Blue-Borne

Blue-Borne BlueBorne Exploits & Framework Dieses Repository enthält PoC-Code für verschiedene Exploits der BlueBorne-Sicherheitslücken. Unter 'android' finden sich Exploits für die Android RCE-Sicherheitslücke CVE-2017-0781 und die SDP-Information-Leak-Sicherheitslücke CVE-2017-0785. Unter...

blueshrimp

Proof-of-concept for CVE-2025-48593 based on examining the patch. You shouldn't worry about this. As far as I can tell, phones are NOT vulnerable to CVE-2025-48593. The issue only affects Android devices that support acting as Bluetooth headphones / speakers, such as some smartwatches, smart...

blueshrimp

Proof-of-concept per CVE-2025-48593 basato sull'esame della patch. Non dovresti preoccupartene. Per quanto ne so, i telefoni NON sono vulnerabili a CVE-2025-48593. Il problema riguarda solo i dispositivi Android che supportano la funzione di cuffie/altoparlanti Bluetooth, come alcuni smartwatch,...

wpair-app

WPair CVE-2025-36911 z.B. WhisperPair Schwachstellen-Scanner & Forschungswerkzeug Funktionen • Installation • Verwendung • So funktioniert's • Sicherheitslücke • Danksagungen Haftungsausschluss Diese Anwendung ist eine unabhängige Umsetzung, die von @ZalexDev in eigener Verantwortung erstellt...

CVE-2023-23388

Questo repository contiene un PoC per CVE-2023-23388, descritto in questa serie, in particolare in questo post. Si tratta di un LPE nel servizio bluetooth noto come bthserv in Windows 10/11 che consente a un utente non privilegiato di elevare i propri privilegi a LOCAL SERVICE. Questo repo non...

CVE-2024-34463

CVE-2024-34463 Betroffene Geräte : BPL Smart Weighing Scale PWS-01-BT https://www.bplmedicaltechnologies.com/product-details/weighing-scales/personal-weighing-scale-pws-01bt/ Sicherheitslücke : Unzureichende Sicherheit in der Bluetooth-Kommunikation zwischen der digitalen Waage und der zugehörige...

fwbt

fwbt Dokumentation: https://www.labs.greynoise.io/grimoire/2024-08-20-bluuid-firewalla/ Proof-of-Concept-Code für die Interaktion mit Firewalla über Bluetooth Low-Energy und die Ausnutzung von CVE-2024-40892 / CVE-2024-40893 Ohne jegliche Konfiguration scannt es nach Firewalla-Geräten in lokaler...

RustyInjector

⚠️ Aviso: Apenas para Fins de Pesquisa e Educacionais Este projeto é uma Prova de Conceito PoC demonstrando injeção de teclas Bluetooth, reimplementada em Rust. Destina-se estritamente a fins educacionais e de pesquisa em segurança. Não utilize este código para comprometer sistemas sem autorização...

bleah

Questo repository è DEPRECATO, utilizzabettercap poiché questo strumento è stato integrato nei suoi moduli BLE...

btlejuice

BtleJuice Framework Einleitung BtleJuice ist ein vollständiges Framework zur Durchführung von Man-in-the-Middle-Angriffen auf Bluetooth Smart-Geräte auch bekannt als Bluetooth Low Energy. Es besteht aus: einem Abhörkern Interception Core einem Abhör-Proxy Interception Proxy einer dedizierten...

ESP32Marauder

ESP32 Marauder Una suite di strumenti offensivi e difensivi WiFi/Bluetooth per l'ESP32...

JXL_Infotainment_CVE-2025-63895

JXLInfotainmentCVE-2025-63895 CVE-2025-63895 Angriffsname 📂 Weitere Details Betroffenes Produkt Betroffene Komponenten Bluetooth Classic Version 5.0 Bluetooth-Firmware-Stack LMP-Implementierung Infotainment Bluetooth-Dienst Angriffsvektor Ein Angreifer in Bluetooth-Reichweite kann dieses Problem...

EUVD-2026-67297

In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution. These messages must come from a device that has already joined the network. Only provisioners supporting extended advertisements may b...

CVE-2026-5706

In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution. These messages must come from a device that has already joined the network. Only provisioners supporting extended advertisements may b...

BlueBorn

BlueBorn CVE-2017-0785 Instalação no Archlinux paru -S python-pybluez-git bluez-utils-compat pyhton3 python3-pip sudo pip install pwn TUTORIAIS Descoberta root@kitploit: hcitool scan Scanning ... XX:XX:XX:XX:XX:XX Device 1 XX:XX:XX:XX:XX:XX Device 2 Usar o exploit root@kitploit: python...

CVE-2026-5706

Silicon Labs Bluetooth Mesh SDK version 6.1.4 and earlier is affected by a buffer overflow when processing malformed extended advertisements . The out-of-bounds write corrupts the stack, potentially enabling remote code execution . Exploitation requires the malicious message to originate from a d...

CVE-2026-5706 Buffer overflow in Bluetooth Mesh SDK when handling extended advertisements

In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution. These messages must come from a device that has already joined the network. Only provisioners supporting extended advertisements may b...

blueborne-CVE-2017-1000251

Linux Kernel 4.13.1 - BlueTooth Buffer Overflow PoC BlueBorne - Prova di concetto - Disarmato/Non armato - Solo DoS Crash Questa è una copia del repository iniziale pubblicato da @marcinguy che successivamente l'ha rimosso e reso privato...

CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices

= doi.org/10.5281/zenodo.18323302 = orcid.org/0009-0007-7728-256X README.md: CVE-2025-13834 Framework di Sfruttamento Bluetooth RFCOMM "Heartbleed" Autore: Sastra Adi Wiguna Purple Elite Teaming Data: 20 gennaio 2026 Versione: 1.0 Replica dell'intero sistema Licenza: SOLO USO RED TEAM Non...

BLE-Replay

BLE-Replay BLE-Replay è uno strumento di valutazione per periferiche Bluetooth Low Energy BLE. Recupera/consuma i log HCI Bluetooth dal tuo dispositivo mobile ed estrae tutte le scritture che il centrale effettua a una periferica. Questi dati possono essere riprodotti usando la maggior parte dei...