Oui-Spy
ESP32-S3 based multi-mode BLE detection and security research tool with integrated piezo buzzer, MMCX antenna connector, and seven swappable firmware modes for surveillance detection, drone tracking, and RF direction finding.
$85.00
Tap any value to browse matching devices
Specifications
Components
Espressif ESP32-S3 dual-core Xtensa LX7 SoC with WiFi 4, BLE 5.0, and USB OTG
PWM-driven piezoelectric buzzer for variable-frequency audio alerts and proximity notification tones
Addressable RGB LED for status indication and firmware mode identification
Bus Interfaces
Oui-Spy
The Oui-Spy is an ESP32-S3 based Bluetooth Low Energy detection and security research tool created by Colonel Panic's Hack Shack. Designed as both a functional security device and an artistic PCB, it enables tracking of specific OUIs (Organizationally Unique Identifiers) and MAC addresses through BLE scanning with audio alerts via a PWM-driven piezo buzzer.
Key Features
- Multi-mode operation via the Unified Blue firmware — switch between seven detection modes without reflashing
- WiFi boot selector at
192.168.4.1for easy mode switching (SSID:oui-spy, password:ouispy123) - MAC randomization on every boot for operational privacy
- MMCX external antenna connector for directional antenna use in foxhunting and direction finding
- Built-in 2.4GHz ceramic antenna for everyday portable use
- Addressable NeoPixel LED for visual mode identification
- Mode-specific audio cues with distinct boot signatures per firmware mode
- Persistent mode memory across power cycles
Firmware Modes
1. Unified Blue (Recommended)
Single firmware combining all four core modes with WiFi-based boot selector. Hold BOOT button for 2 seconds to return to mode selection menu.
2. Detector Mode
Multi-target BLE scanner with OUI filtering. Detects devices by MAC prefix/OUI with smart cooldown to prevent alert spam. Different beep patterns distinguish new vs. re-detected devices.
3. Foxhunter Mode
Single-target proximity tracker using real-time RSSI analysis. Variable-frequency proximity beeping optimized for directional antenna triangulation — closer targets produce faster beeps.
4. Flock-You Mode
Surveillance device detector for Flock Safety and Raven cameras. Features GPS wardriving via browser Geolocation API, 200-device storage capacity, and KML/CSV/JSON export for Google Earth visualization. Includes a Flask desktop companion app.
5. Sky-Spy Mode
Drone Remote ID detection system supporting dual WiFi + BLE scanning per ASTM F3411 standard. Extracts GPS coordinates, tracks up to 8 drones simultaneously, and outputs JSON serial data for visualization.
6. UniPwn Mode
Unitree robot exploitation system with BLE command injection for Go2, G1, H1, and B2 robots. Features 7-step AutoPwn automation with AES-CFB128 encryption support.
7. Remote-ID-Spoofer
WiFi Remote ID simulator capable of spoofing up to 20 simultaneous drones with realistic flight parameters including altitude drift, GPS jitter, and heading wobble.
Hardware Specs
| Spec | Value |
|---|---|
| MCU | ESP32-S3 dual-core Xtensa LX7 @ 240MHz |
| RAM | 512KB SRAM |
| PSRAM | 8MB |
| Flash | 8MB |
| WiFi | 802.11 b/g/n |
| Bluetooth | BLE 5.0 |
| USB | USB-C 2.0 |
| Antenna | Built-in 2.4GHz ceramic + MMCX for external |
| Audio | Integrated piezo buzzer (PWM) |
| LED | Addressable NeoPixel RGB |
| GPIO | 11 pins @ 3.3V logic |
| Power | 5V via USB-C |
3D Printable Accessories
Community-designed cases and accessories by out0fstep and Nitekry D Paul:
- OUI-SPY Case with External Antenna Hole
- OUI-SPY Travel Case
- OUI-SPY Keychain
- Mini Yagi Case (for 2.4GHz directional antenna)
- OUI-SPY SMA Spacer
- OUI-SPY Tacti-kewl Yagi Grip (Picatinny rail compatible)
Product Variants
- Oui-Spy ($85) — Complete assembled board, ready to use
- Oui-Spy PCBs Only ($25) — 2 PCBs per order (front and back), DIY assembly
- Oui-Spy Flexible Patch ($60) — Clear flexible PCB patch with wearable punk/metal aesthetics
- Oui-Spy Earring Set ($60) — 2 artistic PCBs with XIAO ESP32-S3 modules and 100mAh batteries
- Oui-Spy Skull Badge/Pendant ($35) — Wearable badge/pendant with full BLE detection
Getting Started
- Purchase the board from Tindie or colonelpanic.tech
- Flash the Unified Blue firmware via USB-C
- Power on and connect to the
oui-spyWiFi network - Navigate to
192.168.4.1in your browser - Select your detection mode
- Hold the BOOT button for 2 seconds to return to mode selection
Community & Coverage
- Featured on Hackaday: "Detecting Surveillance Cameras With The ESP32"
- Hackster.io project showcase with 2,941+ views
- Hackster.io news: "Colonel Panic's OUI-SPY Is a Slick Bluetooth Low Energy Scanner"
Important Notes
All current firmware modes are passive and detection-only — no transmission or exploitation occurs during normal operation. This is the "Blue Edition" focused on defensive reconnaissance. A "Red Edition" with offensive capabilities is in development.
Use Cases
5BLE Security Research
Bluetooth Low Energy scanning, tracking, and security analysis for detecting and monitoring BLE devices.
Surveillance Detection
Detecting and locating surveillance devices such as Flock Safety cameras, license plate readers, and other monitoring equipment.
RF Direction Finding
Radio frequency direction finding and signal triangulation using directional antennas and RSSI analysis.
Counter-Surveillance
Privacy-focused tools for detecting and avoiding surveillance infrastructure and tracking devices.
Drone Detection
Detecting drones via WiFi and BLE Remote ID broadcasts (ASTM F3411) for airspace awareness and security.
Resources
Where to Buy
Explore more of the directory — popular use cases, firmware, and specs to browse next.
