Title: Storage Layout
Description: Where GhostESP saves captures, reports, applications, and settings on the SD card.
URL: /v2.1/getting-started/storage-layout/
Version: v2.1
Section: Getting Started
Search index: /search-index.json

# Storage Layout

> Where GhostESP saves captures, reports, applications, and settings on the SD card.

## On this page

- [Find Your Results](#find-your-results)
- [Files You Can Add](#files-you-can-add)
- [Internal Folders](#internal-folders)
- [Privacy](#privacy)

---

GhostESP keeps all user-visible SD-card data below /mnt/ghostesp/ in
firmware, which is the ghostesp folder at the root of the card in a card
reader. This layout is stable so results are easy to locate and scripts can
rely on it.
## Find Your Results
What you saved |
Folder on the card |
File type |
Packet capture |
ghostesp/pcaps/ |
Standard .pcap |
Scan report |
ghostesp/scans/ |
Text or CSV |
Radio sweep |
ghostesp/sweeps/ |
sweep_N.csv |
Wardriving/GPS data |
ghostesp/gps/ |
WiGLE-compatible CSV |
Motion snapshot |
ghostesp/captures/ |
motion_N.jpg |
Ghostchi capture/history |
ghostesp/ghostchi/pcaps/, ghostesp/ghostchi/sessions/ |
.pcap, .log |
NFC, IR, or SubGHz save |
ghostesp/nfc/, ghostesp/infrared/, ghostesp/subghz/ |
.nfc, .ir, .sub |
Settings backup |
ghostesp/settings_backup.json |
Versioned JSON |
The folders for NFC, IR, SubGHz, audio, and BadUSB are created only when the
installed build supports the matching feature.
## Files You Can Add
Add this |
Put it here |
Evil Portal HTML and assets |
ghostesp/evil_portal/portals/ |
Native SD apps |
ghostesp/apps/ |
GhostScript packages |
ghostesp/scripts/ |
Theme packages |
ghostesp/themes/ |
## Internal Folders
Do not rely on app_cache/ or downloads/ for backups; firmware can replace
their contents. appdata/<app_id>/ and scriptdata/ contain persistent data
owned by an app or script. Ghostchi’s learn.bin and state.bin are also
firmware-private state rather than portable exports.
## Privacy
evil_portal/portal_creds_N.txt, evil_portal/portal_keystrokes_N.txt, DNS
logs, packet captures, and radio/NFC saves can contain sensitive information.
The SD card is not encrypted. Review these files before sharing the card or
the device.
For the complete developer and compatibility contract, see
[STORAGE_CONTRACT.md](https://github.com/spookyorigin/Ghost_ESP/blob/main/STORAGE_CONTRACT.md).