Kindly Morrow
T-Embed CC1101 Sub-GHz Dev Board with NFC
Run your own radio stack across sub-GHz, NFC, WiFi, and BLE at the same time. No firmware restrictions, no locked features, no app store approval. The CC1101 transmits and receives. So does the PN532. You decide what they do.
Built around the ESP32-S3 with 8MB PSRAM and 16MB flash, there's real headroom here for signal processing pipelines running alongside a full WiFi stack. The CC1101 covers 300-928 MHz (including 315, 433, 868, and 915 MHz bands), and the NXP PN532 handles 13.56 MHz NFC read, write, and emulation. Flash via Arduino, ESP-IDF, or PlatformIO over USB-C.
Things to build with this
- 433 MHz rolling code logger: use the CC1101 to capture raw packets from garage remotes or key fobs, timestamp and store them to the 16MB flash, then replay on command over the same frequency band
- NFC badge writer with on-device UI: build a tag editor on the 1.9" TFT, store multiple NDEF templates in flash, and write them to blank NFC stickers with a tap via the PN532
- Dual-radio packet bridge: sniff 433 MHz sensor payloads from cheap door or temperature sensors via the CC1101, decode them in firmware, and forward structured data over WiFi using MQTT, all running concurrently on the S3's dual cores
Key Features
- ESP32-S3: dual-core 240MHz, 8MB PSRAM, 16MB flash
- CC1101 sub-GHz transceiver: full 300-928 MHz range, transmit and receive
- NXP PN532: read, write, and emulate 13.56 MHz NFC tags (NDEF, Mifare, ISO14443)
- 1.9" color TFT LCD for real-time signal visualization or custom UI
- WiFi 802.11 b/g/n and Bluetooth 5.0 BLE via ESP32-S3
- RGB LED ring with individually addressable LEDs
- Directional pad with center button, LiPo input, fully exposed GPIO, USB-C power
Frequently Asked Questions
Does it ship with firmware, or is it blank?
It ships with basic demo firmware so you can verify the hardware works on arrival. From there, flash your own via USB-C using Arduino IDE, ESP-IDF, or PlatformIO.
Can it actually replay captured sub-GHz signals, not just receive them?
Yes. The CC1101 is a full transceiver, meaning it both receives and transmits across the 300-928 MHz range. Replay capability depends on your firmware implementation.
Is a battery included?
No battery is included. The board accepts a single-cell LiPo via the GPIO expansion pins. Most standard JST-connected LiPo packs work fine.
How does this compare to a Flipper Zero?
The Flipper Zero is a finished product with polished, maintained firmware. This is a dev board. You get more raw hardware capability and full control over the radio stack, but you write the software yourself. Different tools for different people.
Why we stock this
Curated by Kindly Morrow. We test and vet every product before it hits the store. If we wouldn't use it in our own builds, we don't sell it.
Things to build with this
Fun projects to try once you get your hands on it.
Weather station that texts you
Hook up a temperature sensor and have it send you a Telegram message when it drops below freezing. 20 lines of MicroPython.
Garage door opener you control from bed
Wire a relay to your garage door motor and trigger it from your phone via Home Assistant. No cloud, no subscription.
Plant watering system that knows when to water
Soil moisture sensor + a small pump. Runs on a schedule or when the soil gets dry. Your plants stop dying.
Desk presence sensor for smart lighting
mmWave or PIR sensor detects when you sit down and turns on your desk lights. Turns them off when you leave. Zero effort after setup.
