Ethical hacking is the practice of legally and intentionally probing computer systems, networks, or devices to find and fix security vulnerabilities before malicious hackers can exploit them.
It also known as "white-hat hacking, " it involves using the same techniques as cybercriminals—such as penetration testing, network scanning, and social engineering—but with permission and for a constructive purpose. Ethical hackers help organizations strengthen their defenses, ensure compliance, and improve overall cybersecurity posture, making the digital world safer for everyone.
Meet CutieCat, the adorable cat-shaped hacking console built on the Xiao ESP32-S3 that hides serious capabilities beneath its playful design. With wireless reconnaissance, USB keystroke injection, GPS wardriving, and CircuitPython support, it’s more than just cute—it’s the purr-fect tool for anyone learning embedded security, ethical hacking, or rapid prototyping. Whether you’re a seasoned DEFCON veteran or a curious maker, DevKitty is your pocket-sized sidekick.
Introduction 👋In the ever-growing world of hacking tools and DIY electronics, standing out isn’t easy. But what if your portable hacking device came dressed as a cat? That’s exactly what DevKitty delivers—a quirky, open-source, and functional ESP32-S3 console shaped like a feline. Designed for wireless reconnaissance, USB-based payload injection, and electronics prototyping, DevKitty brings a light-hearted aesthetic to the serious business of learning hardware security. Created by Alex Lynd, it’s already clawing its way into the hearts of hackers, educators, and hobbyists across the globe.
Thank you, Hackster, for the generous giveaway of this awesome hardware, CutieCat, during Hackster Holidays! ❤️What's in the box 🎁
CutieCat comes as a complete kit that includes the following hardware:
- Nugget Circuit Board – features 4 buttons, 1 NeoPixel, an micro SD card slot, and ports for USB Type-C, Grove I²C, and UART
- XIAO ESP32-S3 Microcontroller
- NBR Paper Antenna with U.FL connector
- SH1106 OLED Display
- Various Pin Headers for expansion and prototyping
- 3D-Printed Cat-Shaped Enclosure
To assemble this kit you can follow the Guide given by the Creator of this kit, Alex Lynd. Or you can refer the website.
You can also follow our Video
Flash the Firmware 🧪To flash the firmware into CutieCat we can use WebFlasher tool given by DevKitty. So first we have to
- Plug into your PC via USB-C.
- Head to update.devkitty.io in your browser. Following Web Flasher page will get open
- Then you have to place your DevKitty/CutieCat board into "Boot Mode" / "DFU Mode" by holding down the BootButtonwhile plugging it in.
- Step 2 : Once the XIAO ESP32-S3 get entered into bootloader mode,
- Click on connect button to Connect your Board
- Your board's information will be shown like below
- Then in Step 3. choose from available firmwares like:
- ScriptKitty(USB HID attacks),
- Wardriver(Wi-Fi scanning + GPS logging),
- CircuitPython (custom scripts),
- or a QA testing tool.
- Then next, select the Hardware Model - We will select CutieCat
- Then Click on Erase(If you want to erase flash first before flashing firmware) or Program button to flash the Firmware into board
- Firmware will get flashed. And you will require to reset the board. (You can disconnect the USB and connect it again. Or Press the RESET(R) button of XIAO ESP32-S3
In demo you will see
The ScriptKitty Firmware UI. You can select which OS your Testing PC/(vulnerable computer) is running. Then according you can run USB penetration attack. Check out the following video for more details.
Final Meow 🐈DevKitty CutieCat is the kind of tool that makes hacking accessible, creative, and—dare we say—adorable. It’s an ideal conversation starter, workshop centerpiece, and educational platform. Whether you’re pentesting networks or just learning the ropes of microcontroller programming, CutieCat keeps things playful while packing a serious punch.
DocumentationI will share all the documents, codes, schematics, etc. on GitHub.
Suggestions about this Tutorial/Project design, Circuits, code modifications, Optimization, Errors/Bugs findings and queries are most welcomed. Feel free to raise you queries, suggest your opinions and point out any errors or bugs.Credits
Thanks to hackster.io, DevKitty.io, Jinger Zeng, and all other peoples, websites and entities who (directly/indirectly)helped me for creating this article.
Disclaimer ⚠️
Comments