ESP32 Bit Pirate

Sub-GHz / CC1101

T-Embed CC1101 firmware and ESP32 Sub-GHz tools

Use T-Embed CC1101 when you want ESP32 Bit Pirate firmware with integrated CC1101 Sub-GHz hardware. It is the direct handheld route for scan, receive, replay and CC1101 testing without wiring an external module first.

Sub-GHz / CC1101
CC1101 optionsFlash CC1101 firmware
LILYGO T-Embed CC1101 ESP32-S3 board with integrated Sub-GHz radio hardware.

Board-specific guide for T-Embed CC1101 firmware, integrated Sub-GHz workflows, wiring limits and ESP32-S3 workflows.

wiring references

Four wiring references for T-Embed CC1101 pinout checks, Plus variant matching, radio layout and Qwiic access.

T-Embed CC1101 pinoutPinout map with Sub-GHz, display, encoder, SD, Grove and GPIO resources.Source
T-Embed CC1101 Plus pinoutPlus variant pinout with the added nRF24 radio area.Source
T-Embed Qwiic detailClose-up of the Qwiic/I2C/UART connector labels.Source
T-Embed CC1101 board photoBoard photo overview with clear case, radio variant and Grove end.Source

hardware choice

T-Embed CC1101 integrated hardware vs external CC1101 module

Choose the integrated board when you want the fastest ESP32 Bit Pirate Sub-GHz path. Choose an external CC1101 module when flexible wiring and board choice matter more.

T-Embed CC1101

Integrated CC1101 hardware, matching ESP32 Bit Pirate firmware and a handheld workflow for scan, receive, replay and Sub-GHz checks.

T-Embed CC1101 Plus

Adds the Plus hardware variant while keeping the same integrated CC1101 route; select the matching firmware manifest.

External CC1101 module

Use another ESP32-S3 board plus a wired CC1101 module when you need custom pins, bench wiring or easier probing.

Next pages

Pair this board page with the CC1101 module page, Sub-GHz protocol page and CC1101 wiring recipes.

compatibility

T-Embed CC1101 board overview and CC1101 Plus variant

Use this page to choose between the CC1101 and CC1101 Plus variants before flashing ESP32 Bit Pirate.

TypeESP32-S3 handheld board with integrated Sub-GHz radio hardware.
T-Embed CC11014 GPIO through 2x Qwiic, screen, encoder, speaker, mic, SD card, CC1101, PN532, IR TX/RX and battery.
T-Embed CC1101 Plus4 GPIO through 2x Qwiic, screen, encoder, speaker, mic, SD card, CC1101, NRF24, PN532, IR TX/RX and battery.
FirmwareDedicated T-Embed CC1101 and CC1101 Plus manifests in the Web Flasher.

practical tasks

T-Embed CC1101 supported workflows

T-Embed CC1101 is the integrated-board route for Sub-GHz work, with UART, I2C/Qwiic and IR available around the radio hardware.

Sub-GHz / CC1101

Primary reason to choose this board. Use Sub-GHz protocol pages and CC1101 recipes; the Plus variant also includes NRF24 hardware.

UART and Web Serial

Flash, verify and run CLI sessions from the browser or a serial terminal.

I2C/Qwiic modules

Use Qwiic access for compatible accessories, I2C checks and external modules with planned pin mapping.

Infrared and files

IR and SD resources make remote-control and capture workflows natural in a handheld setup.

T-Embed CC1101 pin mapping and wiring notes

Keep CC1101, PN532, IR, SD, display and encoder pins reserved. Use Qwiic connectors for supported external wiring and avoid reassigning onboard radio pins unless you intentionally modify the firmware and hardware.

Always verify voltage and pin mapping before connecting a target. The ESP32-S3 side is not 5 V tolerant unless external level shifting or the Dock path is used correctly.

useful pages

T-Embed CC1101 useful next pages

Jump from T-Embed CC1101 to Sub-GHz, IR, serial, module and flashing resources.

Protocol modes

Sub-GHz

Open the protocol overview before choosing pins and commands.

Infrared

Open the protocol overview before choosing pins and commands.

I2C

Open the protocol overview before choosing pins and commands.

UART

Open the protocol overview before choosing pins and commands.

Useful recipes

Scan Sub-GHz frequency with CC1101

Use the task guide for wiring, commands and troubleshooting.

Receive a Sub-GHz frame

Use the task guide for wiring, commands and troubleshooting.

Record Sub-GHz signal to LittleFS

Use the task guide for wiring, commands and troubleshooting.

Load Flipper .sub file

Use the task guide for wiring, commands and troubleshooting.

Wire CC1101 Sub-GHz module

Use the task guide for wiring, commands and troubleshooting.

Tools and hardware

Web Serial Terminal

Open Web Serial for T-Embed CC1101 CLI sessions after flashing.

Web Flasher

Flash the matching T-Embed CC1101 build from a compatible browser.

Hardware ecosystem

Check docks, adapters and wiring hardware that pair with T-Embed CC1101.

Modules and target chips

Browse chips and breakout modules that make sense with T-Embed CC1101 wiring.

board-specific answers

T-Embed CC1101 FAQ

Quick T-Embed CC1101 answers about integrated radio support, Sub-GHz limits, GPIO tradeoffs and flashing.

Which firmware should I select for T-Embed CC1101?

Choose the T-Embed CC1101 or CC1101 Plus firmware, not the plain T-Embed firmware, when using the integrated CC1101 hardware.

Is this the best board for Sub-GHz work?

It is the most natural integrated ESP32 Bit Pirate route for CC1101-oriented Sub-GHz workflows.

Can I use it as a generic GPIO bench?

Only for limited tasks. The integrated radio, display and other onboard hardware reduce free GPIO compared with a DevKit.

Can ESP32 Bit Pirate replay arbitrary RF signals?

Use Sub-GHz features only on devices and lab signals you own or are authorized to test. The page should stay focused on learning, diagnostics and bench captures.

How do I enter download mode?

With USB connected, hold the encoder's center button, press and release RESET, then release the center button.

source project

T-Embed CC1101 in the ESP32 Bit Pirate ecosystem

ESP32 Bit Pirate on T-Embed CC1101 centers on integrated Sub-GHz hardware, handheld radio checks, IR and connector-based bus work.