RedGridLink

Red Grid Link Red Grid Link est retiré Retiré le 27 septembre 2026. La v1.7.0 est la version finale. Link a été retiré de la vente sur l'App Store et dépublié sur Google Play. Les nouveaux abonnements et achats à vie ne sont plus proposés. Installations existantes : le retrait n'efface pas les...

android712-blueborne

android712-blueborne Android Blueborne RCE CVE-2017-0781 In November 2017 a company called Armis published a proof of concept PoC of a remote code execution vulnerability in Android via Bluetooth CVE-2017-0781, known as BlueBorne. Although BlueBorne refers to a set of 8 vulnerabilities, this PoC ...

Freeko

How to install: needed 1. Computer 2. SD card 3. Miko 3 1. Download the apks from here 2. copy them to the sd card 3. Startup miko and hit the three dots 4. Go to settings and then Privacy policy 5. Hold on the text in the policy until you see a menu with the option "Share" 6. Tap share and then...

system_bt_AOSP10_r33-CVE-2020-0138

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source mkdir /fluoride cd /fluoride git clone...

ubertooth

Ubertooth Ubertooth 프로젝트는 Bluetooth 실험에 적합한 오픈 소스 무선 개발 플랫폼입니다. Ubertooth는 강력한 BLEBluetooth Smart 스니퍼를 포함하며, Basic RateBR Bluetooth Classic 연결에서 일부 데이터를 스니핑할 수 있습니다. 최신 릴리스는 2020-12-R1입니다. 최신 펌웨어 빌드는 릴리스 페이지에서 확인할 수 있습니다. 이 릴리스는 libbtbb 2020-12-R1과 함께 제공됩니다. 펌웨어 플래싱 지침은 해당 readthedocs.io 펌웨어 페이지에...

ble_proxy

BLE HTTP Proxy System A Bluetooth Low Energy BLE based HTTP proxy system that routes web browser traffic through an iOS device. This allows web browsing through the iOS device's internet connection using BLE as the transport layer. Architecture Overview Browser → Windows Proxy → BLE/TCP → iOS/Moc...

Sniffle

Sniffle Sniffle is a sniffer for Bluetooth 5 and 4.x LE using TI CC1352/CC26x2 hardware. Sniffle has a number of useful features, including: Support for BT5/4.2 extended length advertisement and data packets Support for BT5 Channel Selection Algorithms 1 and 2 Support for all BT5 PHY modes regula...

ble_norton_core

PoC command injection in BLE service of Norton Core Secure WiFi Router CVE-2018-5234 For more information read paper. To demonstrate the exploitation, we will use: OS GNU/Linux; Bluetooth dongle adapter; BlueZ utility for testing Bluetooth connection. In order to use the script, we will need to s...

DirtyTooth-RaspberryPi

DirtyTooth for Raspberry Pi Raspbian Stretch Bluetooth communications are on the increase. Millions of users use the technology to connect to peripherals that simplify and provide greater comfort and experience. There is a trick or hack for iOS 11.1.2 and earlier that takes advantage of the...

CVE-2026-15894

The Bluetooth Mesh On-Demand Private Proxy solicitation handler in subsys/bluetooth/mesh/solicitation.c copies a received Solicitation PDU into a fixed 17-byte stack buffer without bounding the source length. In solpdudecrypt, out is allocated as NETBUFSIMPLE17 and then filled with...

system_bt_aosp10_cve-2022-20140

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source mkdir /fluoride cd /fluoride git clone...

EUVD-2026-94230

The Bluetooth Mesh On-Demand Private Proxy solicitation handler in subsys/bluetooth/mesh/solicitation.c copies a received Solicitation PDU into a fixed 17-byte stack buffer without bounding the source length. In solpdudecrypt, out is allocated as NETBUFSIMPLE17 and then filled with...

CVE-2026-15894

The Zephyr RTOS Bluetooth Mesh stack is vulnerable to a stack-based buffer overflow in the On-Demand Private Proxy solicitation handler (subsys/bluetooth/mesh/solicitation.c). The sol_pdu_decrypt() function copies a received Solicitation PDU into a fixed 17-byte stack buffer without bounding the ...

CVE-2026-15894 Bluetooth Mesh solicitation PDU stack buffer overflow via oversized advertisement

The Bluetooth Mesh On-Demand Private Proxy solicitation handler in subsys/bluetooth/mesh/solicitation.c copies a received Solicitation PDU into a fixed 17-byte stack buffer without bounding the source length. In solpdudecrypt, out is allocated as NETBUFSIMPLE17 and then filled with...

blue-pigeon

Blue Pigeon: Bluetooth-based Data Exfiltration and Proxy Tool for Red Teamers 1. The Motivation | Birth of the Bird ​ How does Blue Pigeon work? ​ The Pigeon's Key Requirements 2. The Components | Dissecting the Pidgey apart ​ 1. Blue Pigeon - The Mobile Applicaton ​ 2. Blue Beak - Custom...

kernel: Bluetooth: MGMT: validate LTK enc_size on load

A flaw was found in the Linux kernel's Bluetooth management MGMT component. An attacker could exploit a vulnerability in how Long Term Keys LTK are loaded. By providing an oversized encryption size, a stack buffer overflow can occur, potentially leading to a denial of service...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

CVE-2020-0022

CVE-2020-0022 vulnerability exploitation on Bouygues BBox Miami Android TV 8.0 - ARM32 Cortex A9 By Polo35 - 2020/08/24 "Usage: python poloexploit.py targetbtmac targetadbip, shellcommand, disablereboot, verbose" Based on scripts by Jan Ruge CVE-2020-0022 an Android 8.0-9.0 Bluetooth Zero-Click R...

packages_apps_Bluetooth_AOSP10_r33_CVE-2022-20126

This repository does not have a README...

BlueBunny

C2 solution that communicates directly over Bluetooth-Low-Energy with your Bash Bunny Mark II. Send your Bash Bunny all the instructions it needs just over the air. Table of contents Overview Installation & Start Manual communication with the Bash Bunny through Python Troubleshooting Working on...