AntiHunter DIGI Node

Website · Discord · GitHub

Description

AntiHunter is distributed WiFi and BLE signal intelligence & attack detection. Controlled from its own WiFi, or using Meshtastic radio commands.

Vibration based scans and self-destruct option. Defensive by design. Knows the devices and networks around you, alerts when it matters. Integrates as far or close as you choose.

Swap the S3 for an ESP32-C5 and it scans 2.4 + 5 GHz WiFi 6 (beta)

No account, no subscription. Open source.

Featured in Seeed Studio's Best 20 XIAO Projects of 2025.

---

Know the devices nearby

• Device scanner — Every WiFi AP and BLE device in range: signal, channel, name, vendor
• Probe capture — The network names phones broadcast looking for home, work, past locations
• Ghost SSIDs — Flags probed networks no AP answers — a device's location history, pulled from the air
• Baseline anomaly — Learns what's normal, alerts on anything new, missing, or returned. 100K devices on SD
• Target watchlist — Instant alert when a specific MAC, OUI, SSID, or identity ID appears
• MAC correlation — Links rotating addresses back to one persistent identity (experimental)
• Packet capture — Pcap to SD: WiFi with full radiotap (channel, rate, RSSI), BLE as link-layer PDUs for Wireshark (beta)

Catch attacks, name the tool

• Sentinel — Detects WiFi attacks and names the tool: bettercap, mdk4, aireplay-ng, Marauder, Flipper, hcxdumptool, Bruce, more. Connected AP clients, mesh command history & jamming detection (beta)
• Attack coverage — Deauth floods, evil twins, rogue APs, KARMA traps, PMKID harvest, SAE DoS, beacon/auth/assoc floods
• CVE detection — KRACK, FragAttacks, SSID Confusion, Dragonblood

Cross-validation — On a mesh, nodes cross-check detections. Configurable threshold; outlier rejection at 5+ reports

Sense motion, no camera

WiFi motion sensing (beta) — The same CSI sensing ISPs sell as home motion but don't name. Reads how the room's WiFi bends around a moving body. Works in the dark, behind a closed door, in a room you've left. Listen-only, transmits nothing. No calibration, no baseline

Track drones

• Drone Remote ID — Aircraft ID, altitude, speed, heading, and the pilot's GPS position — WiFi and BLE
• Spoof check — Two GPS nodes flag a drone lying about its position

Locate signals

Triangulation — 3+ GPS nodes locate a target on the map. Kalman-filtered, confidence-scored, Google Maps pin (experimental)

Run it your way

• Web dashboard — Full control from the node's own WiFi at 192.168.4.1
• Mesh commands — Text commands to one node or @ALL over LoRa, miles away, no internet
• HTTP/JSON API — 155 routes for scanning, configuration, device data, and log access
• Data Explorer — Browse all findings, device history, and scan data from the web UI
• Meshtastic app — Pair the radio to your phone over Bluetooth. Send commands, receive detections from anywhere in mesh range
• TAK / ATAK — Node traffic bridges to the Team Awareness Kit via Meshtastic
• MQTT — Mesh traffic forwarded to a broker for logging, Home Assistant, or Node-RED via Meshtastic
• Serial — Direct UART for scripting and integration
• Headless — No WiFi, no web page. Mesh and serial only — zero RF from the node

Protect the node

Vibration trigger — A bump starts a scan you choose, or wipes the SD and drops a decoy weather-station config

Privacy mode — One tap redacts MACs, GPS, and SSIDs before sharing a screenshot

Battery saver — 80 MHz CPU, light sleep, mesh heartbeat only

Allowlist — Global device allowlist, ignored across all scan modes

Self-recovery — Fixes a broken config on boot

---

Built for

Pentesters — Passive recon of a target space. Every device, every probe, every network name

Blue teams — Continuous monitoring with tool-level attribution when someone attacks your network

Counter-UAS — Drone Remote ID collection with pilot position, fed to Command Center or TAK

Event security — Baseline a venue, get alerted on new or suspicious devices

OPSEC — Know what's around you. Vibration wipe. Decoy config. Headless mode

---

How it compares

A Dedrone fixed site lists at $58,000. AntiHunter puts detection on a $250 node — battery-powered, LoRa meshed, no infrastructure, no fees.

	AntiHunter	Dedrone	Bastille	WiFi Pineapple	ESP32 Marauder
Signals	WiFi, BLE, drone ID, attacks	Drone RF	WiFi, BLE, cellular	WiFi	WiFi, BLE
Names the attacker's tool	Yes	No	No	No	No
Battery / field deploy	Yes, 18650 or solar	No, mains	No, mains	No	Yes, handheld
Mesh, no infrastructure	LoRa, miles	No	No	No	No
Open source	Yes: firmware, STLs, C2	No	No	Partial	Yes
Recurring fees	None	License	Subscription	None	None
Price	$180-350	$58,000/site	Enterprise quote	~$120–300	Free–$170

---

Command Center

(separate, free, open source)

The Command Center puts every node on one live map: drone tracks, geofence alarms, FAA lookup, ADS-B/ACARS, TAK bridge, MQTT federation, RBAC + 2FA, CSV/GeoJSON export. Self-hosted on your hardware.

