# Oui-Spy

> ESP32-S3 based multi-mode BLE detection and security research tool with integrated piezo buzzer, MMCX antenna connector, and seven swappable firmware modes for surveillance detection, drone tracking, and RF direction finding.

## Quick Facts

- **Brand:** Colonel Panic's Hack Shack
- **Board Type:** security-tool
- **Price:** ~$85
- **Product Readiness:** consumer
- **CPU:** ESP32-S3
- **CPU Architecture:** Xtensa LX7
- **CPU Cores:** 2
- **RAM:** 512KB SRAM
- **PSRAM:** 8MB
- **Flash:** 8MB
- **USB:** USB-C 2.0
- **Power:** 5V
- **Operating Voltage:** 3.3V
- **Antenna:** MMCX

## Connectivity

- **Wifi:** 802.11 b/g/n
- **Bluetooth:** BLE 5.0

## Open Source

- **Firmware:** Yes
- **Schematics:** No
- **PCB Layout:** No

## Compatible Firmware

arduino, platformio, esp-idf

## Use Cases

- ble-security-research
- surveillance-detection
- rf-direction-finding
- counter-surveillance
- drone-detection

## Components

- **ESP32-S3** (mcu): Espressif ESP32-S3 dual-core Xtensa LX7 SoC with WiFi 4, BLE 5.0, and USB OTG — [Datasheet](https://openhardware.directory/r?to=https%3A%2F%2Fwww.espressif.com%2Fsites%2Fdefault%2Ffiles%2Fdocumentation%2Fesp32-s3_datasheet_en.pdf&ref=openhardware.directory&product=oui-spy&source=md-export)
- **piezo-buzzer** (buzzer): PWM-driven piezoelectric buzzer for variable-frequency audio alerts and proximity notification tones — [Datasheet](https://openhardware.directory/r?to=https%3A%2F%2Fwww.murata.com%2Fen-us%2Fproducts%2Fsound%2Fpiezoelectric-buzzers&ref=openhardware.directory&product=oui-spy&source=md-export)
- **WS2812B** (led-driver): Addressable RGB LED for status indication and firmware mode identification — [Datasheet](https://openhardware.directory/r?to=https%3A%2F%2Fcdn-shop.adafruit.com%2Fdatasheets%2FWS2812B.pdf&ref=openhardware.directory&product=oui-spy&source=md-export)

## Protocols

- **UART**
- **I2C**
- **SPI**
- **PWM**
- **ADC**
- **USB**

## Description

# Oui-Spy

The Oui-Spy is an ESP32-S3 based Bluetooth Low Energy detection and security research tool created by Colonel Panic's Hack Shack. Designed as both a functional security device and an artistic PCB, it enables tracking of specific OUIs (Organizationally Unique Identifiers) and MAC addresses through BLE scanning with audio alerts via a PWM-driven piezo buzzer.

## Key Features

- **Multi-mode operation** via the Unified Blue firmware — switch between seven detection modes without reflashing
- **WiFi boot selector** at `192.168.4.1` for easy mode switching (SSID: `oui-spy`, password: `ouispy123`)
- **MAC randomization** on every boot for operational privacy
- **MMCX external antenna connector** for directional antenna use in foxhunting and direction finding
- **Built-in 2.4GHz ceramic antenna** for everyday portable use
- **Addressable NeoPixel LED** for visual mode identification
- **Mode-specific audio cues** with distinct boot signatures per firmware mode
- **Persistent mode memory** across power cycles

## Firmware Modes

### 1. Unified Blue (Recommended)
Single firmware combining all four core modes with WiFi-based boot selector. Hold BOOT button for 2 seconds to return to mode selection menu.

### 2. Detector Mode
Multi-target BLE scanner with OUI filtering. Detects devices by MAC prefix/OUI with smart cooldown to prevent alert spam. Different beep patterns distinguish new vs. re-detected devices.

### 3. Foxhunter Mode
Single-target proximity tracker using real-time RSSI analysis. Variable-frequency proximity beeping optimized for directional antenna triangulation — closer targets produce faster beeps.

### 4. Flock-You Mode
Surveillance device detector for Flock Safety and Raven cameras. Features GPS wardriving via browser Geolocation API, 200-device storage capacity, and KML/CSV/JSON export for Google Earth visualization. Includes a Flask desktop companion app.

### 5. Sky-Spy Mode
Drone Remote ID detection system supporting dual WiFi + BLE scanning per ASTM F3411 standard. Extracts GPS coordinates, tracks up to 8 drones simultaneously, and outputs JSON serial data for visualization.

### 6. UniPwn Mode
Unitree robot exploitation system with BLE command injection for Go2, G1, H1, and B2 robots. Features 7-step AutoPwn automation with AES-CFB128 encryption support.

### 7. Remote-ID-Spoofer
WiFi Remote ID simulator capable of spoofing up to 20 simultaneous drones with realistic flight parameters including altitude drift, GPS jitter, and heading wobble.

