ChameleonUltra

ChameleonUltra 授权经销商 法国里昂：Lab401 美国圣安娜：Hackerwarehouse 英国黑斯廷斯：KSEC 加拿大蒙特利尔：TechSecurityTools 中国深圳：Sneaktechnology 中国广东：MTools Tec 新加坡 Lazada One：Aliexpress by RRG 这是什么以及如何使用？ 请阅读可用文档。 兼容的应用程序 ChameleonUltraGUI MTools BLE Mifare Chameleon Tool（仅限 iOS，Beta 版） Chameleon Ultra（仅限 Sailfish OS） 视频...

obike

oBike 协议说明（BLE/HTTP） 本文档提供了截至 2018 年 1 月 oBike 通信协议的分析。 相关成果已在 insomni'hack 安全大会 2019 上展示： 幻灯片 录像 同时也在 AREA41 安全大会 2018 上展示： 幻灯片 录像 通用 oBike 通信 oBike 车锁由 TI CC2541 微控制器构成，这是一款用于蓝牙低功耗（BLE）应用的功耗优化型片上系统（SoC）。车锁本身不具备 IP 连接能力；它借助移动设备的 3G/4G 连接与 oBike 后端进行通信。车锁通过 BLE 与移动设备上的 oBike 应用通信。协议消息随后通过 REST AP...

CMF-Watch-Pro-2-BLE-Protocol

CMF Watch Pro 2 — BLEプロトコル（リバースエンジニアリング） 非公式。 このドキュメントは、CMF Watch Pro 2 （CMF by Nothing）のBluetooth Low Energy（BLE）プロトコルを、代替コンパニオンアプリのためにリバースエンジニアリングによって再構築したものです。Nothing/CMFとは提携しておらず、その承認も受けていません。自己責任で使用してください。 フレームヘッダーとオペコード内のすべてのマルチバイト整数はビッグエンディアン です。コマンドペイロード内の整数...

PT-2026-70932

In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range approximately 10–30 meters can silently rebind the device to an attacker-controlled account, extract stored hormone measurements in cleartext, cause a denial-of-service via...

EUVD-2026-48565

Reachable Assertion vulnerability in Apache NimBLE. A specially crafted ATT Read Multiple Variable Response BLEATTOPREADMULTVARRSP may trigger assert in ATT parser. Severity is medium as this requires DUT to first send ATT Read Multiple Variable Request. This issue affects Apache NimBLE: through...

EUVD-2024-31922

Malicious code in bioql PyPI...

Bluetooth Spoofing Bug Affects Billions of IoT Devices

A team of academic researchers have discovered a Bluetooth Low Energy BLE vulnerability that allows spoofing attacks that could affect the way humans and machines carry out tasks. It potentially impacts billions of Internet of Things IoT devices, researchers said, and remains unpatched in Android...

Apple bleee vulnerability analysis: everyone knows your iPhone on what is happening-vulnerability warning-the black bar safety net

This article describes the Apple BLE Protocol vulnerabilities to cause the Bluetooth information disclosure. Analysis The first analysis of the BLE traffic, unlock the phone and run the BLE sniffer: the python bleadvsearch.py -m 54:69:F1:23:2B:47 54:69:F1:23:2B:47 0e02011a0aff4c0010050b1c0fc556...

Burning down the house with IoT

For years we’ve been trying to set fire to ‘smart’ things by hacking them. We got some charring on the iKettle, but nothing more. Then we found some smart hair straighteners. The Glamoriser straighteners were promoted heavily on TV at Christmas; they piqued my interest because of the BLE...

Different ‘smart’ lock, similar security issues

I was looking through Amazon and found this padlock at the cheaper end of the scale. For twenty of my well-earnt English pounds I could become the owner of a new and shiny SLOK lock. Image credit: Amazon It can be unlocked by BLE and can be shared to others, what could I do but buy one and revers...