DonJulve
Community author of the RootedCon2026-PacmanBadge-Reversing repository reconstructing the official firmware and CTF protocol under GPL-3.0.
SourceRootedCON 2026 · Spain · 2026
Spanish ESP32 PACMAN CTF badge with project-builder and community-reversal evidence
RootedCON 2026's PACMAN-themed attendee CTF badge is documented by both community reversals and a first-hand TechFrontiers project-builder write-up. David Melendez Cano reports original colored Ghost boards that attendees could choose, an ESP32-WROOM-32 platform, ESP-NOW game-server interaction, per-badge NVS identity/key material, and digitally signed questions and answers. Community reversals independently identify an ESP32-D0WD-V3, 1.77-inch ST7735 128x160 display, directional controls, and native quiz-server CTF protocol for the March 5-7 sixteenth edition at Kinepolis Madrid.
People
Community author of the RootedCon2026-PacmanBadge-Reversing repository reconstructing the official firmware and CTF protocol under GPL-3.0.
SourceThe direct project-builder write-up says the PACMAN Ghost boards were created from scratch by the author and TechFrontiers collaborator Gabriela G.; it describes the hardware and signed CTF design but does not allocate every individual engineering or manufacturing task.
SourceNamed by David Melendez Cano as the TechFrontiers collaborator developing this hardware-experience line. The post does not provide a fuller name or assign individual hardware, firmware, artwork, or production tasks.
SourceOfficial publisher of the 2026 sixteenth RootedCON edition at Kinepolis, Madrid.
SourceCommunity author of the r4venOS WiFi-auditing replacement firmware for the RootedCON 2026 ESP32 badge.
SourceThe builder post identifies TechFrontiers as the team under which the RootedCON PACMAN/Ghost hardware experience was developed; it does not establish RootedCON organizational ownership, a public design release, or image-reuse permission.
SourceIt turns a previously community-reconstructed Spanish badge into a triangulated record with direct builder attribution, attendee Ghost-variant evidence, a source-described signed ESP-NOW CTF design, and retained independent reverse-engineering detail. The record still does not convert a personal project write-up into an official RootedCON source release, manufacturing ledger, or image-reuse permission.
TechFrontiers' project-builder account calls the original board an ESP32-WROOM-32 design with LiPo 1S, integrated charger, under-voltage lockout, automatic USB-serial RESET/EN programming, exposed UART0 debug, SPI display wiring, directional/select controls, and an optional/easter-egg screen-ground MOSFET on some boards. Independent community reversing identifies the chip-level ESP32-D0WD-V3, 1.77-inch ST7735 128x160 TFT, D-pad, and additional buttons; those module- and chip-level descriptions are retained as source-specific evidence rather than collapsed into an official BOM. No official schematic, PCB, BOM, production file, final revision, battery capacity, charge configuration, or electrical-safety record has been recovered.
The builder describes a CTF in which game-server questions were broadcast using ESP-NOW and accepted only after Ed25519 signature verification; individual badges signed replies with their own NVS-stored key material. The post frames recoverability of a badge's own key as an event hardware-hacking exercise while saying it did not grant another player's identity. Community repositories independently document the original Pacman firmware's native quiz-server CTF protocol, arcade mode, Marauder integration, and emulation work. No official RootedCON firmware, backend, hardware-design repository, release, protocol specification, or source license was recovered, so this record does not publish operating or extraction instructions or claim a canonical production release.
RootedCON is a long-running Spanish cybersecurity conference, and the 2026 sixteenth edition ran March 5-7 at Kinepolis in Madrid. The direct TechFrontiers account says attendees could choose red, purple, green, or blue Ghost boards, while PACMAN boards were reserved for the organization. David Melendez Cano says the badges were created from scratch by the TechFrontiers team with Gabriela G.; independent attendees later published reversing, repurposing, and replacement-firmware material.
Source-backed hardware metadata
Structured technical signals seeded from public badge documentation, repositories, schematics, firmware notes, or event evidence. These fields are designed for filtering, API use, repair planning, preservation, and future Companion Gear matching.
The community reversing repository documents an electronic RootedCON 2026 Pacman Badge.
Signal sourceThe TechFrontiers project-builder post identifies an ESP32-WROOM-32; a community reversing repository separately identifies the ESP32-D0WD-V3 chip-level detail.
Signal sourceThe TechFrontiers project-builder post describes ESP-NOW badge-to-server interaction for the RootedCON 2026 CTF.
Signal sourceThe reversing repository identifies a 1.77-inch ST7735 128x160 TFT display.
Signal sourceThe reversing repository documents a PlatformIO ESP32 build target.
Signal sourceRepair, preservation, and legal lab context
Parts, tools, and supplies that match this badge's documented hardware, protocols, or preservation needs. These are category-level recommendations, not compatibility guarantees.
Display modules and related parts for repair and preservation planning.
This badge has a documented display signal. Matched technical signals: ST7735 TFT.
Vendor link · selected for technical relevance
Headers, sockets, and connector supplies for display repair or replacement work.
Display headers and connectors are useful for repair and preservation planning. Matched technical signals: ST7735 TFT.
Vendor link · selected for technical relevance
Debug probes for ARM/RISC-V badge development, recovery, and documentation.
Debug probes can support authorized recovery, firmware work, and documentation for microcontroller badges. Matched technical signals: ESP32.
Vendor link · selected for technical relevance
USB serial adapters for logs, recovery, and firmware documentation workflows.
This badge has a documented microcontroller platform where serial logs or flashing workflows may be relevant. Matched technical signals: ESP32.
Vendor link · selected for technical relevance
Anti-static bags and storage supplies for preserving loose badge PCBs and sensitive components.
This is documented as an electronic or hardware artifact where anti-static storage can support preservation. Matched technical signals: Electronic badge.
Vendor link · selected for technical relevance
Lifecycle
The original PACMAN-themed badge firmware's native quiz-server CTF protocol was reversed by the community. The community repository is not an official RootedCON release.
SourceThe r4venOS community firmware replaces the Pacman firmware with a WiFi scanner, evil-twin detector, deauth, and crypto utility toolkit on the same ESP32 hardware.
SourceCommunity reversals identify a 1.77-inch ST7735 128x160 TFT display and a directional pad with additional buttons on the ESP32-D0WD-V3 board.
SourceThe builder describes ESP-NOW question distribution, Ed25519 verification before display, and individual badge-signed replies to the game server. This preserves the source-described event architecture without publishing packet construction, key-recovery steps, backend endpoints, final protocol source, cryptographic review, or a general security guarantee.
SourceThe TechFrontiers builder account says attendees could choose red, purple, green, or blue Ghost boards, while PACMAN boards were reserved for the organization. It does not establish quantities, exact recipient ledger, final color inventory, or every physical-board variant.
SourceThe builder describes LiPo 1S, integrated charging, under-voltage lockout, automatic USB-serial RESET/EN control, exposed UART0, and an extra screen-ground MOSFET on some boards. The account does not establish cell capacity, charge settings, board-revision coverage, electrical testing, safe modification, or a production-service procedure.
SourceOperational history
The Spanish record remains source-backed and image-free rather than copying community repository diagrams, the LinkedIn post image, screenshots, social media, placeholders, or generated approximations.
The catalogue now records direct builder attribution and event architecture without portraying a personal project post or community reverse-engineering tree as an official RootedCON source release, complete production specification, firmware security audit, or reusable-image permission.