chunk is processed as it arrives — no button click needed.
02ACTIONS
03DECODE LOG
// Decode mode ready.
PIPELINE SELF-TEST
Encodes and decodes a synthetic test payload through the full pipeline. Verifies: chunking, re-assembly, hash verification, compression and encryption round-trips. Run this before injecting anything to confirm the pipeline is working.
FORMAT REFERENCE
7YP3X-L1N3F33D v1 (ibv1)
ibv1;{idx};{total};{chunkHash};{fileHash};{comp};{compAlgo};{enc};{salt};{iv};{hashAlgo};{hexdata};{nameHex}

Field breakdown:
ibv1 — protocol marker
idx — 0-based chunk index
total — total chunk count
chunkHash — hash of this chunk's raw bytes (post-enc)
fileHash — hash of the original file
comp — 0 or 1
compAlgo — none / deflate-raw / gzip / deflate
enc — 0 or 1
salt — PBKDF2 salt hex (0 if not encrypted)
iv — AES-GCM IV hex (0 if not encrypted)
hashAlgo — sha256 / sha384 / sha512
hexdata — chunk bytes as lowercase hex
INJECTION CHECKLIST
Run self-test — both encode and decode pipelines working
decoder.html loaded on target machine in browser
Paste textarea has keyboard focus (click it)
DuckyScript delay matches speed estimator
Chunk size ≥ 1KB (smaller sizes increase overhead)
If encrypted — password shared with decoder operator
Post-inject — re-verify chunks, check for hash failures
Assemble and verify file hash matches
BROWSER CAPABILITIES