## Hardware Specs

| Spec | Value |
|------|-------|
| **MCU** | ESP32-S3 dual-core Xtensa LX7 @ 240MHz |
| **RAM** | 512KB SRAM |
| **PSRAM** | 8MB |
| **Flash** | 8MB |
| **WiFi** | 802.11 b/g/n |
| **Bluetooth** | BLE 5.0 |
| **USB** | USB-C 2.0 |
| **Antenna** | Built-in 2.4GHz ceramic + MMCX for external |
| **Audio** | Integrated piezo buzzer (PWM) |
| **LED** | Addressable NeoPixel RGB |
| **GPIO** | 11 pins @ 3.3V logic |
| **Power** | 5V via USB-C |

## 3D Printable Accessories

Community-designed cases and accessories by out0fstep and Nitekry D Paul:

- OUI-SPY Case with External Antenna Hole
- OUI-SPY Travel Case
- OUI-SPY Keychain
- Mini Yagi Case (for 2.4GHz directional antenna)
- OUI-SPY SMA Spacer
- OUI-SPY Tacti-kewl Yagi Grip (Picatinny rail compatible)

## Product Variants

- **Oui-Spy** ($85) — Complete assembled board, ready to use
- **Oui-Spy PCBs Only** ($25) — 2 PCBs per order (front and back), DIY assembly
- **Oui-Spy Flexible Patch** ($60) — Clear flexible PCB patch with wearable punk/metal aesthetics
- **Oui-Spy Earring Set** ($60) — 2 artistic PCBs with XIAO ESP32-S3 modules and 100mAh batteries
- **Oui-Spy Skull Badge/Pendant** ($35) — Wearable badge/pendant with full BLE detection

## Getting Started

1. Purchase the board from Tindie or colonelpanic.tech
2. Flash the Unified Blue firmware via USB-C
3. Power on and connect to the `oui-spy` WiFi network
4. Navigate to `192.168.4.1` in your browser
5. Select your detection mode
6. Hold the BOOT button for 2 seconds to return to mode selection

## Community & Coverage

- Featured on Hackaday: "Detecting Surveillance Cameras With The ESP32"
- Hackster.io project showcase with 2,941+ views
- Hackster.io news: "Colonel Panic's OUI-SPY Is a Slick Bluetooth Low Energy Scanner"

## Important Notes

All current firmware modes are **passive and detection-only** — no transmission or exploitation occurs during normal operation. This is the "Blue Edition" focused on defensive reconnaissance. A "Red Edition" with offensive capabilities is in development.

## Where to Buy

- [Tindie](https://openhardware.directory/r?to=https%3A%2F%2Fwww.tindie.com%2Fproducts%2Fcolonel_panic%2Foui-spy%2F&ref=openhardware.directory&product=oui-spy&source=md-export) — $85.00
- [Colonel Panic Tech](https://openhardware.directory/r?to=https%3A%2F%2Fcolonelpanic.tech%2F&ref=openhardware.directory&product=oui-spy&source=md-export) — $85.00

## Resources

- [product](https://openhardware.directory/r?to=https%3A%2F%2Fcolonelpanic.tech%2F&ref=openhardware.directory&product=oui-spy&source=md-export)
- [github](https://openhardware.directory/r?to=https%3A%2F%2Fgithub.com%2Fcolonelpanichacks%2Foui-spy&ref=openhardware.directory&product=oui-spy&source=md-export)
- [wiki](https://openhardware.directory/r?to=https%3A%2F%2Fwww.hackster.io%2Fcolonelpanic%2Foui-spy-now-and-beyond-1f9c9a&ref=openhardware.directory&product=oui-spy&source=md-export)
- [datasheet](https://openhardware.directory/r?to=https%3A%2F%2Fwww.espressif.com%2Fsites%2Fdefault%2Ffiles%2Fdocumentation%2Fesp32-s3_datasheet_en.pdf&ref=openhardware.directory&product=oui-spy&source=md-export)

## Tags

`esp32-s3`, `ble-scanner`, `security-tool`, `surveillance-detection`, `drone-detection`, `foxhunter`, `oui-tracking`, `counter-surveillance`, `direction-finding`, `colonel-panic`

## Images

![Oui-Spy](https://nbg1.your-objectstorage.com/openhardware-directory/entities/oui-spy/be0f93496660.jpg)
![Oui-Spy](https://nbg1.your-objectstorage.com/openhardware-directory/entities/oui-spy/407bcf762333.jpg)
![Oui-Spy](https://nbg1.your-objectstorage.com/openhardware-directory/entities/oui-spy/0a11bba66824.jpg)
![Oui-Spy](https://nbg1.your-objectstorage.com/openhardware-directory/entities/oui-spy/8c5fff802d04.jpg)

---
[View full device page](https://openhardware.directory/devices/oui-spy)