Gadgets.sh

Colonel Panic

OUI SPY

Explore nearby Wi-Fi and Bluetooth identifiers.

Wi-Fi / BLESignal detectionBuzzerUSB-C

For authorised security testing, research and education. Testing networks or devices without permission is a crime. Buyers are responsible for their local law.

Bring along
USB-C power; interface and host requirements depend on the selected mode.
Keep in mind
Identifiers alone do not establish device identity.
Source checked · Sep 16, 2026
OUI SPY
Image creditMaker product image · Colonel Panic

(02) Blueprint

What’s published

Open firmware

Firmware for OUI SPY (built on a Seeed XIAO ESP32-S3 module) is fully open across several GitHub repos; no schematic, PCB source, or BOM is published.

Research notes

Verified via gh api on 5 colonelpanichacks repos (oui-spy is just a firmware-links README; oui-spy-unified-blue/flock-you/ouispy-foxhunter/Sky-Spy are the real firmware). WebFetch of colonelpanic.tech and the oui-spy-unified-blue GitHub Pages flashing guide confirm the board is a XIAO ESP32-S3 carrier; colonelpanic.tech sells assembled units, DIY kits, and bare 'OUI SPY PCBs' but no schematic/Gerber/KiCad/BOM files were found on the shop, docs site, or in any repo tree (only unipwn_hardware.cpp firmware source, not a hardware-design file). Treat as firmware-open, hardware-closed.

Every link checked 2026-09-27.

Hand this device to your agent. Everything on this page, as clean Markdown and JSON: specs, shops, prices, design files, parts.

Made the OUI SPY? Put the badge on your README; it links here, with every shop that sells it.

gadgets.sh badge

Specifications

Standard board hardware

5
Processor & flash
ESP32-S3, dual-core Xtensa LX7; 8 MB flash
Antenna
Replaceable 2.4 GHz sticker antenna
Feedback
PWM buzzer
Power & programming
USB-C
Firmware board target
Seeed Studio XIAO ESP32-S3

Reviewed Unified Blue firmware

12
Documented modes
Six: Detector, Foxhunter, Flock-You WiFi, PCAP, Sky Spy and BLE Sniff
Mode selection
Browser boot menu remembers selection; hold BOOT approximately 1.5 seconds to return
Detector configuration
BLE identifier watchlists; holding BOOT during power-on clears the configuration lock
Reflash caveat
Ordinary reflashing does not clear the detector lock stored in NVS
Wi-Fi PCAP
Rolling 2 MB capture; download through browser dashboard
PCAP channel behavior
Locked-channel mode provides an access point; hopping disables that access point
BLE Sniff limit
Advertisements only; connected BLE data-channel traffic is outside this mode
Capture transfer change
Reviewed README removes binary PCAP-over-USB streaming; use browser download
Sky Spy in this build
Wi-Fi Remote ID; serial JSON output without a Wi-Fi access point
Flock-You interface
USB-CDC and Flask dashboard; this mode has no Wi-Fi access point
Foxhunter feedback
BLE target RSSI and buzzer feedback
Preferences
Selector provides buzzer control and configurable access-point credentials

Installation & host workflow

7
Browser flashing
Desktop Chrome, Edge or Opera; USB-C data cable and Web Serial
Download channel
Web installer follows firmware committed to master
No serial port
Maker suggests a data cable and BOOT held while connecting
Wrong dashboard
Check the joined Wi-Fi network after changing modes; saved networks can auto-reconnect
Session tools
Hub documents persisted sessions and host JSON, CSV and KML exports
Maps & GPS
Some host workflows use external GPS data; not an onboard GPS specification
Identifier limits
Wireless-signature matches are confidence indicators, not proof of operator or purpose
What still needs checking
  • Shop and hub still describe four modes and a development capture branch; current installer and pinned README describe six. Confirm the installed build rather than assuming a retail unit has every current feature.
  • The installer text still mentions PCAP over USB, conflicting with the newer pinned README. Browser download is the documented path in that README; no capture path was tested here.
  • Standard-board battery capacity, complete package contents, enclosure dimensions and SKU-specific PCB revision are unconfirmed. Battery claims for wearable editions must not be applied to this board.
  • A blanket receive-only or no-transmission description would be misleading: several modes expose Wi-Fi access points.
OUI SPYColonel Panic
Buy$25+

Share this device