Case study

qemu-esp32-wireless: ESP32 wireless hardware emulation

qemu-esp32-wireless reconstructs ESP32 Wi-Fi and Bluetooth LE hardware behavior in QEMU to run stock ESP-IDF firmware and its wireless blobs. QEMU patches model radio events, 802.11 traffic and BLE connections; the repository also provides example firmware, capture tools and test scenarios. The author reports comparing wireless timing with ESP32 hardware over JTAG.

Targets: Firmware
Category: Independent reconstruction cases
Relationship: Independent reconstruction project
Sources reviewed: 2026-11-09

Copy as Markdown View JSON Cite

Requirements & limits

Prerequisites: Apply the patches to Espressif's QEMU fork and build qemu-system-xtensa; build example firmware with ESP-IDF.
Limits: BLE connection establishment sometimes requires retries, and encrypted characteristic access after discovery times out.
License: No licence stated on the project page.

Cite

BibTeX

@misc{qemu-esp32-wireless-case,
  title = {{qemu-esp32-wireless: ESP32 wireless hardware emulation}},
  howpublished = {\url{https://codeberg.org/oHn017ss3ad1/qemu-esp32-wireless}},
  url = {https://codeberg.org/oHn017ss3ad1/qemu-esp32-wireless},
  urldate = {2026-11-09},
  note = {Awesome REA entry: \url{https://awesomerea.org/resources/qemu-esp32-wireless-case/}}
}

Plain text

qemu-esp32-wireless: ESP32 wireless hardware emulation. https://codeberg.org/oHn017ss3ad1/qemu-esp32-wireless (accessed 2026-11-09). Awesome REA entry: https://awesomerea.org/resources/qemu-esp32-wireless-case/

Useful? Star Awesome REA on GitHub2.4k

About this entry

The description was reviewed against primary sources.

Report an outdated entry Suggest a translation fix

Primary sources

https://codeberg.org/oHn017ss3ad1/qemu-esp32-wireless/src/commit/a94119a3a52c03c14b7553916965c316449e0623/README.md