5 matches found
CVE-2023-52709-PoC
CVE 2023-52709 "TI蓝牙协议栈无法生成可解析随机私有地址（RPA），导致已绑定对等设备服务中断" 的概念验证 CVE 2023-52709 摘要 在对待测设备（DUT）配置为可解析私有地址并运行Defensics测试用例SMP legacy 1001（循环模式）时，一段时间后设备会生成无法解析的随机私有地址，导致已绑定对等设备发生拒绝服务。 该潜在漏洞可能影响运行受影响SDK版本并启用了蓝牙隐私功能（使用可解析私有地址特性）的低功耗蓝牙设备。 本仓库中的脚本（cve-2023-52709.py）模拟了Defensics测试用例 1001 和 3 的攻击序列 重要函数...
CVE-2026-0101-BLE-Address-Spoofing-via-Weak-Resolvable-Private-Address
CVE-2026-0101 – 通过弱可解析私有地址实现 BLE 地址欺骗 程序代码（使用 bleak 模拟的 Python） bleperipheralsim.py - Simulated BLE peripheral with weak RPA verification import asyncio, random, hashlib from bleak import BleakServer, BleakScanner Simplified - we'll use a basic socket to simulate BLE bonding Store bonded IRK...
Advanced BLE Scanner with RPA / IRK Tracking
A Bluetooth Low Energy BLE scanner for Flipper Zero that supports Resolvable Private Address RPA resolution. It discovers nearby BLE devices, tracks each device by MAC address, logs signal strength RSSI history, device name, first/last seen timestamps, and packet count. The scanner features a...
btrpa-scan BLE Scanner
btrpa-scan is a Bluetooth Low Energy BLE scanner with advanced Resolvable Private Address RPA resolution. Discover nearby BLE devices, track a specific device by MAC address, or resolve privacy-randomized addresses using an Identity Resolving Key IRK...
