OUI-SPY // Web Flasher

Install3 steps

Plug the board in

Use a real USB-C data cable — charge-only cables won't show up as a serial port. If it's your first flash, hold the BOOT button while plugging in.

Click Flash

Chrome, Edge, or Opera on desktop. Your browser will show a list of serial ports — pick the XIAO. The install takes about 30 seconds and wipes the board clean before installing.

Your browser doesn't support Web Serial. Open this page in Chrome, Edge, or Opera on a desktop. This page must be served over HTTPS. GitHub Pages handles that automatically.

Listen for 4 ascending beeps

The board reboots on its own. Four beeps means the firmware is up. You'll land in the Boot Selector — join the Wi-Fi below, open the dashboard, and pick a mode.

ModesBoot Selector + 6 tools

[ 0 ]

Boot Selector

The menu you land in after every flash. Pick a mode, edit AP credentials, reboot into it. Hold BOOT ~1.5s from any mode to come back here.

Wi-Fi: oui-spy
Password: ouispy123
Open: http://192.168.4.1

[ 1 ]

Detector

BLE watchlist — alerts on OUI prefix, full MAC, device name, 16-bit service UUID, and company ID. Ships with the OUI Database: Ring, Axon, Flock Safety, DJI, Parrot, Skydio, and Meta/Ray-Ban.

Wi-Fi: snoopuntothem
Password: astheysnoopuntous
Open: http://192.168.4.1

[ 2 ]

Foxhunter

RSSI proximity tracker for a locked BLE target. Buzzer cadence speeds up as you close — like a Geiger counter for Bluetooth.

Wi-Fi: foxhunter
Password: foxhunter
Open: http://192.168.4.1

[ 3 ]

Flock-You WiFi

Passive 2.4 GHz promiscuous sniffer for Flock Safety cameras. addr2 OUI, addr1 OUI, and the DeFlockJoplin wildcard-probe signature. SPIFFS-persisted with USB-CDC dump commands for the Flask dashboard.

Wi-Fi: no AP
Access: USB-CDC + Flask dashboard

[ 4 ]

PCAP

Passive 2.4 GHz WiFi packet capture. Wireshark-ready pcap (linktype 127, radiotap) over USB-CDC, live dashboard with vendor colouring and chip filters, rolling 2 MB in-PSRAM session pcap the browser can download at any time. Locked-channel (AP up) or hop mode (AP down, USB only).

Wi-Fi: ouispy-pcap
Password: packetsniffer
Open: http://192.168.4.1

[ 5 ]

Sky Spy

FAA Remote ID / Open Drone ID (ASTM F3411) beacon capture. Pulls serial, operator ID, lat/lon, altitude, speed, and heading from every ODID message type.

Wi-Fi: no AP
Access: serial JSON out

[ 6 ]

BLE Sniff

Passive BLE advertising capture across channels 37/38/39. Wireshark-ready pcap (linktype 256, LE LL with PHDR) over USB-CDC, live dashboard with vendor identify against the OUI Database (RING / AXON / FLOCK / DJI / PARROT / SKYDIO / META / Ray-Ban) matched on MAC OUI, Bluetooth SIG company ID, service UUID, or name substring. Advertisements only — connected-device pairing traffic needs an nRF52 sniffer.

Wi-Fi: ouispy-blesniff
Password: sniffuntothem
Open: http://192.168.4.1

Troubleshootingcommon snags

Nothing shows up in the port picker

Try a different USB-C cable (charge-only won't work), install CH340 or CP210x drivers if your OS doesn't auto-detect, or hold BOOT while plugging in to force download mode.

Flash finished but I hear no beeps

The buzzer might be muted on the selector page. The board is fine — join the oui-spy Wi-Fi and confirm the dashboard loads at 192.168.4.1.

Wrong dashboard after switching modes

Your phone auto-reconnected to a saved OUI-SPY network from a different mode. Forget the old network in Wi-Fi settings, or disable auto-connect for all OUI-SPY APs.

Detector AP disappeared after locking config

That's intentional — locking is a one-way seal. Hold BOOT during power-on to clear the lock and restore the config AP. Reflashing does not unlock it; NVS survives a reflash.