Repository navigation
Privacy and Data Handling
Marauder can display, retain, transmit, or export radio and network observations that may identify devices, networks, people, or locations. Review the behavior of a feature before recording a demonstration, sharing output, or uploading a capture.
When Settings > Censor is enabled, supported access-point names, Bluetooth device names, MAC addresses, and BSSIDs are masked on the Marauder display. The change takes effect immediately. Names keep their first three characters and MAC/BSSID values keep their first two bytes; the remaining characters or bytes are replaced with X.
Censor is a display aid, not a data-sanitization system. It does not redact:
- Serial or CLI output
- PCAP packet captures
- Wardrive, Recon, Remote ID, GPS, GPX, or other log files
- Saved AP, station, SSID, or Bluetooth lists
- Evil Portal submissions
- Files viewed, copied, backed up, or exported from SD/SPIFFS
- Data uploaded to WiGLE, WDGWars, or another service
- IP addresses, GPS coordinates, raw frame contents, or arbitrary text outside the supported display fields
Treat the original data as sensitive even when the screen appears censored. Review and sanitize recordings, terminal output, screenshots, captures, and exported files before sharing them.
GPS coordinates and location-tagged observations can reveal a route, home, workplace, survey boundary, or the position of detected equipment. Censor does not mask coordinates. Store GPX, wardrive, Flock, Recon, MAC Track, and Remote ID output carefully, and inspect files before publishing them.
Wi-Fi and Bluetooth observations may contain stable or rotating addresses, network names, device names, probe requests, relationships, payloads, and timestamps. Rotating addresses reduce simple tracking but do not guarantee anonymity. A detected identifier also does not prove ownership, identity, or presence of a particular person.
Evil Portal submissions, saved Wi-Fi profiles, service API credentials, and configuration backups require stronger handling than ordinary scan results. Censor does not protect these values. Do not demonstrate real credentials, publish them, or leave sensitive files on removable storage.
Direct Upload sends selected wardrive data to the configured third-party service. The service's retention, visibility, and account policies apply after upload. Verify the file, destination, and account before sending it.
Use Marauder only on systems and in areas where you have authorization, and follow applicable privacy, interception, and data-protection laws.