Biscuit Pro

Wardriving Platform: A Full WiFi & BLE Security Toolkit

Do not buy if you have a Nothing Phone 4A Pro. I cant for the life of me get the BLE connection stable on this phone OS.

Biscuit Pro is a wardriver first. Pair it with the app, toss it in your bag, and it maps every WiFi network and Bluetooth device you pass in real time using your phone's GPS, then uploads straight to WiGLE when you're done. That's the reason most people buy it. But it's not a one-trick device: it's a full dual-band WiFi and Bluetooth security toolkit built on a dual-ESP32 board with native 5GHz and WiFi 6 support, something most pocket-sized tools in this space can't do.

Wardriving

• Simultaneous WiFi + Bluetooth + Flock scanning with phone GPS integration
• Live interactive map with clustering, heatmaps, and notable-device pins
• Anti-Surveillance mode for spotting trackers and followers
• Direct WiGLE API upload for collaborative mapping
• WDG Wars integration: upload your captures to compete in gang territory wardriving battles
• Auto-saved session history, merge, and post-drive reports

How It's Built

Two chips split the work. The ESP32-C5 handles everything wireless: dual-band 2.4/5GHz scanning, WiFi 6, packet capture, and attacks. The ESP32-WROOM-32 handles the BLE link to your phone, battery monitoring, and OTA updates. Splitting the work this way means the C5 never has to pause scanning to talk to the app.

WiFi Capabilities

Reconnaissance & Analysis

• Full dual-band AP scanning (2.4GHz and 5GHz simultaneously)
• Station discovery and association tracking
• Probe request monitoring
• Beacon frame analysis with security type detection
• Real-time packet statistics and traffic monitoring
• Channel utilization analyzer
• PMKID and 4-way handshake capture for hash extraction

Offensive Testing

• Deauthentication testing (broadcast, targeted, and manual modes)
• Beacon frame generation with custom SSID lists
• Evil Portal (captive portal) deployment for phishing assessments
• Probe request spoofing
• Association and power management frame manipulation

Threat Detection

• Deauthentication attack detection
• Pwnagotchi device identification
• WiFi Pineapple detection with multiple signature methods
• Rogue AP identification

Bluetooth Capabilities

Reconnaissance

• Full BLE and Classic Bluetooth device scanning
• AirTag and Find My network device detection
• Flipper Zero detection
• Flock tracking device identification
• Credit card skimmer detection (HC-05/HC-06 module identification)
• Axon detection
• Meshtastic detection

Offensive Testing

• Sour Apple (iOS popup spam)
• Swiftpair spam (Windows notification flood)
• Samsung device spam
• Google Fast Pair spam (Android)
• Pwnagotchi emulation (soon)
• Flipper Zero emulation (soon)
• AirTag cloning and spoofing
• Multi-platform spam (cycle all variants simultaneously)

Operational Features

Headless, app-driven control. Every function runs through the mobile app over BLE GATT. No screen means better battery life, a smaller visual footprint, and easy drop-and-forget deployment.

Over-the-air updates. New features and fixes ship as OTA firmware updates over WiFi.

Battery monitoring. Real-time battery level so you know how much runtime you have left.

Status LED. An RGB indicator gives you device status at a glance, and can be turned off entirely for discreet operation.

Technical Specifications

What's In The Box

• Biscuit Pro device in 3D-printed ABS-GF enclosure

Intended Use

The Biscuit Pro is designed for:

• Penetration testers
• Beginners
• Security researchers
• Your mother
• Network administrators performing authorized audits
• Educational and training environments
• Red team operations

Important: This device is intended for authorized security testing only. Users are responsible for ensuring they have proper authorization before conducting any security assessments. Misuse may violate local, state, or federal laws.