Skip to content
Luke Switzer edited this page Oct 26, 2026 · 3 revisions

AntiHunter is a perimeter defense platform. You place small detection nodes around an area. Each node watches Wi-Fi, Bluetooth, and its own vibration sensor, reports what it finds over a LoRa radio mesh, and logs everything to an SD card. A node needs no internet and runs on battery.

This wiki breaks down every feature: what it does, how it works, how to start it from the web UI or over the mesh, its settings, and what to do when it misbehaves.

How the pieces fit together

A node is an ESP32 board with a Meshtastic LoRa radio, running AntiHunter firmware. You control it in any of these ways:

  • Web UI — a web page the node serves on its own Wi-Fi access point. Full builds only.
  • Mesh commands — text messages sent from any Meshtastic radio on the node's channel. Full and Headless builds.
  • USB serial — a serial monitor at 115200 baud.
  • Command Center — a server that draws a whole fleet of nodes on one map and automates their scans. See the Command Center repository.

One node works on its own. Several nodes on the same mesh share scans and, with GPS, triangulate a device's position.

Node types

Node Board Covers Status
DIGI ESP32-S3 Wi-Fi and Bluetooth, 2.4 GHz Stable
DIGI C5 ESP32-C5 Wi-Fi and Bluetooth, 2.4 and 5 GHz Testing
RadarNode ESP32-C5 24 GHz radar, then a Wi-Fi and Bluetooth sweep Experimental
SDR node ESP32-S3 Wideband radio capture In development

Where to start

  1. Choose your hardware — buy a node, or pick the parts to build one.
  2. Flash a node — from your browser, with no tools to install.
  3. Meshtastic radio setup — set the LoRa region, or the radio never transmits.
  4. First setup — change the default passwords and keys before you deploy.

What it detects

Find devices: target scan, device discovery, device classifier, probe requests, randomized MAC tracer, drone Remote ID, triangulation.

Watch an area: baseline anomaly, CSI motion, vibration and tamper.

Detect attacks: Sentinel, deauth detection.

Capture and respond: packet capture, attack response, scheduled scans, campaigns, secure wipe.

Beta and experimental features

Features labeled (Beta) run only in the Beta firmware. Features labeled (experimental) may give wrong results. Both are noted on their pages.

Clone this wiki locally