AntiHunter DIGI Node

Website · Discord · GitHub

Description

AntiHunter is distributed Wi-Fi and BLE signal intelligence & attack detection. Controlled from its own Wi-Fi, or using Meshtastic radio commands.

Vibration based scans and self-destruct option. Defensive by design. Knows the devices and networks around you, alerts when it matters. Integrates as far or close as you choose.

Swap the S3 for an ESP32-C5 and it scans 2.4 + 5 GHz Wi-Fi 6 (beta)

No account, no subscription. Open source.

Featured in Seeed Studio's Best 20 XIAO Projects of 2025.

---

Know the devices nearby

• Device scanner — Every Wi-Fi AP and BLE device in range: signal, channel, name, vendor
• Probe capture — The network names phones broadcast looking for home, work, past locations
• Ghost SSIDs — Flags probed networks no AP answers — a device's location history, pulled from the air
• Baseline anomaly — Learns what's normal, alerts on anything new, missing, or returned. 100K devices on SD
• Target watchlist — Instant alert when a specific MAC, OUI, SSID, or identity ID appears
• MAC correlation — Links rotating addresses back to one persistent identity (experimental)
• Packet capture — Pcap to SD: Wi-Fi with full radiotap (channel, rate, RSSI), BLE as link-layer PDUs for Wireshark (beta)

Catch attacks, name the tool

• Sentinel — Detects Wi-Fi attacks and names the tool: bettercap, mdk4, aireplay-ng, Marauder, Flipper, hcxdumptool, Bruce, more. Connected AP clients, mesh command history & jamming detection (beta)
• Attack coverage — Deauth floods, evil twins, rogue APs, KARMA traps, PMKID harvest, SAE DoS, beacon/auth/assoc floods
• CVE detection — KRACK, FragAttacks, SSID Confusion, Dragonblood

Cross-validation — On a mesh, nodes cross-check detections. Configurable threshold; outlier rejection at 5+ reports

Track drones

• Drone Remote ID — Aircraft ID, altitude, speed, heading, and the pilot's GPS position — Wi-Fi and BLE
• Spoof check — Two GPS nodes flag a drone lying about its position

Locate signals

Triangulation — 3+ GPS nodes locate a target on the map. Kalman-filtered, confidence-scored, Google Maps pin (experimental)

Get to know your RF neighborhood

Baseline Anomoly Detection mode measures what's around. Alerts on anything new, moved within a range you set, or devices that left the area.

Sense motion, no camera

Wi-Fi motion sensing (beta) — CSI motion detection thats uses a passive read of what's already in the air. Reads how the room's Wi-Fi bends around a moving body. Works through walls as documented in the WiDetect paper. No calibration, no baseline

Run it your way

• Web dashboard — Full control from the node's own Wi-Fi at 192.168.4.1
• Mesh commands — Text commands to one node or @ALL over LoRa, miles away, no internet
• HTTP/JSON API — 155 routes for scanning, configuration, device data, and log access
• Data Explorer — Browse all findings, device history, and scan data from the web UI
• Meshtastic app — Pair the radio to your phone over Bluetooth. Send commands, receive detections from anywhere in mesh range
• TAK / ATAK — Node traffic bridges to the Team Awareness Kit via Meshtastic
• MQTT — Mesh traffic forwarded to a broker for logging, Home Assistant, or Node-RED via Meshtastic
• Serial — Direct UART for scripting and integration
• Headless — No Wi-Fi, no web page. Mesh and serial only — zero RF from the node

Protect the node

Vibration trigger — A bump starts a scan you choose, or wipes the SD and drops a decoy weather-station config

Privacy mode — One tap redacts MACs, GPS, and SSIDs before sharing a screenshot

Battery saver — 80 MHz CPU, light sleep, mesh heartbeat only

Allowlist — Global device allowlist, ignored across all scan modes

Self-recovery — Fixes a broken config on boot

---

Built for

Pentesters — Passive recon of a target space. Every device, every probe, every network name

Blue teams — Continuous monitoring with tool-level attribution when someone attacks your network

Counter-UAS — Drone Remote ID collection with pilot position, fed to Command Center or TAK

Event security — Baseline a venue, get alerted on new or suspicious devices

OPSEC — Know what's around you. Vibration wipe. Decoy config. Headless mode

---

How it compares

A Dedrone fixed site lists at $58,000. AntiHunter puts detection on a $250 node — battery-powered, LoRa meshed, no infrastructure, no fees.

	AntiHunter	Dedrone	Bastille	Wi-Fi Pineapple	ESP32 Marauder
Signals	Wi-Fi, BLE, drone ID, attacks	Drone RF	Wi-Fi, BLE, cellular	Wi-Fi	Wi-Fi, BLE
Names the attacker's tool	Yes	No	No	No	No
Battery / field deploy	Yes, 18650 or solar	No, mains	No, mains	No	Yes, handheld
Mesh, no infrastructure	LoRa, miles	No	No	No	No
Open source	Yes: firmware, STLs, C2	No	No	Partial	Yes
Recurring fees	None	License	Subscription	None	None
Price	$180-350	$58,000/site	Enterprise quote	~$120–300	Free–$170

---

Command Center

(separate, free, open source)

The Command Center puts every node on one live map: drone tracks, geofence alarms, FAA lookup, ADS-B/ACARS, TAK bridge, MQTT federation, RBAC + 2FA, CSV/GeoJSON export. Self-hosted on your hardware.

