BLESuite

BLESuite 自述文件 概述 BLESuite 是一个 Python 包，旨在使蓝牙低功耗（BLE）设备通信更加用户 友好，并支持快速的 BLE 设备测试。 BLESuite 2.0 版本移除了对 PyGattlib 和 BlueZ 的依赖，转而使用修改过的 PyBT https://github.com/mikeryan/PyBT 来实现并管理我们自己的 BLE 协议栈。该版本提高了 通信可靠性、通信灵活性，改进了设备扫描，并支持在蓝牙协议栈的主机层对设备进行 模糊测试。 BLESuite 所使用的协议栈有意允许向设备发送格式错误的请求/响应， 以便进行设备测试。 功能特性： 包含...

Whisper_Bully

Whisper Bully 蓝牙 BDADDR 提取、拒绝服务与劫持研究工具 © 2026 @Ymsniper — 仅限授权的安全研究。 概述 Whisper Bully 是一个三阶段蓝牙安全研究工具，针对广播 Google Fast Pair（服务 UUID fe2c）的设备。它展示了两种未修补的攻击原语，这些原语超出了 CVE-2025-36911 固件补丁的范围 ： 未修补的 BDADDR 泄漏 — 永久身份地址通过明文 BLE 连接泄露，无需 GATT 交互，适用于完全修补的设备 通过重置窗口的 SMP 认证绕过 — 在 L2CAP 洪水后，通过标准 SMP Just Works...

CVE-2014-0224

此存储库没有 README。...

The vulnerability of the l2cap_ecred_reconf_rsp() function in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the l2capecredreconfrsp function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to synchronization errors. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility...

CVE-2022-39227

此仓库属于 https://github.com/user0x1337/CVE-2022-39227 我只是复制了它...

Linux-Heap-Based-Type-Confusion-in-L2CAP

Linux: L2CAP 中基于堆的类型混淆 CVE-2020-12351 Linux: L2CAP 中基于堆的类型混淆 针对 BLE 实现的 PoC CVE-2020-12351 为何修改原始 PoC？ 原始 PoC 专注于通过经典蓝牙发送恶意 l2cap 数据包。然而，我的需求是将其测试于仅支持蓝牙低功耗 BLE 通信且已采用完整 BlueZ 协议栈（经典和低功耗均支持）的外设上。 L2CAP 是主机协议栈中的通用协议，同时支持蓝牙经典和 BLE 实现。 先决条件 配备 BLE 适配器的 Linux 机器。如果机器没有内置适配器，可以购买一个外接适配器。 使用方式：...

BadBlue

BadBlue Windows CVE-2024-21306 implementación de BadBlue usando DuckyScript Emparejamiento no autenticado que conduce a la ejecución de código usando teclado HID Esta es una implementación del CVE descubierto por marcnewlin Y algo de código de BlueDucky Introducción BadBlue es una herramienta...

CVE-2017-0541

CVE-2017-0541のPoCと脆弱性分析...

CVE-2025-36911_scan

Scanner CVE-2025-36911 Testa connessioni L2CAP BR/EDR non autenticate ai PSM audio A2DP/AVRCP e rileva il servizio Fast Pair GFPS su BLE. Requisiti Linux BlueZ installato e servizio bluetooth attivo per la funzionalità BLE. Adattatore Bluetooth abilitato bluetoothctl power on. Sistemi basati su...

CVE-2021-47996

creationtimestamp| type| source ---|---|--- 2026-08-25 18:52:52+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtwii2nyif2w 2026-09-02 12:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mujx7k3bo523...

The vulnerabilities of the functions l2cap_disconnect_req() and l2cap_disconnect_rsp() in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions l2capdisconnectreq and l2capdisconnectrsp in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem are related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting these vulnerabilities coul...

The vulnerability of the l2cap_ecred_conn_req() function in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the l2capecredconnreq function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the l2cap_information_rsp() function in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the l2capinformationrsp function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the l2cap_ecred_conn_req() function in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to access protected information or cause service failures.

The vulnerability of the l2capecredconnreq function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to gain access to protected...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: In hcievent, there is a callback for call disconnect that is called before the connection is deleted. In hcicsdisconnect, we call hciconndel even if the disconnection fails. ISO, L2CAP, and SCO connections refer to...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: L2CAP: Fixed use-after-free issue Fixed a potential use-after-free in l2caplecommandrej...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fixed a memory leak in vhciwrite Syzkaller reported a memory leak as follows: ==================================== BUG: Memory leak Unreferenced object 0xffff88810d81ac00 size 240: ... Hex dump first 32 bytes: 0...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Handling of NULL sock pointer in l2capsockalloc A NULL sock pointer is passed into l2capsockalloc when it is called from l2capsocknewconnectioncb. Error handling mechanisms should also take this into account. A...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

A issue was discovered in the Linux kernel through version 6.0.10. In the l2capconfigreq function within net/bluetooth/l2capcore.c, there is an integer wraparound occurring when processing L2CAPCONFREQ packets...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

There are use-after-free vulnerabilities in the net/bluetooth/l2capcore.c files, specifically in the l2capconnect and l2capleconnectreq functions. These vulnerabilities may allow code execution and the leakage of kernel memory remotely via Bluetooth. A remote attacker can execute code that leaks...