BLESuite-CLI

BLESuiteCLI 自述文件 BLESuiteCLI 是一个命令行工具，提供了一种更简便的方式来测试低功耗蓝牙（BLE）设备。该工具使用 BLESuite Python 库，该库利用 pygattlib 和 Bluez 蓝牙协议栈，使我们能够通过属性协议（ATT）上的通用属性配置文件（GATT）对 BLE 设备进行扫描、读取和写入。该工具的目标是创建 Bluez gatttool 的替代方案，gatttool 通常用于通过 GATT/ATT 协议与 BLE 设备通信。 功能： 命令行工具和独立的 Python 包 扫描 BTLE 设备 扫描 BTLE 设备的主要服务和特征...

BlueBorn

BlueBorn CVE-2017-0785 Archlinux インストール paru -S python-pybluez-git bluez-utils-compat pyhton3 python3-pip sudo pip install pwn チュートリアル 発見 hcitool scan Scanning ... XX:XX:XX:XX:XX:XX Device 1 XX:XX:XX:XX:XX:XX Device 2 エクスプロイトの使用 python CVE-2017-0785.py TARGET=XX:XX:XX:XX:XX V エクスプロイト: 完了! python...

Linux-Heap-Based-Type-Confusion-in-L2CAP

Linux: L2CAP 中基于堆的类型混淆 CVE-2020-12351 Linux: L2CAP 中基于堆的类型混淆 针对 BLE 实现的 PoC CVE-2020-12351 为何修改原始 PoC？ 原始 PoC 专注于通过经典蓝牙发送恶意 l2cap 数据包。然而，我的需求是将其测试于仅支持蓝牙低功耗 BLE 通信且已采用完整 BlueZ 协议栈（经典和低功耗均支持）的外设上。 L2CAP 是主机协议栈中的通用协议，同时支持蓝牙经典和 BLE 实现。 先决条件 配备 BLE 适配器的 Linux 机器。如果机器没有内置适配器，可以购买一个外接适配器。 使用方式： 1. 编译 gc...

SUSE CVE-2017-1000251

The native Bluetooth stack in the Linux Kernel BlueZ, starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space...

The vulnerability in the implementation of the SDP service for the Bluetooth protocol stack for the Linux BlueZ operating system allows a attacker to disclose protected information.

The vulnerability of the SDP service implementation for the Bluetooth protocol stack for the Linux BlueZ operating system is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

bluescan

This is a Python script for a Bluetooth scanner, specifically designed to scan for devices, services, and vulnerabilities. The script is called "bluescan" and is available on GitHub. The script is based on the BlueZ Bluetooth protocol stack and uses the libbluetooth-dev package. It can be install...