Drop it. Walk away.
Own the network.
Over 10 years of pentesting. This is what we wished existed. We built it, we deploy it on our own engagements, and now it's yours. Free dashboard & relay included. No subscriptions.
Five devices in one. NAC bypass, credential harvesting, evil twin WiFi, Bluetooth attacks, and passive recon -- each a dedicated mode. Phones home over 4G. Kill switch and self-destruct included.
Compact wireless recon stick. Scan WiFi networks, discover Bluetooth devices, enumerate clients, capture probe requests. Add a USB 4G dongle for fully remote operation.
Built for real engagements.
Everything you need to deploy, operate, and exfiltrate -- without risking the engagement.
4G Phone Home
Devices communicate over cellular -- completely independent of the target network. No OPSEC footprint on the client's internet.
E2E Encrypted Relay
Zero-knowledge relay architecture. Even if Blacksight is compromised, attackers only see encrypted blobs. We cannot read your traffic.
Auto-Exfiltration
Captured credentials, hashes, and handshakes are encrypted and pushed to your dashboard over 4G in real-time.
Kill Switch
Immediately stop all active attacks from the dashboard or your phone. One command, instant effect.
Self-Destruct
Remote or physical trigger. Cryptographically erases all loot, keys, and logs. Resets to clean factory image.
Scheduled Operations
Run attacks only during business hours to blend with normal traffic. Per-mode time windows.
Stealth Mode
Master toggle for passive-only operation. Zero packets sent. Perfect for initial recon before going loud.
Engagement Reports
Auto-generate findings summaries from captured loot. Export or sync to the dashboard.
Free Dashboard
Manage all your devices from one dashboard. Fleet view, device status, loot browser. Free forever, no subscription.
How it works.
Deploy
Plug the device into the target network. It boots in under 60 seconds and starts operating immediately.
Operate
The device phones home over 4G cellular -- independent of the target network. Control it from the free dashboard or tunnel in directly.
Exfiltrate
Captured credentials, hashes, and handshakes are encrypted and auto-exfiltrated to your dashboard in real-time. Hit the kill switch when you're done.
Enterprise
Need on-premises deployment?
Enterprise customers get on-prem relay and dashboard, air-gapped deployments, SSO/SAML, custom integrations, SLA, and dedicated support.
Contact SalesReady to upgrade your engagements?
Order a Phantom or Scout today. Free dashboard and relay included with every device.