BLE-Replay

BLE-Replay BLE-Replay 是一款蓝牙低功耗（BLE）外设评估工具。它从您的移动设备拉取/读取蓝牙 HCI 日志，并提取中心设备对外设进行的所有写入操作。 这些数据可以通过大多数蓝牙适配器从 Linux 主机重放，或保存到磁盘以供修改。该工具让您无需使用 Wireshark 提取数据，也无需使用 gatttool 等工具编写脚本，即可直接对外设进行测试。它支持手工构建您自己的特征写入序列来对设备进行测试，包括字节级模糊测试支持。 如果某个移动应用在 BLE 设备上写入一些特征值，以配置/解锁/禁用某些功能或对设备执行其他状态更改操作，该工具将非常有用。 先决条件 装有...

CVE-2023-46916

Maxima Max Pro Power 1.0 486A devices allow BLE traffic replay. An attacker can use GATT characteristic handle 0x0012 to perform potentially disruptive actions such as starting a Heart Rate monitor...

CVE-2018-16242

oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy BLE to replay ciphertext based on a predictable nonce used in the locking protocol...