Skid Detector
A hacker's nightlight.
Install firmware
A configurable RGB nightlight with passive Wi-Fi and BLE alerts. Pick your hardware before connecting.
After installation
- Connect to the Wi-Fi network
SkidDetector-xxxxxx. - Use password
12345678. - Open 192.168.4.1 to set the light, alert rules, and optional buzzer.
The device UI works offline. It starts with a slow color transition. Axon candidates default to red/blue police lights; the buzzer starts disabled.
If connecting fails, close serial monitors. Hold BOOT, tap RESET, then release BOOT and reconnect.
Hardware & wiring
Seeed 6×10 RGB Matrix for XIAO: 60 WS2812 LEDs. XIAO profiles use D0 for matrix data and D1 for the optional buzzer.
| Profile | Matrix DIN | Buzzer | Radio | Verification |
|---|
Matrix power goes to 5 V and GND; all grounds must be shared. Use a suitable level shifter for reliable 3.3 V-to-5 V data signaling when wiring externally. A higher-current buzzer needs a transistor driver, not direct GPIO power.
The default LED budget is 500 mA, in addition to the ESP32's draw. Use a stable USB supply. Raise the budget only with an adequate external 5 V supply; do not back-feed the USB port.
Detection
Dragon Detector's current signatures cover Axon, Flipper, Pineapple, Flock, Meta, Pwnagotchi, Nyanbox, HaleHound, Biscuit, SmartTag, Find Hub, Tile, acoustic sensors, camera/ALPR vendors, Remote ID, and more.
Disconnect alerts require sustained traffic for one BSSID across two windows. Pairing-spam alerts require structured pairing payloads from many addresses. SSID security mismatches are labeled as possible conflicts.
Names and addresses can be spoofed. These are candidates, not proof of identity, recording, tracking, or intent. No radio detector can guarantee zero false alarms.Make it yours
Eight nightlight modes, two colors, brightness, saturation, cycle time, and a shared current budget.
Each alert gets its own colors, pattern, brightness, duration, cooldown, evidence threshold, and buzzer setting. Import and export settings from the local UI.
Monitoring stays passive. The firmware does not transmit deauthentication or interference traffic. The local access point transmits normal Wi-Fi management traffic.