Biscuit Wiki

Welcome to the official documentation for Biscuit – a portable WiFi and Bluetooth security research platform.

Biscuit is a headless wireless security research platform controlled entirely from your phone via Bluetooth. The flagship Biscuit Pro and Ultra feature a dual-MCU (dual-ESP32) architecture, while the Biscuit DIY runs on a single-MCU (ESP32-C5). The platform supports dual-band WiFi (2.4GHz + 5GHz), Bluetooth Low Energy scanning and attacks, wardriving with GPS mapping, packet capture, and much more.

Getting Started

New to Biscuit? Start here.

First Connection Guide – Power on, install the app, and pair your device
DIY Setup Guide – Build your own Biscuit with a supported ESP32-C5 board
Troubleshooting – LED meanings, common issues, and FAQ

Devices

Device Overview & Comparison – Compare all Biscuit variants side by side
Biscuit Pro – Dual-chip, dual-band WiFi 6 security tool
Biscuit Ultra – Pro features + SD card + External Antennas (size of a small wifi router)
Biscuit DIY – Build your own with supported ESP32-C5 boards
Biscuit Node – Mesh wardriving satellite device to build multi-radio Node rigs

Features

WiFi Tools

WiFi Scanning – AP scan, station scan, beacon/probe/deauth sniffing, device detection
WiFi Capture & Analysis – EAPOL/PMKID capture, packet capture, channel analyzer
WiFi Attacks – Deauth, beacon spam, RickRoll, probe attack, and more
Evil Portal – Captive portal credential harvesting with Karma mode
Network Scanners – Ping, ARP, port, SSH, and Telnet scanning

Bluetooth Tools

Bluetooth Scanning – BLE scan, AirTag, Flipper, Flock, skimmer, drone detection
Bluetooth Attacks – Sour Apple, Swiftpair, Samsung, Google, Flipper spam

Wardriving & Tracking

Wardriving – GPS network mapping, WiGLE uploads, node mesh wardrive
Foxhunt – Track down a specific device by signal strength
Anti-Surveillance – Detect tracking devices and surveillance infrastructure
Mesh Recon – Scan for Zigbee, Thread, and Matter mesh networks

Device Management

Firmware Updates – Over-the-air updates via WiFi
Node Management – Pair and manage BiscuitNode mesh devices

Apps

App Overview – Available on iOS and Android with full feature parity
iOS App – Live Activities, iOS-specific details
Android App – Foreground Service, Android-specific details

3rd-Party Integration

Build your own apps, scripts, or dashboards on top of Biscuit’s BLE/GATT surface.

Integration Overview – Connection lifecycle, what’s public, what isn’t
GATT Reference – Service and characteristic UUIDs, message framing, status codes
Commands Reference – WiFi/Bluetooth scan and attack, Evil Portal, device-control commands
Wardrive Integration – The wardriveall worked example, data formats, Flock classification

Legal Notice

Biscuit is designed exclusively for authorized security testing and research purposes. Users are responsible for ensuring they have proper authorization before conducting any wireless assessments. Always obtain written permission before testing networks you do not own.