PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

A guide to Bluetooth Low Energy hacking

bugcrowd.com | blog | #wireless-security | #hardware-hacking | #tutorial | #ble | #bluetooth | #radio-frequency | #frequency-shift-keying
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

An educational guide to Bluetooth Low Energy hacking: how radio waves and frequency shift keying carry binary data, plus techniques for attacking BLE-enabled devices.
Published
Collected

Related coverage

blog · bishopfox.com
An Introduction to Bluetooth Security
An introduction to Bluetooth Low Energy security focused on version 4.2, covering the BLE stack, how it differs from Bluetooth Classic, and options for penetration testing BLE devices.
blog · blog.trailofbits.com
You could have invented that Bluetooth attack
Trail of Bits explains the invalid curve point attack behind Biham and Newman's BLE bug, showing how unsanitized curve parameters let attackers recover ECDH keys on patch-averse IoT devices.
blog · hackenproof.com
[Part 2] How to Hack Into Wi-Fi – WPS Pixie Dust
Part two of the Wi-Fi hacking series: using the WPS Pixie Dust attack to crack router credentials, following the earlier handshake-capturing tutorial.
blog · hackenproof.com
[Part 1] How to Hack Into Wi-Fi – Handshake Capturing
Part one of a Wi-Fi hacking series: capturing WPA handshakes as a penetration testing technique that goes beyond testing software code.
research · blog.quarkslab.com
Bluetooth Low Energy GATT Fuzzing
Quarkslab presents a fuzzer for the Bluetooth Low Energy GATT/ATT layers, built around attack scenarios from an in-depth spec study; it uncovered bugs and vulnerabilities across several BLE stacks.
research · blog.quarkslab.com
Examining the August Smart Lock
A reverse engineering study of the August Smart Lock 3rd generation and its Bluetooth Low Energy attack surface, examining whether a nearby attacker could interact with the lock.
Back