-
Notifications
You must be signed in to change notification settings - Fork 2
Getting Started
- Pi Zero 2W with a Waveshare 2.13" e-ink V4 display and a PiSugar 3 battery
- A microSD card (8GB+)
- A USB cable for initial setup (micro-USB to your PC)
- An Android phone with Bluetooth tethering (optional but recommended for walkabouts)
Download oxigotchi-v3.3.0-release.img.zip from the latest release.
Flash it to your microSD card using balenaEtcher or Raspberry Pi Imager ("Use custom" → select the .img.zip).
Insert the card into your Pi and power it on.
The Pi boots in about 5 seconds. You'll see:
- The e-ink display shows a boot face
- WiFi monitor mode starts automatically
- AngryOxide begins scanning for targets
On first boot, the filesystem auto-expands to fill your SD card. This happens once and takes a few extra seconds.
Plug the Pi into your PC via USB. It appears as a network adapter (RNDIS/USB Gadget).
SSH in:
ssh pi@10.0.0.2
Password: raspberry
Windows users: If
10.0.0.2doesn't work, try192.168.137.2. Check your network adapters for the RNDIS device.
In your browser, go to:
http://10.0.0.2:8080
You'll see the full dashboard with your bull's face, live stats, attack controls, and capture history. Everything auto-refreshes.
Important: Add your home WiFi network to the whitelist so your bull doesn't attack it.
In the dashboard, find the Whitelist card and add your network name (SSID). Or edit the config directly:
sudo nano /etc/oxigotchi/config.tomlChange the whitelist line:
whitelist = ["YourHomeWiFi", "YourHomeWiFi-5G"]Restart the daemon: sudo systemctl restart rusty-oxigotchi
Unplug the USB cable, grab your Pi, and go for a walk. The bull is already scanning and attacking in RAGE mode (level 1 — gentle by default).
What's happening:
- The bull scans WiFi channels and discovers access points
- It sends deauth frames to force devices to reconnect
- When devices reconnect, it captures WPA handshakes
- Handshakes are saved to the SD card automatically
What you'll see on the e-ink display:
- The bull's face changes based on mood (captures = happy, dry spell = bored)
- Stats update: APs seen, handshakes captured, current channel
- Battery level from the PiSugar
After your walk, plug back in and open the dashboard. The Recent Captures card shows your handshakes. You can:
- Download individual .pcapng or .22000 files
-
Crack them locally with hashcat:
hashcat -m 22000 capture.22000 wordlist.txt - Upload to WPA-SEC for free cloud cracking (set your API key in the WPA-SEC card)
For untethered walks with internet access (auto-upload captures, Discord notifications, SSH from your phone):
- On your phone, turn mobile data ON (hotspot needs a data connection to share)
- Turn WiFi OFF on the phone so its tethering routes via mobile data
- Enable Bluetooth tethering in phone settings (Portable hotspot → Bluetooth tethering)
- Open the phone's Bluetooth settings and tap
oxigotchiwhen it appears in the scan list - When the passkey popup shows, verify the 6-digit code matches the one on the web dashboard and tap Pair on the phone
The daemon auto-trusts the new bond and establishes the tether in about 1 second. The Pi stays discoverable by default so you can add a second phone later without toggling anything. From then on, oxigotchi auto-connects to the paired phone on every boot. You can access the dashboard from your phone's browser at the BT PAN IP.
The web UI intentionally has no "Scan + Pair" button. Pi-initiated outgoing pair was fragile across Android builds; phone-initiated pairing is the reliable path.
The default RAGE level is 1 (Chill) — safe and quiet. Once you're comfortable, slide it up:
| Level | Name | What Changes |
|---|---|---|
| 1 | Chill | Rate 1, 3 channels — minimal |
| 2 | Lurk | Full 11 channels |
| 3 | Prowl | Rate 2 — more deauths |
| 4 | Hunt | Faster channel hopping |
| 5 | RAGE | Rate 3 — aggressive |
| 6 | FURY | Fast dwell — max validated |
| 7 | YOLO | Rate 5 — may crash, auto-recovers |
Levels 1-6 are all stable, even with BT phone tethering active.
The PiSugar 3 has two buttons on the edge and a reset button near the magnets. The power button handles power on/off. The custom button is mapped to quick-access actions:
| Gesture | Action | Details |
|---|---|---|
| Single tap | Cycle rage level | Rotates through levels 1-6 (Chill → FURY). Skips level 7 (YOLO) for stability. |
| Double tap | Toggle RAGE ↔ SAFE | Switch between attack mode and safe/upload mode. |
| Long press (~1s) | Toggle BT tethering | Connect or disconnect Bluetooth PAN to your phone. |
Power button (the other edge button):
- Long press — Clean shutdown with e-ink confirmation. Hardware cuts power after 30 seconds as a safety net.
- Plugging in USB-C — Auto-boots the Pi (even from fully off).
All actions are also available from the web dashboard.
- Web Dashboard — Full guide to all 26 dashboard cards
- Bull Faces — Learn what each face means
- Bluetooth Mode — Switch to BT attack mode for Bluetooth pentesting
- Troubleshooting — Common issues and fixes