LILYGO T-Embed CC1101 Plus ESP32-S3 Multi-Radio Board (Sub-GHz, NRF24, NFC, Internal Antennas)

Specifications

• Microcontroller: ESP32-S3 (Dual-core LX7, up to 240 MHz)

• Flash Memory: 16MB

• PSRAM: 8MB

• Display: 1.9-inch ST7789V IPS Color TFT LCD (170x320 resolution)

• Sub-GHz Transceiver: CC1101 (300-348 MHz, 387-464 MHz, 779-928 MHz)

• 2.4GHz Transceiver: nRF24L01

• NFC/RFID: PN532 (13.56MHz)

• Wireless (MCU): 2.4 GHz Wi-Fi (802.11 b/g/n) & Bluetooth 5 (LE)

• Battery: Built-in 1300mAh Li-Po

• Onboard Features: Microphone, Speaker, IR TX/RX, MicroSD Slot, Rotary Encoder

• Dimensions: 97.5mm (L) x 39mm (W) x 31mm (H)

Key Applications and Projects

• Wireless Security Auditing: Running open-source frameworks to analyze, capture, and replay Sub-GHz, Wi-Fi, and Bluetooth signals for penetration testing.

• Universal Smart Remote: Creating a unified remote control that can interface with infrared TVs, Sub-GHz RF garage doors, and 2.4GHz smart home appliances from a single menu.

• NFC Access Control Node: Reading, cloning, and emulating RFID tags and NFC cards for smart office or home access systems.

Unlock New Capabilities (Project Evolution) The Ultimate Pocket Diagnostics Tool: Evolve the T-Embed CC1101 Plus into a comprehensive portable penetration testing and network diagnostics hub! Because it houses multiple radio chips alongside the powerful ESP32-S3, you can flash community-driven firmware (such as the popular Bruce firmware) to instantly turn it into a pocket-sized security auditor. Use the CC1101 to capture and replay Sub-GHz signals, the PN532 to read RFID badges, and the nRF24L01 to intercept 2.4GHz peripheral traffic (like MouseJack vulnerabilities). With the 1300mAh battery and MicroSD card slot, you can log massive network captures for hours while navigating options seamlessly using the rotary encoder!

PACKAGE INCLUDED

• 1 x LILYGO T-Embed CC1101 Plus Unit (Internal Antenna Version, Transparent Shell)

• (Pre-installed with a 1300mAh Li-Po Battery)

Downloads & Links

• LILYGO T-Embed CC1101 Github Link

FREQUENTLY ASKED QUESTIONS (FAQ)

1. What is the difference between the standard T-Embed CC1101 and this "Plus" version? The "Plus" version adds the highly capable nRF24L01 transceiver module for 2.4GHz ISM applications alongside the existing CC1101 Sub-GHz and PN532 NFC modules.

2. Does this specific device require external antennas? No, this is the Internal Antenna [K268] version. All antennas for the CC1101, nRF24L01, Wi-Fi, and Bluetooth are built directly onto the internal PCB, allowing for a sleek, flat-topped form factor that won't snag in your pocket.

3. What microcontroller powers this device? It is driven by the powerful Espressif ESP32-S3 dual-core LX7 microprocessor.

4. Can this replace a Flipper Zero? It shares many similar hardware capabilities (Sub-GHz, NFC, IR, Bluetooth, Wi-Fi) and is highly popular for running security auditing firmware like "Bruce," making it an incredibly powerful, hackable, and accessible alternative for makers and security researchers.

5. Does it have an internal battery? Yes, it comes with a built-in 1300mAh Li-Po battery, making it fully portable right out of the box.

6. How do I navigate the menus? The device features a large, tactile rotary encoder wheel on the front. Turning the wheel scrolls through menus, and pressing the center of the wheel acts as a confirmation/select button.

7. What frequencies does the CC1101 support? The CC1101 chip operates across the 300-348 MHz, 387-464 MHz, and 779-928 MHz ISM bands.

8. Can I read RFID and NFC cards? Yes, the onboard PN532 chip supports 13.56MHz NFC and RFID reading, writing, and emulation.

9. Is there a built-in microphone and speaker? Yes, the board integrates a microphone and a small speaker for audio input and output.

10. Can I log data locally? Yes, there is a MicroSD (TF) card slot integrated into the bottom/side of the device for logging packets, sensor data, or storing firmware payloads.

11. What is the MicroSD card capacity limit? It is generally recommended to use a high-quality 16GB or 32GB SDHC card formatted to FAT32 for best compatibility.

12. Does it have infrared (IR)? Yes, it includes an IR transmitter and receiver on the top edge for controlling traditional appliances like TVs or AC units.

13. How do I turn the device on and off? Depending on the firmware, power is generally handled via software sleep modes or by holding the physical buttons on the side (RST/Boot).

14. How much memory does it have? The ESP32-S3 is equipped with a massive 16MB of Flash and 8MB of PSRAM.

15. Can I program this with the Arduino IDE? Yes, it is fully supported by the Arduino IDE, PlatformIO, and ESP-IDF.

16. What settings should I use in the Arduino IDE? Select the "ESP32S3 Dev Module" (or "Lilygo T Embed Cc1101" if available in your board manager). Set "USB CDC On Boot" to Enabled, Flash Size to 16MB, Flash Mode to DIO, and PSRAM to "OPI PSRAM".

17. What logic voltage do the GPIO pins use? All internal logic and external interfaces operate strictly on 3.3V logic. Supplying 5V to any GPIO pin will destroy the microcontroller.

18. Are the GPIO pins accessible? Yes, there is a Grove-compatible expansion port on the edge for easily attaching external I2C sensors or additional modules.

19. How do I charge it? Simply plug a USB Type-C cable into the port on the bottom edge.

20. Will changing the transparent shell damage it? LILYGO strongly recommends against replacing or opening the shell unless absolutely necessary, as there is a high risk of damaging the IR components or delicate internal flex cables connecting the display and rotary encoder.