---

Tiers

Run the PCB, build your own from parts or buy it assembled.

What's in the box

• Tier 3: Core (soldered PCB) & factory antennas
• Tier 2: All parts except GPS antenna, solder/assemble yourself
• Tier 1: Fully built & assembled DIGI node + GPS active helix antenna

	3: Soldered Core	2: Parts Kit	1: Fully Assembled
Price	$180	$250	$350
Ships	Core soldered, tested, no assembly required	Parts kit, build yourself	Built, tested, ready to deploy
You add	Power (USB)	Batteries, Active GPS SMA Antenna	Batteries

Tier 1 Case

A one-piece design which eliminates potential leaks from the bonding process. As a tradeoff, a minimal amount of support scaring can sometimes appear on the GPS antenna base:

• Tier 1 ships with the one-piece case.
• Tier 2 kit comes with a two-piece design that you bond together yourself.

We do this to ensure no heat inset defects. Send a message before ordering to request a different case.

CORE COMPONENTS

• 1x DIGI Node PCB (2 layer, copper ground plane)
• 1x Seeed Studio XIAO ESP32-S3
• 1x Heltec Wi-Fi LoRa 32 V3.2
• 1x ATGM336H GPS Module
• 1x Micro SD SDHC TF Module
• 1x SD Card (FAT32, 8GB or 16GB)
• 1x SW-420 Vibration Sensor
• 1x DS3231 Real Time Clock Module

CONNECTORS & FASTENERS

• 3-5x JST 2.54 2-Pin Terminals (Node requires 3)
• 10x M3 Mounting Heat Inserts
• 4x M2 Mounting Heat Inserts (power board)
• 2x JST Power Cable (for switch & power board)
• 10x M3x6mm Hex Screws (for enclosure, PCB)
• 2x M2x6 Hex screws (power board)
• 2x M3x15mm Brass Standoffs
• 1x 1/4" Tripod Insert

ANTENNAS & WIRING

• 3x U.FL to SMA Pigtail Cable (SMA bulkhead, 10-20cm)
• 1x Antenna 2.4 & 5GHz (Wi-Fi/BLE)
• 1x Antenna LoRa
• 1x Active GPS Helix Antenna (L1, SMA) Tier 1 only

POWER & THERMAL

• 1x Type-C Female USB Waterproof Jack Connector
• 1x KSD9700 Normally Open Thermal Wire Sensor (40C)
• 1x 30mm 5V Fan - Dual bearing, 2.54 JST (7-10mm)
• 1x 3-Pin Mini On/Off Switch w/water resistant cap
• 1x Type-C 15W 3A 5V Fast Charge UPS Power Supply (2S 18650 Charger Module DC-DC Step Up Booster Converter)

ENCLOSURE

• 1x Enclosure, 3D printed with TPU seal set (GPS antenna seat, USB plug, front and rear cover gaskets)

---

Specs

RF	2.4 GHz Wi-Fi b/g/n + BLE. 2.4 + 5 GHz with ESP32-C5
MCU	Seeed XIAO ESP32-S3
Mesh	Heltec Wi-Fi LoRa 32 V3.2, Meshtastic
GPS	ATGM336H + DS3231 RTC
Tamper	SW-420 vibration sensor
Storage	micro-SD, FAT32, 8/16 GB included
Power	USB-C / 18650 UPS / 5 V solar
Board	82 mm circular, 2-layer, M3 + 1/4" tripod mount
Firmware	Open source (AGPL-3.0), browser flasher, stable + beta channels

Note: Sentinel, Wi-Fi motion sensing, and packet capture are beta. Perfect triangulation with this hardware is impossible, but still very accurate.

---

Warranty

• Assembled & Soldered Core — Ship bench-tested, guaranteed functional on arrival. Dead-on-arrival replaced free within 14 days of delivery. Seller workmanship — soldering and assembly — covered 90 days.
• Parts Kit — Individual parts guaranteed against manufacturing defect. Missing or dead-on-arrival parts replaced free within 14 days. Assembled function is the builder's responsibility, not covered.
• Not covered— Incorrect power input, voltage, or polarity; water ingress, environmental exposure, misuse, or modification; any failure from buyer assembly. The node requires regulated 5V. Powering it outside spec is user error, not a defect.
• Remedy is repair or replacement of the affected part at the seller's discretion, capped at the purchase price. No liability for incidental or consequential damages. Firmware as-is under AGPL-3.0.

---

Links

• Web flasher & config tool
• Firmware + docs
• AH Command Center Software
• Assembly manual + STLs
• BOM with links and photos.
• Operators Guide
• Deployment Notes by Tier
• Bare PCB

Notes

Detection only — it listens, it doesn't attack. Lawful use only. Disclaimer..

• Pictured solar panels and tripods not included.
• Included SD card size can vary 8 or 16GB with current supply chain

Runs AntiHunter firmware — patent pending, U.S. 64/151,838

• Dispatch is typically 1–3 business days when in stock. • Ships within the contiguous 48 US states via USPS Ground Advantage or Priority Mail • Every shipment includes a tracking number and $100 insurance via USPS • PCBs are bagged, sealed, and shipped in a bubble mailer. Orders of 6 or more ship boxed. • Parts kits are bagged, hex-paper padded and boxed. • Soldered units ship in ESD bags.

Note: Be sure to include your unit/apartment number if applicable. USPS returns packages if the address or name are not in their system.