AntiHunter DIGI Node

Distributed wireless detection — WiFi, BLE, drones, LoRa mesh

Website · Discord · GitHub

Description

AntiHunter is distributed WiFi and BLE intelligence & attack detection. Controlled from its own WiFi, or using Meshtastic radio commands. Vibration based scans and self-destruct option. Defensive by design. Knows the devices and networks around you, alerts when it matters. Integrates as far or close as you choose.

Swap the S3 for an ESP32-C5 and it scans 2.4 + 5 GHz WiFi 6.

No cloud, no account, no subscription. Open source (AGPL-3.0). Featured in Seeed Studio's Best 20 XIAO Projects of 2025.

Know the devices nearby

Device scanner — Every WiFi AP and BLE device in range: signal, channel, name, vendor Probe capture — The network names phones broadcast looking for home, work, past locations Ghost SSIDs — Flags probed networks no AP answers — a device's location history, pulled from the air Baseline anomaly — Learns what's normal, alerts on anything new, missing, or returned. 100K devices on SD Target watchlist — Instant alert when a specific MAC, OUI, SSID, or identity ID appears MAC correlation — Links rotating addresses back to one persistent identity (experimental)

Catch attacks, name the tool

Sentinel — Detects WiFi attacks and names the tool: bettercap, mdk4, aireplay-ng, Marauder, Flipper, hcxdumptool, Pwnagotchi (beta) Attack coverage — Deauth floods, evil twins, rogue APs, KARMA traps, PMKID harvest, SAE DoS, beacon/auth/assoc floods CVE detection — KRACK, FragAttacks, SSID Confusion, Dragonblood Cross-validation — On a mesh, nodes cross-check detections. Configurable threshold; outlier rejection at 5+ reports

Track drones

Drone Remote ID — Aircraft ID, altitude, speed, heading, and the pilot's GPS position — WiFi and BLE Spoof check — Two GPS nodes flag a drone lying about its position

Locate signals

Triangulation — 3+ GPS nodes locate a target on the map. Kalman-filtered, confidence-scored, Google Maps pin (experimental)

Run it your way

Web dashboard — Full control from the node's own WiFi at 192.168.4.1 Mesh commands — Text commands to one node or @ALL over LoRa, miles away, no internet HTTP/JSON API — 155 routes for scanning, configuration, device data, and log access Data Explorer — Browse all findings, device history, and scan data from the web UI Meshtastic app — Pair the radio to your phone over Bluetooth. Send commands, receive detections from anywhere in mesh range TAK / ATAK — Node traffic bridges to the Team Awareness Kit via Meshtastic MQTT — Mesh traffic forwarded to a broker for logging, Home Assistant, or Node-RED via Meshtastic Serial — Direct UART for scripting and integration Headless — No WiFi, no web page. Mesh and serial only — zero RF from the node

Protect the node

Vibration trigger — A bump starts a scan you choose, or wipes the SD and drops a decoy weather-station config Privacy mode — One tap redacts MACs, GPS, and SSIDs before sharing a screenshot Battery saver — 80 MHz CPU, light sleep, mesh heartbeat only Allowlist — Global device allowlist, ignored across all scan modes Self-recovery — Fixes a broken config on boot

Built for

Pentesters — Passive recon of a target space. Every device, every probe, every network name Blue teams — Continuous monitoring with tool-level attribution when someone attacks your network Counter-UAS — Drone Remote ID collection with pilot position, fed to Command Center or TAK Event security — Baseline a venue, get alerted on new or suspicious devices OPSEC — Know what's around you. Vibration wipe. Decoy config. Headless mode

How it compares

A Dedrone fixed site lists at $58,000. AntiHunter puts detection on a $250 node — battery-powered, LoRa meshed, no infrastructure, no fees.

Command Center (separate, free, open source)

The Command Center puts every node on one live map: drone tracks, geofence alarms, FAA lookup, ADS-B/ACARS, TAK bridge, MQTT federation, RBAC + 2FA, CSV/GeoJSON export. Self-hosted on your hardware.

Tiers

Same board, same firmware. All tiers include an 8 GB microSD card.

Bare PCB is a separate listing. LoRa region-locked: 868 EU / 915 US / 923 Asia. Needs regulated 5 V.

BOM with links and photos.

Specs

Sentinel is beta. MAC correlation and triangulation are experimental.

Links

• Browser flasher (Chrome/Edge)
• Firmware + docs
• Command Center
• Build manual + STLs

Detection only — it listens, it doesn't attack. Lawful use only. Disclaimer.

• Dispatch is typically 1–3 business days when in stock.

• Ships within the contiguous 48 US states via USPS Ground Advantage or Priority Mail

• Every shipment includes a tracking number and $100 insurance via USPS

• PCBs are bagged, sealed, and shipped in a bubble mailer. Orders of 6 or more ship boxed via USPS Priority Mail.

• Parts kits/assembled units are bagged, hex-paper padded and ship boxed. Assembled units ship in ESD bags.

Note: Be sure to include your unit/apartment number if applicable. USPS returns packages if the address or name are not in their system.