Biscuit Node
Biscuit Node
Biscuit Node is a dedicated ESP32-C5 satellite for a Biscuit Pro or Ultra. It does not connect to the phone app directly. Instead, your Pro or Ultra runs in Manager mode, coordinates the Nodes, and sends their results to the Biscuit Manager app as part of the same operation.
Keep the Manager and Nodes together as a multi-radio “Node rig.” During a wardrive, the Manager divides WiFi coverage among every WiFi-capable scanner, while BLE-role Nodes scan for nearby Bluetooth devices. The app combines everything into one live map and one saved session.
What You Need
- A Biscuit Pro or Ultra connected to the Biscuit Manager app
- One or more ESP32-C5 devices running the dedicated Biscuit Node firmware
- Current firmware on the Manager and Nodes for the latest management, wardrive, and BLE-spam features
A Pro or Ultra can also become a satellite for another Pro or Ultra. See Use a Pro or Ultra as a Node.
What a Dedicated Node Can Do
| Capability | Behavior |
|---|---|
| WiFi wardriving | Scans its assigned 2.4 GHz and 5 GHz channels and returns access points to the Manager |
| BLE wardriving | Scans for Bluetooth Low Energy devices and notable-device detections |
| Distributed deauth | Takes a share of selected targets during an authorized Node Deauth operation |
| Node OTA | Downloads and installs dedicated Node firmware after an update is started from Node Management |
A dedicated C5 Node has one radio, so it uses WiFi or BLE for a wardrive, not both at once. A Pro or Ultra used as a Node can also use the All role because it has two radios.
How to Add Nodes to Your Biscuit
Adding a Node means saving it to the memory of the Pro or Ultra that will act as its Manager. You do not connect the phone directly to a dedicated Node.
- Flash Biscuit Node from the Biscuit Web Flasher, then power on the C5 board.
- Connect the Biscuit Manager app to the Pro or Ultra that will manage the rig.
- Open Settings > Node Management and select Manager.
- Leave Secure (6) selected for a normal encrypted rig. Select Extended (20) only when you need more than six active Nodes and accept that the Node link will be unencrypted.
- Open the Nearby tab and tap Start to begin the 30-second discovery window.
- When the Node appears, tap Add to Memory. To add several at once, tap Add All; every discovered Node that fits in memory will be saved.
- Open Saved and confirm that each added Node says Online.
After a Node is saved, Manager mode remembers it and reconnects when it is available. The Manager can remember up to 30 Nodes even though fewer can be online at the same time.
See Node Management for naming, saved roles, firmware updates, bulk actions, and troubleshooting.
Wardriving with Nodes
Start a wardrive from the normal Wardrive screen:
- WiFi wardrives automatically give connected Nodes the WiFi role.
- BT wardrives automatically give connected Nodes the BLE role.
- All wardrives open Assign Scan Roles, where you choose what the Manager’s built-in scanner and each connected Node will capture.
The All-mode role sheet keeps the complete online roster that was shown when it opened. If one of those Nodes briefly drops out, Start pauses instead of silently removing it from the command. When a 12-Node Extended rig is shown, the session starts with all 12 assignments or waits for the roster to be ready.
During the drive, each Node pill shows its assigned role, result count, and a small health dot instead of adding an Active or Reconnecting label. Green means the role is confirmed; amber means the selected role is being confirmed or repaired; red means the assignment failed. Results received while a dot is amber still count immediately. The Biscuit pill shows only its one assigned role and that role’s count, because its built-in scanner uses WiFi or BLE during a Node Wardrive, not both.
The Manager dynamically divides supported WiFi channels across the built-in scanner and all Nodes assigned WiFi or All. It prioritizes common channels, then shares the remaining channels across the rig. If an active scanner becomes unavailable, the Manager keeps the wardrive running and redistributes coverage among the scanners that remain.
A brief Node reconnect keeps its session role and existing channel share while the Manager repairs it. A missing role confirmation by itself does not make the Node offline. The Manager waits about one minute without a valid check-in or result before treating a Node as disconnected and redistributing its coverage.
All Node observations use the phone’s current GPS position. For accurate maps, carry the Nodes with the Manager instead of placing them in separate locations.
Fleet Size and Security
| Manager mode | Active Nodes | Link security |
|---|---|---|
| Secure | Up to 6 | Encrypted |
| Extended | Up to 20 | Unencrypted |
Both modes remember up to 30 saved Nodes. Use Secure mode unless your rig needs more than six active satellites.
Hardware and Firmware
The dedicated Node firmware targets ESP32-C5 hardware with at least 4 MB of flash. Common C5 options include:
- Espressif ESP32-C5 DevKit – Buy on Amazon
- Seeed Studio XIAO ESP32-C5 – Buy from Seeed Studio
- LilyGo T-Dongle C5 – Buy from LilyGo (use code
GHOSTSTRATSfor 5% off) - Waveshare ESP32-C5 – Buy on Amazon
Biscuit Node uses dedicated satellite firmware, not the app-connected Biscuit DIY firmware. Onboard LED availability and pin wiring vary by board, so a board can operate as a Node even when its LED does not match the guide below.
LED Guide
On boards using the firmware’s supported RGB LED mapping:
| LED pattern | Meaning |
|---|---|
| Yellow, fast blink | Searching for a Manager |
| Green, slow blink | Online and waiting for an assignment |
| Green, solid | Scanning WiFi or BLE |
| White, brief flash | Sending results |
| Orange, pulsing | Installing a firmware update |
| Red, pulsing | Running a Node attack operation |
| Red, solid | Error; power-cycle the Node and try again |
Firmware Updates
Dedicated Nodes update from Settings > Node Management > Firmware. Enter the WiFi SSID and password that the Nodes should use, check for the selected Production or Beta release, then update one Node or choose Update All.
The Manager sends the update request, but each Node connects to WiFi and downloads its own firmware. The app can update up to four dedicated Nodes at a time, waits for each one to reconnect, and verifies the reported version. Pro and Ultra devices used as Nodes are updated through their normal firmware flow, not the dedicated C5 Node updater.
Important Limits
- A dedicated Node has no direct app connection, GPS, battery telemetry, or local capture storage.
- Dedicated Nodes can wardrive WiFi or BLE one role at a time.
- A Pro or Ultra is required as the Manager; DIY and Crumb devices cannot manage a Node fleet.
- Node observations use the Manager phone’s location.
- Extended mode supports a larger fleet by disabling encryption on the Node link.
- Use scanning and attack features only on networks and devices you own or are authorized to assess.