routersploit

RouterSploit - Exploitation Framework for Embedded Devices Community Join community on Embedded Exploitation Discord. Description The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing...

BlueBunny

C2 solution that communicates directly over Bluetooth-Low-Energy with your Bash Bunny Mark II. Send your Bash Bunny all the instructions it needs just over the air. Table of contents Overview Installation & Start Manual communication with the Bash Bunny through Python Troubleshooting Working on...

ble_norton_core

Инъекция команды PoC в BLE-сервисе маршрутизатора Norton Core Secure WiFi CVE-2018-5234 Для получения дополнительной информации прочитайте статью. Для демонстрации эксплуатации мы будем использовать: ОС GNU/Linux; Адаптер Bluetooth-донгла; Утилиту BlueZ для тестирования Bluetooth-соединения. Чтоб...

BLUE-SPY

BLUE-SPY - Fast Pair Vulnerability Research Tool SECURITY DISCLAIMER AND LEGAL WARNING ⚠️ THIS SOFTWARE IS FOR AUTHORIZED SECURITY RESEARCH AND ETHICAL TESTING ONLY ⚠️ Unauthorized use of this tool against devices you do not own or have explicit written permission to test is ILLEGAL and may result...

shining-mask

Shining Mask Hacks This repository contains code and instructions for creating a custom Bluetooth Low Energy BLE controller for the Shining LED Mask that automatically changes the face image of any masks within BLE range. This repository is a companion to Invasion of the Facechangers: Halloween...

knob

README Repository about the Key Negotiation Of Bluetooth KNOB attacks on Bluetooth BR/EDR and Bluetooth Low Energy. Related Work From the Bluetooth Standard to Standard-Compliant 0-days HWIO20 Key Negotiation Downgrade Attacks on Bluetooth and Bluetooth Low Energy TOPS20 Bluetooth blues: KNOB...

ble-cve2025-attack-new-version

ble-cve2025-attack-new-version android-ble-cve-2025-4866 🔐 PoC for CVE-2025-4866 — Android BLE Vulnerability public version 📡 Exploitation of BLE authorization weakness on Android devices public PoC only. 👨💻 Developed by BloodCode Labs — 2025...

btlejack

BtleJack: новый швейцарский нож для Bluetooth Low Energy Btlejack предоставляет всё необходимое для сниффинга, глушения и перехвата устройств Bluetooth Low Energy. Он использует одно или несколько устройств BBC Micro:Bit . с прошивкой. Вы также можете использоватьAdafruit's Bluefruit LE sniffer и...

btlejack

BtleJack: a new Bluetooth Low Energy swiss-army knife Btlejack provides everything you need to sniff, jam and hijack Bluetooth Low Energy devices. It relies on one or more BBC Micro:Bit . devices running a dedicated firmware. You may also want to use anAdafruit's Bluefruit LE sniffer or a nRF5182...

btlejuice

BtleJuice Framework Introduction BtleJuice is a complete framework to perform Man-in-the-Middle attacks on Bluetooth Smart devices also known as Bluetooth Low Energy. It is composed of: an interception core an interception proxy a dedicated web interface Python and Node.js bindings How to install...

BTLE

BTLE BTLE is a free and open-source Bluetooth Low Energy BLE Software Defined Radio software suite and open BTLE chip design. It includes: BTLE baseband algorithms description, Python and Verilog implementation, FPGA and SkyWater 130 PDK OpenLane2 workflow results. Analog Devices AD9361 + Xilinx...

BLE-TPMS

CVE-2024-39081 Collegamento: https://vulners.com/cve/CVE-2024-39081 TREEL TPMS basato su BLE per biciclette Qui abbiamo eseguito e spiegato la manipolazione dei dati TPMS tramite Bluetooth. Possiamo inviare un falso allarme all'utente dell'app tramite Bluetooth. I risultati dettagliati delle...

bandexploit

Band Exploit CVE-2018-11631 Un semplice script Python che utilizza Gatttool per sfruttare un Bluetooth Low Energy Smart Watch insicuro M1 Band 1. CVE-2018-11631 : https://nvd.nist.gov/vuln/detail/CVE-2018-11631 Utilizzo: bandexploit.py opzioni Indirizzo Opzioni: -h, --help mostra questo messaggio...

UniPwn

Analisi dell'iniezione di comandi del servizio BLE del robot Unitree Autore: Bin4ry aka Andreas Makris [email protected] Coautore: h0stile aka Kevin Finisterre Contributore: legion1581 aka Konstantin Severov di theroboverse ha contribuito a correggere il payload per l'iniezione e lo ha...

CVE-2026-22017-Firmware-Update-via-BLE-Without-Authentication

CVE-2026-22017 – Firmware-Update über BLE ohne Authentifizierung Programmcode Python-Bleak-Peripheral root@kitploit: blefirmwareupdate.py - Simulated BLE peripheral accepting firmware writes from bleak import BleakServer, BleakGATTCharacteristic import asyncio class FirmwareService: def initself:...

fwbt

fwbt Dokumentation: https://www.labs.greynoise.io/grimoire/2024-08-20-bluuid-firewalla/ Proof-of-Concept-Code für die Interaktion mit Firewalla über Bluetooth Low-Energy und die Ausnutzung von CVE-2024-40892 / CVE-2024-40893 Ohne jegliche Konfiguration scannt es nach Firewalla-Geräten in lokaler...

btlejuice

BtleJuice Framework Einleitung BtleJuice ist ein vollständiges Framework zur Durchführung von Man-in-the-Middle-Angriffen auf Bluetooth Smart-Geräte auch bekannt als Bluetooth Low Energy. Es besteht aus: einem Abhörkern Interception Core einem Abhör-Proxy Interception Proxy einer dedizierten...

BLE-Replay

BLE-Replay BLE-Replay è uno strumento di valutazione per periferiche Bluetooth Low Energy BLE. Recupera/consuma i log HCI Bluetooth dal tuo dispositivo mobile ed estrae tutte le scritture che il centrale effettua a una periferica. Questi dati possono essere riprodotti usando la maggior parte dei...

sweyntooth_bluetooth_low_energy_attacks

SweynTooth - Desencadeando o Caos sobre Bluetooth Low Energy Este repositório é parte do resultado de uma pesquisa doASSET Research Group. O SweynTooth cobre uma família de 18 vulnerabilidades em diferentes kits de desenvolvimento de software SDKs de Bluetooth Low Energy BLE de seis grandes...

smart-sketcher-upload

smART Sketcher 2.0 – Umgehung der Bluetooth-Authentifizierung CVE-2026-0842 | Fehlende Authentifizierung an der BLE-Schnittstelle Überblick Der smART Sketcher 2.0 ist ein Bluetooth-fähiger Spielzeugprojektor, mit dem Kinder Bilder nachzeichnen können. Er verfügt über keine Authentifizierung an...