BlueSmack

Manufacturer
Trifinite


Source
•
http://trifinite.org/trifinite_stuff_bluesmack.html
•
http://www.insecure.org/sploits/ping-o-death.html


Description
BlueSmack is a Bluetooth attack that knocks out some Bluetooth-enabled devices im-
mediately. This Denial of Service attack can be conducted using standard tools that
ship with the official Linux Bluez utils package.


If you enjoyed this post, make sure you subscribe to my RSS feed!

Read rest of entry

BluePrinting

Manufacturer
Collin Mulliner and Martin Herfurt, Trifinite

Source
•
http://trifinite.org/trifinite_stuff_blueprinting.html
•
http://trifinite.org/Downloads/Blueprinting.pdf
•
http://trifinite.org/Downloads/bp_v100.zip

Description
Blueprinting is a method to remotely find out details about bluetooth-enabled devices.
Blueprinting can be used for generating statistics about manufacturers and models and
to find out whether there are devices in range that have issues with Bluetooth security.

Every bluetooth-enabled device has some characteristics that are either unique (Blue-
tooth device address), maufacturer specific (the first part of the bluetooth device ad-
dress) or model-specific (service description records).
Blueprinting is combining the
different information that Bluetooth-enabled devices reveal in order to determine the
manufacturer as well as the model of the device. Upon different characteristics it is
also possible to tell about the respective firmware version that runs on certain devices.

Every Bluetooth-enabled device that offers services to other Bluetooth-enableddevices
does announce these services via the service discovery protocol (SDP). So, remote de-
vices can query devices upon the offered capabilities


If you enjoyed this post, make sure you subscribe to my RSS feed!

Read rest of entry

BlueFish

Manufacturer
nobodaddy

Source
http://www.nobodaddy.org/portfolio/bluefish.htm

Description
Bluefish is a surveillance system which tracks the presence of Bluetooth devices, and
their users.
Bluefish constantly scans for Bluetooth-enabled devices, such as phones, PDA’s,
and wireless peripherals. When a new device is found, Bluefish takes a picture of the
area in which the device is discovered and catalogues all retrievable information about
the device. If the device is ever discovered again, the user will be sent the last image
captured of them via Bluetooth. All images are tagged with the device’s name and the
time it was last observed.
Over time, a profile is built for each discovered device, making it possible to track
individual users who frequent the scanning area


If you enjoyed this post, make sure you subscribe to my RSS feed!

Read rest of entry

BlueBug

Manufacturer
Trifinite

Source
http://trifinite.org/trifinite_stuff_bluebug.html

Description
BlueBug is the name of a Bluetooth security loophole on some Bluetooth-enabled cell
phones. Exploiting this loophole allows the unauthorized downloading phone books
and call lists, the sending and reading of SMS messages from the attacked phone and
many more things.
The tool and source code is NOT available!

If you enjoyed this post, make sure you subscribe to my RSS feed!

Read rest of entry

BlueAlert

BlueAlert

Source
http://www.tdksystems.com/software/apps/content.asp?id=

http://www.tdksystems.com/

Description
TDK Systems’ BlueAlert Windows tool creates a ’pop-up ’icon from the system tray,
notifying you in advance:
• When a Bluetooth device is active, or in range of your PC
• If a particular device goes out of range and a connection is lost
I only supports TKS Bluetooth devices.

If you enjoyed this post, make sure you subscribe to my RSS feed!

Read rest of entry

Blooover

Blooover


Manufacturer
Trifinite


Source
http://trifinite.org/trifinite_stuff_blooover.html


Description
Blooover is a proof-of-concept tool (similar to BlueSnarf) that is intended to run on J2ME-enabled cell phones. Blooover is an audit tool that people can use to check whether their phones and phones of friends and employees are vulnerable.

If you enjoyed this post, make sure you subscribe to my RSS feed!

Read rest of entry

Affix Bluetooth Stack

Bluetooth Stack

Manufacturer
Affix: Nokia Research Center at Mobile Networks Lab and released under GPL.

Source
http://affix.sourcefourge.net

Description
Affix is a Bluetooth Protocol Stack for Linux Affix supports core Bluetooth protocols
like HCI, L2CAP, RFCOMM, SDP and various Bluetooth profiles (see bellow).
Affix features:
• Modular implementation.
• Socket interface to HCI, L2CAP and RFCOMM protocols.
• Bluetooth module interface independence.
• SMP safe.
• Multiple Bluetooth devices support.
Affix currently supports the following Bluetooth Profiles:
• General Access Profile
• Service Discovery Profile
• Serial Port Profile
• DialUp Networking Profile
• LAN Access Profile
• OBEX Object Push Profile
• OBEX File Transfer Profile
• PAN Profile

affix-kernel
provides kernel modules implementing core protocols and Bluetooth de-
vice drivers. Kernel modules can be used separately from the kernel or can be linked
statically into the kernel.
affix
provides control tools, libraries, and server daemons.

If you enjoyed this post, make sure you subscribe to my RSS feed!

Read rest of entry

Blooover II (bluetooth hack application)

blooover ii is the successor of the very popular application blooover. after 150000 downloads of blooover within the year 2005 (since the initial release in at 21c3 in december 2004), a new version of this mobile phone auditing toool is on its ready. besides the bluebug attack, blooover ii supports the helomoto attack (which is quite close to the bluebug attack), the bluesnarf and the sending of malformed objects via obex.



features :

features:
bluebug attack
helomoto attack
bluesnarf
obex object push

toothing was originally a media hoax that claimed that bluetooth-enabled mobile phones or pdas were being used to arrange sexual encounters.

it appears that toothing started around march 2004, in the form of a fake forum designed by ste curran, then editor at large at games magazine edge, and ex-journalist simon byron. on april 4, 2005, the creators of the forum admitted that the whole thing was a hoax.

in toothing, a bluetooth device is used to ‘discover’ other enabled devices within about 30 feet (10 meters), then send the expression toothing? as an initial greeting.

although created as a hoax, bluetoothing merged the very credible concepts of short-range wireless networking and desire for sexual partners. recent news from more credible sources shows some evidence of real usage of bluetooth for this purpose in (generally concurred) public places. given the limited functionality and poor usability of standard bluetooth implementations to support messaging, it is not surprising that wider usage of it would only arise in extreme dating situations. bluetoothing is an example of localized social networking, which is becoming increasingly popular via products such as dodgeball, mobiluck, easy jack,crunkie, mamjam, cellphedia, and playtxt. a related term is mososo (mobile social software). nokia has released a product called sensor which standardizes many of the original concepts guiding the creation of the hoax.

code:

http://rapidshare.com/files/95479082/blooover.rar

Read rest of entry

Super Bluetooth Hack

Super Bluetooth Hack

Once connected to a another phone via bluetooth you can:
- read his messages
- read his contacts
- change profile
- play his ringtone even if phone is on silent
- play his songs(in his phone)
- restart the phone
- switch off the phone
- restore factory settings
- change ringing volume
- And here comes the best

"Call from his phone" it includes all call functions like hold etc...

Tips:

1.) Copy jar file to your mobile.
2.) When connecting devices use a code 0000
3.) At start of programm do not forget to turn on bluetooth before start of the application.

http://rapidshare.com/files/83182953/Blue_Tooth_Hacking.rar

Read rest of entry