ELDRITCH BLAST / ACTIVE DEVELOPMENT

More capability.
Less to carry.

Eldritch Blast is a compact, integrated offensive-security platform designed by operators for operators. It is being built to identify, interact with, test, document, and understand target technologies during live authorized engagements.

Roughly comparable in overall form factor to a Nintendo Switch, Blast is intended to replace a field bag of disconnected devices, computers, adapters, tools, and applications with one purpose-built system. It is professional red-team equipment—not a consumer gadget.

One field system.
Multiple surfaces.

Blast is being engineered to consolidate assessment capabilities that normally require separate hardware and software. The integration is ongoing, and this is not a final or exhaustive specification.

01 / WIRELESS

Wi-Fi Assessment

Integrated discovery, observation, and authorized assessment workflows for wireless environments encountered in the field.

02 / RF

Radio-Frequency Analysis

Planned interaction and analysis workflows for relevant radio technologies without requiring the operator to move between unrelated devices.

03 / PROXIMITY

RFID, NFC & Credentials

Credential capture, analysis, and supported cloning or emulation workflows where the engagement explicitly authorizes them.

04 / ACCESS CONTROL

Readers & Controllers

Electronic access-control assessment and analysis of reader, credential, and controller communications within scope.

05 / TOOLCHAIN

Integrated Assessment Tools

Offensive-security tools, exploits, and assessment packages relevant to recognized technologies, orchestrated through one field environment.

06 / SYSTEM

Hardware + Software

Purpose-built hardware and software integration focused on predictable operation during real red-team engagements.

Exact capability coverage will evolve as hardware, software, and field workflows are integrated and tested.

Context at the
point of operation.

Blast is being developed with live camera and video recognition intended to help an operator identify technology in front of them—access-control readers, locks, wireless equipment, controllers, network infrastructure, electronics, and other relevant hardware.

  1. 01
    ObserveThe operator directs the system toward technology encountered during the engagement.
  2. 02
    IdentifyThe assistance system returns a probable technology identification with a confidence score.
  3. 03
    Provide contextRelevant technical information is surfaced for operator review.
  4. 04
    Suggest optionsApplicable assessment paths may be presented based on the probable identification.
  5. 05
    Operator decisionThe operator evaluates scope, authorization, confidence, and context before choosing an action.
  6. 06
    Authorized workflowWhen selected and permitted, Blast may invoke or assist with the relevant assessment tooling.

Identification does not automatically trigger exploitation. The system assists; the operator decides and executes.

The engagement
travels with the tool.

Pocket Pentest is Eldritch Engineering's penetration-testing engagement, evidence, and field-recording application. It is being integrated directly with Blast so reconnaissance, testing, evidence collection, and documentation can happen in the same operator workflow.

Discover wireless infrastructure and record observed access points, SSIDs, and relevant metadata. Find credentials during authorized testing and keep them with the engagement record. Capture evidence and associate it with targets, findings, notes, or engagement events instead of scattering the work across unrelated applications.

  • 01Scope & targets
  • 02Credentials
  • 03Evidence & findings
  • 04Timeline & events
  • 05Operator notes
  • 06Discovered infrastructure

Client data stays
under local control.

Blast is intentionally designed so normal field operation does not require an Eldritch cloud service. Engagement data can remain with the operator, without an unnecessary vendor-cloud dependency or third-party storage requirement.

LOCAL STORAGE PROTECTION LUKS-encrypted LVM

Local Linux storage encryption protects data at rest. It is one part of system security—not a claim that compromise is impossible.

OPERATOR CONTROL

Sensitive client and engagement data remains under the operator's handling and access procedures.

NO REQUIRED VENDOR CLOUD

Normal operation is not designed around uploading client records to Eldritch infrastructure.

OFFLINE FIELD USE

Core field workflows remain useful where Internet access is limited, unavailable, or intentionally avoided.

LESS EXTERNAL DEPENDENCY

Local processing and storage reduce reliance on infrastructure outside the engagement environment.

One operating
environment.

Blast runs the Eldritch graphical operating environment, built on Debian Linux and designed specifically around offensive-security workflows. The objective is not another general-purpose Linux desktop. The operating environment exists to make Blast's hardware, tools, AI assistance, and engagement data function as one system.

Eldritch OS is being shaped around tool orchestration, hardware integration, evidence handling, predictable field behavior, and access to established Linux offensive-security tooling where appropriate.

The tool adapts
to the operation.

Blast is designed around actual red-team activity: less equipment, fewer disconnected applications, less manual transcription, and a faster transition from discovery to authorized assessment.

LESS EQUIPMENT

Consolidate field capabilities into a compact system that remains practical to carry and operate.

CONNECTED WORK

Move from identification to context, tooling, and evidence without rebuilding the engagement state in another application.

EVIDENCE IN THE MOMENT

Capture what happened while the work is taking place, with relevant target and engagement context attached.

OPERATOR AUTHORITY

Assistance and automation reduce friction. The operator remains responsible for scope and execution.

The goal is not to replace the operator. It is to give the operator more capability at the exact moment it matters.

STATUS / ACTIVE ENGINEERING

Built from field requirements.

Eldritch Blast is under active development. Eldritch Engineering is currently developing, integrating, and testing the platform's hardware, software, assisted-identification, and engagement workflows. Capabilities described on this page include intended workflows and ongoing engineering work; they should not be read as a final production specification or retail availability announcement.

Interested in
where Blast is headed?

If you are evaluating field offensive-security systems, exploring an integration, working on relevant research, or want to understand how Blast could apply to your environment, talk to us.

Blast is not currently presented as a retail product. The useful conversation right now is technical: the problem, the operating environment, and what professional operators need in the field.