Biscuit Pro
Biscuit Pro
The Biscuit Pro is the flagship device in the Biscuit lineup – a portable, dual-chip wireless security tool with dual-band WiFi 6 support. It runs headlessly and is controlled entirely from the Biscuit Manager app on iOS or Android.
Dual-Chip Architecture
The Pro uses two ESP32 chips working in parallel:
-
ESP32-C5 (Scanner) – Handles all WiFi scanning, WiFi attacks, Bluetooth scanning, Bluetooth attacks, wardriving, and channel analysis. This chip provides native 2.4 GHz and 5 GHz WiFi with WiFi 6 support.
-
ESP32-WROOM (System Manager) – Manages the BLE connection to your phone, coordinates system tasks, and serves as the mesh wardrive hub when Biscuit Nodes are in use. It also stores Evil Portal HTML files on its external flash.
The two chips communicate internally, allowing the C5 to focus entirely on wireless operations while the WROOM handles app communication and system management without interruption.
Technical Specifications
| Spec | Detail |
|---|---|
| WiFi | Dual-band 2.4 GHz + 5 GHz, WiFi 6 capable |
| Bluetooth | BLE 5.0 (dedicated WROOM gateway) |
| App connection | BLE GATT via WROOM chip |
| Battery monitoring | Integrated battery level and runtime tracking |
| Evil Portal storage | HTML files stored on WROOM external flash |
| SD card | None (see Biscuit Ultra for SD support) |
| OTA updates | Over-the-air firmware updates for both chips via WiFi |
| Mesh hub | Supports up to 20 Biscuit Nodes simultaneously |
| Form factor | Approximately deck-of-cards size, screenless, headless |
| Status indicators | Onboard LED indicators |
Key Capabilities
- WiFi scanning – Discover access points, clients, and traffic across 2.4 GHz and 5 GHz bands
- WiFi attacks – Deauthentication, beacon spam, association floods, and more
- Bluetooth scanning – Find BLE devices, AirTags, Flipper Zeros, skimmers, drones, and other devices of interest
- Bluetooth attacks – BLE spam attacks targeting various platforms
- Wardriving – GPS-based network mapping with WiGLE upload support
- Mesh wardriving – Act as a hub device, coordinating up to 20 Biscuit Nodes for distributed scanning
- Evil Portal – Host captive portals for credential harvesting with Karma mode support
- Packet capture – Capture wireless traffic and export PCAP files through the app
- Channel analysis – Visualize channel utilization across all supported bands
Evil Portal
The Pro stores Evil Portal HTML templates on the WROOM chip’s external flash. You can upload custom portal pages through the app and launch captive portal attacks without needing an SD card. Captured credentials are sent back to the app in real time.
Firmware Updates
Both chips support over-the-air (OTA) firmware updates delivered through the app over WiFi. See Firmware Updates for details.