Quickstart
BW16 Dual-Band Wi-Fi Security Firmware Setup & Operations
Technical documentation for the R4TKN BW16 (RTL8720DN) dual-band Wi-Fi security testing firmware featuring a 1.8-inch TFT display interface.

- 1
What you need
Before installing and operating the R4TKN BW16 Dual-Band Security Testing Firmware, verify that you have the required hardware components and testing environment:
- BW16 (RTL8720DN) development board with dual-band antenna support
- 1.8-inch ST7735 SPI TFT color display module
- 3-button input module or individual tactile switches for navigation
- Regulated 5V USB power source or 3.7V LiPo battery (V3 battery monitoring support)
- MicroSD card (optional, for storage slot operations)
- Authorized wireless testing environment or lab framework
- 2
Step 1 — Unbox
Unpack your BW16 development hardware and display accessories. Inspect the board for physical integrity, ensuring the RTL8720DN dual-band RF shield, IPEX antenna connector, MicroSD card slot, and header pins are undamaged. Verify that no bridge solder or stray wire fragments bridge adjacent GPIO pins.
- 3
Step 2 — Power on
Supply power to the system via the USB interface or connect a 3.7V lithium battery to the dedicated power terminals. Upon initial power-up, the ST7735 1.8-inch TFT screen will initialize and display the splash screen followed by the main operational system status, which includes the V3 battery level indicator.
- 4
Step 3 — Connect
Ensure correct wiring between the RTL8720DN module and peripheral hardware:
- Display Wiring: Connect the ST7735 SPI pins (CS, DC, RES, SDA, SCL) to the designated SPI lines on the BW16 header.
- Navigation Controls: Map the 3-button control system to the primary GPIO input pins configured with internal pull-up resistors.
- RF Antenna: Attach a compatible dual-band (2.4GHz / 5GHz) antenna to the IPEX connector to ensure adequate signal range across both frequency bands.
- 5
Step 4 — First run
Navigate the graphical user interface using the 3-button control system:
- Mode Selection: Use the direction controls to toggle between 2.4GHz and 5GHz dual-band testing subroutines.
- Network Discovery: Execute target discovery mode to scan for nearby access points or client devices.
- Beacon Testing: Access the beacon generation menu to execute random SSID generation and customizable beacon transmission tests.
- System Diagnostics: Review real-time telemetry, battery status (V3), and active firmware integration state (compatible with HexFi and NeoCAT firmware ecosystems).
- 6
Tips
- Power Quality: High-power 5GHz RF transmissions produce current spikes. Use a power supply capable of providing clean, uninterrupted power to prevent brownout resets.
- Antenna Matching: Always operate the firmware with a dual-band rated antenna connected to prevent standing wave issues on the RF front-end.
- Educational Compliance: Execute tests strictly within isolated lab environments or on networks where explicit written authorization has been granted.
- 7
Troubleshooting
If you experience unexpected behavior, consult the following steps:
- Display Output Blank or Distorted: Re-check SPI wiring for the ST7735 screen. Ensure DC and RES lines are firmly attached to the corresponding hardware GPIOs.
- Button Inputs Unresponsive: Verify button signal connections and ensure common ground is shared between the button array and the BW16 board.
- 5GHz Operations Failing: Confirm that the connected antenna supports the 5GHz spectrum and that the power rail can maintain voltage stability during full RF output.
- System Resets on Transmit: Check battery charge level or swap the USB cable. Insufficient current capacity causes internal power management ICs to reset during peak broadcast modes.

Last updated
15 Aug 2026