---

Tiers

Run the PCB, build your own from parts or buy it assembled.

What's in the box

• Tier 3: Core (soldered PCB) & factory antennas
• Tier 2: All parts except GPS antenna, solder/assemble yourself
• Tier 1: Fully built & assembled DIGI node + GPS active helix antenna

	3: Soldered Core	2: Parts Kit	1: Fully Assembled
Price	$180	$250	$350
Ships	Core soldered, tested, no assembly required	Parts kit, build yourself	Built, tested, ready to deploy
You add	Power (USB)	Batteries, Active GPS SMA Antenna	Batteries

Tier 1 Case

A one-piece design which eliminates potential leaks from the bonding process. As a tradeoff, a minimal amount of support scaring can sometimes appear on the GPS antenna base:

• Tier 1 ships with the one-piece case.
• Tier 2 kit comes with a two-piece design that you bond together yourself.

We do this to ensure no heat inset defects. Send a message before ordering to request a different case.

CORE COMPONENTS

• 1x DIGI Node PCB (2 layer, copper ground plane)
• 1x Seeed Studio XIAO ESP32-S3
• 1x Heltec WiFi LoRa 32 V3.2
• 1x ATGM336H GPS Module
• 1x Micro SD SDHC TF Module
• 1x SD Card (FAT32, 8GB)
• 1x SW-420 Vibration Sensor
• 1x DS3231 Real Time Clock Module

CONNECTORS & FASTENERS

• 3-5x JST 2.54 2-Pin Terminals (Tier 1 only requires 3)
• 10x M3 Mounting Heat Inserts
• 4x M2 Mounting Heat Inserts (power board)
• 2x JST Power Cable (for switch & power board)
• 10x M3x6mm Hex Screws (for enclosure, PCB)
• 2x M2x6 Hex screws (power board)
• 2x M3x15mm Brass Standoffs
• 1x 1/4" Tripod Insert

ANTENNAS & WIRING

• 3x U.FL to SMA Pigtail Cable (SMA bulkhead, 10-20cm)
• 1x 6dBi Antenna 2.4GHz (WiFi/BLE)
• 1x 6dBi Antenna LoRa
• 1x Active GPS Antenna (L1, SMA) Tier 1 only

POWER & THERMAL

• 1x Type-C Female USB Waterproof Jack Connector
• 1x KSD9700 Normally Open Thermal Wire Sensor (40C)
• 1x 30mm 5V Fan - Dual bearing, 2.54 JST (7-10mm)
• 1x 3-Pin Mini On/Off Switch w/water resistant cap
• 1x Type-C 15W 3A 5V Fast Charge UPS Power Supply (2S 18650 Charger Module DC-DC Step Up Booster Converter)

ENCLOSURE

• 1x Enclosure, 3D printed with TPU seal set (GPS antenna seat, USB plug, front and rear cover gaskets)

---

Specs

RF	2.4 GHz WiFi b/g/n + BLE. 2.4 + 5 GHz with ESP32-C5
MCU	Seeed XIAO ESP32-S3
Mesh	Heltec WiFi LoRa 32 V3.2, Meshtastic
GPS	ATGM336H + DS3231 RTC
Tamper	SW-420 vibration sensor
Storage	micro-SD, FAT32, 8 GB included
Power	USB-C / 18650 UPS / 5 V solar
Board	82 mm circular, 2-layer, M3 + 1/4" tripod mount
Firmware	Open source (AGPL-3.0), browser flasher, stable + beta channels

Note: Sentinel, WiFi motion sensing, and packet capture are beta. Perfect triangulation with this hardware is impossible, but still very accurate.

---

Warranty

• Assembled & Soldered Core — Ship bench-tested, guaranteed functional on arrival. Dead-on-arrival replaced free within 14 days of delivery. Seller workmanship — soldering and assembly — covered 90 days.
• Parts Kit — Individual parts guaranteed against manufacturing defect. Missing or dead-on-arrival parts replaced free within 14 days. Assembled function is the builder's responsibility, not covered.
• Not covered— Incorrect power input, voltage, or polarity; water ingress, environmental exposure, misuse, or modification; any failure from buyer assembly. The node requires regulated 5V. Powering it outside spec is user error, not a defect.
• Remedy is repair or replacement of the affected part at the seller's discretion, capped at the purchase price. No liability for incidental or consequential damages. Firmware as-is under AGPL-3.0.

---

Links

• Web flasher & config tool
• Firmware + docs
• AH Command Center Software
• Assembly manual + STLs
• BOM with links and photos.
• Operators Guide
• Deployment Notes by Tier
• Bare PCB

Detection only — it listens, it doesn't attack. Lawful use only. Disclaimer..

*Pictured solar panels and tripods not included *

• Dispatch is typically 1–3 business days when in stock. • Ships within the contiguous 48 US states via USPS Ground Advantage or Priority Mail • Every shipment includes a tracking number and $100 insurance via USPS • PCBs are bagged, sealed, and shipped in a bubble mailer. Orders of 6 or more ship boxed via USPS Priority Mail. • Parts kits are bagged, hex-paper padded and boxed. • Soldered units ship in ESD bags.

Note: Be sure to include your unit/apartment number if applicable. USPS returns packages if the address or name are not in their system.