shining-mask

Shining Mask Hacks This repository contains code and instructions for creating a custom Bluetooth Low Energy BLE controller for the Shining LED Mask that automatically changes the face image of any masks within BLE range. This repository is a companion to Invasion of the Facechangers: Halloween...

system_bt_AOSP10_r33_CVE-2022-20229

Pila Bluetooth Fluoride Compilación y ejecución en AOSP Simplemente compile AOSP - Fluoride está allí por defecto. Compilación y ejecución en Linux Instrucciones para Ubuntu, probado en 14.04 con Clang 3.5.0 y 16.10 con Clang 3.8.0 Descargar fuente root@kitploit: mkdir /fluoride cd /fluoride git...

ble_norton_core

PoC de inyección de comandos en el servicio BLE de Norton Core Secure WiFi Router CVE-2018-5234 Para obtener más información, lea el artículo. Para demostrar la explotación, utilizaremos: Sistema operativo GNU/Linux; Adaptador Bluetooth dongle; Utilidad BlueZ para probar la conexión Bluetooth. Pa...

libbtbb

libbtbb This is the Bluetooth baseband decoding library, forked from the GR-Bluetooth project. It can be used to extract Bluetooth packet and piconet information from Ubertooth devices as well as GR-Bluetooth/USRP. This code is incomplete, it is still under active development. Patches and bug...

btlejuice

BtleJuice Framework Introduction BtleJuice is a complete framework to perform Man-in-the-Middle attacks on Bluetooth Smart devices also known as Bluetooth Low Energy. It is composed of: an interception core an interception proxy a dedicated web interface Python and Node.js bindings How to install...

bluffs

BLUFFS Introduction This repository contains code related to BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses. Paper abstract Bluetooth is a pervasive technology for wireless communication. Billions of devices use it in sensitive applications and to exchange private data. The...

iOS-Bluetooth-Ethernet-Exploit

Exploit de puerta de enlace Ethernet de costo cero en iOS Bluetooth PAN → Puerto USB 62078 Autor: Fares Dahoumane Twitter/X: https://x.com/faresdahoumane Fecha: Junio 2026 Estado: Divulgación pública solo resultados – Detalles técnicos completos enviados a BlackHat Arsenal para revisión. ⚠️ Aviso...

ble-cve2025-attack-new-version

ble-cve2025-attack-new-version android-ble-cve-2025-4866 🔐 PoC para CVE-2025-4866 — Vulnerabilidad BLE de Android versión pública 📡 Explotación de debilidades en la autorización BLE en dispositivos Android public PoC only. 👨💻 Desarrollado por BloodCode Labs — 2025...

blueXploit

blueXploit blueXploit video blueXploit is my own proof-of-concept that reproduces CVE-2023-45866 , the Bluetooth keystroke-injection vulnerability discovered by Marc Newlin. It abuses a flaw in the Bluetooth protocol to inject keystrokes into a target device without pairing , opening the door to...

CVE-2023-2002

Linux Bluetooth: Unauthorized management command execution CVE-2023-2002 An insufficient permission check has been found in the Bluetooth subsystem of the Linux kernel when handling ioctl system calls of HCI sockets. This causes tasks without the proper CAPNETADMIN capability can easily mark HCI...

BlueToolkit

Extensible Bluetooth vulnerability testing framework for BR/EDR and BLE. Docs • Installation • Usage • Exploits • Hardware • TODOs • Automotive Evaluation • Bluetooth Resources • License BlueToolkit is a modular, black-box Bluetooth security testing framework for Bluetooth Classic BR/EDR and...

whisperpair-poc-tool

WhisperPair-PoC-Tool and Research A deep dive into CVE-2025-36911 and the security gaps in Google's Fast Pair ecosystem Blog Post Executive Summary Google Fast Pair was designed to make Bluetooth pairing seamless: tap a notification and you're connected. But what happens when that seamless...

blur

README Repositorio sobre los ataques BLUR presentados en AsiaCCS'22 en el artículo titulado: BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy. Enlaces útiles: pdf, video, slides, website. Entrada BibTex: root@kitploit: @inproceedingsantonioli22blu...

Blueborne-CVE-2017-1000251

Blueborne A simple bluetooth DoS using the blueborne exploit CVE-2017-1000251...

System_bt_AOSP10_r33_CVE-2021-0589

Pila Bluetooth Fluoride Compilar y ejecutar en AOSP Solo construya AOSP: Fluoride está ahí por defecto. Compilar y ejecutar en Linux Instrucciones para Ubuntu, probadas en 14.04 con Clang 3.5.0 y 16.10 con Clang 3.8.0 Descargar fuente root@kitploit: mkdir /fluoride cd /fluoride git clone...

system_bt_AOSP10_r33_CVE-2020-0413

Pila Bluetooth de Fluoride Compilación y ejecución en AOSP Solo compila AOSP: Fluoride está ahí por defecto. Compilación y ejecución en Linux Instrucciones para Ubuntu, probadas en 14.04 con Clang 3.5.0 y 16.10 con Clang 3.8.0 Descargar el código fuente root@kitploit: mkdir /fluoride cd /fluoride...

poc-for-cve-2020-0022

cve-2020-0022 poc para cve-2020-0022 uso gcc poc.c -lbluetooth -o poc poc MACADDR información Este poc debería ser estable en Android 8.1.0, una vez que se encuentra con un paquete truncado, se bloquea. Pero puede ser muy inestable, en Samsung s9 plus seguramente inestable. Ejecutar poc en...

ubertooth

Ubertooth Project Ubertooth is an open source wireless development platform suitable for Bluetooth experimentation. Ubertooth ships with a capable BLE Bluetooth Smart sniffer and can sniff some data from Basic Rate BR Bluetooth Classic connections. The latest release is 2020-12-R1. The latest...

COVIDSafe-CVE-2020-12856

COVIDSafe-CVE-2020-12856: A silent pairing issue in bluetooth-based contact tracing apps Authors: Jim Mussared George Robotics, Alwen Tiu The Australian National University A vulnerability has been identified in the implementation of the Android version of Australia's COVIDSafe v1.0.17 and earlie...

WhisperPair

WhisperPair: Arsenal de Pruebas para Google Fast Pair -green Una herramienta práctica para comprobar si los dispositivos Google Fast Pair son vulnerables a ataques de emparejamiento, vinculación de cuentas y de nivel de protocolo. Este repositorio proporciona el arsenal de pruebas WhisperPair, un...