Bluetooth Hacking and Security MasterClass

Explore how bluetooth operates as a 2.4 ghz short-range wireless standard, with classic and ble variants, frequency hopping, channel counts, and a plan to study vulnerabilities in both protocols.

Learn to work with Bluetooth adapters in Kali Linux, bring adapters up and down with HCI config, compare two adapters (Bluetooth 5.3 vs 5.1), and note manufacturers and packet types.

Explore basic Bluetooth scanning with the SCA tool and HCI adapters. Learn to scan Bluetooth classic devices with multiple adapters before advancing to enhanced scanning for BLE and classic devices.

Explore enhanced scanning with Bluetooth CTL to detect nearby devices, switch adapters, power on, enable agent for pairing, and scan for Bluetooth Classic and Bluetooth Low Energy devices.

Demonstrates scanning Bluetooth devices using the Raspberry Pi 5 built-in adapter, employing hci tools and bluetoothctl to discover Bluetooth Classic and BLE devices, with practical findings.

Explore how Bluetooth signal jamming works, with demonstrations of an NRF24L01 jammer, building a jammer with Arduino and NRF24L01, and a built-in jammer, plus a comparison of their effectiveness.

Demonstrate a wireless jammer using a Nrf24l01 with Arduino, showing how signals are interrupted between a speaker and a jammer, with plans to build and compare future jammers.

Create a jammer using the NRF24l01 module and Arduino with an Arduino Uno sketch and wiring diagram, covering 3.3v vs 5v operation; next video compares jammers.

Demonstrates a built-in jammer that disrupts all 2.4 GHz devices, including Bluetooth and Wi-Fi, within about ten meters, causing speakers and networks to disconnect.

Search AliExpress and other sites to find suitable jammers from country-specific sellers, then check your country’s customs rules and legality before purchasing, and use them only in a sealed lab.

Compare two jammers—the nrf24l01 jammer and another device—by observing their effects on the 2.4 GHz spectrum, signal disruption, and encryption in a lab setting.

Explore advanced scanning of Bluetooth classic devices, including how paired devices disappear from scans and how a jammer can reveal them in pairing mode to capture mac addresses.

Explore advanced scanning of Bluetooth low energy devices, identify MAC addresses, and observe how jamming affects device visibility during scans, using tools on Bluetooth classic and BLE devices.

Understand denial of service attacks aimed at specific devices, jamming 2.4ghz devices such as speakers and smartwatches using the Blue Dot tool in Kali.

Illustrates a targeted Bluetooth low energy DDoS attack on a smartwatch, combining L2 ping flood and jamming to disrupt connections and force re-pairing.

Demonstrates a DoS attack on a Bluetooth classic device, using an L2 ping flood with a jammer to disrupt a speaker while other devices like a Luna watch remain unaffected.

Intercept bluetooth low energy devices to read battery level, heart rate, firmware version, and serial number by scanning, connecting, and reading attributes, illustrating a man-in-the-middle attack.

The NRF 52 840 module offers a graphical interface for interception of Bluetooth devices and complements methods, with software, SDK, and documentation to set up and update firmware via DFU.

Operate the NRF 52840 with the SDK and NRF connect to scan and connect BLE devices, read battery and heart-rate data, and view firmware and serial information for interception-capable observations.

Explore serious Bluetooth vulnerabilities, including CVE-2023-45866 HID, enabling keystroke injection without pairing on older devices. Apply updates, disable automatic pairing, and monitor behavior with a Blue Duckie demo.

Explore the Blue Ducky HID scripting and payloads through a practical demo, showing how a Bluetooth device can open a malicious link without user interaction.

Perform a blue to blue attack using the Raspberry Pi 5 built-in Bluetooth adapter, running a blue ducky script via SSH to deliver a payload to the Infinix device.

Investigate a dangerous bluetooth vulnerability that lets attackers secretly access a microphone via paired earbuds or speakers. Showcase the Blue Spy tool for Kali via a GitHub download.

Demonstrate microphone vulnerability in Bluetooth devices with Blue Spire and Blue Sky Pi by recording audio from earbuds and speakers. Learn steps to set up, run commands, and assess risks.

Learn a scenario based attack on Bluetooth classic devices by scanning for nearby devices, forcing disconnects with a jammer, and performing a Bluetooth spy attack to record data.

Conduct a scenario-based attack on a Bluetooth classic device by leveraging a jammer to seize control from the victim, then scan, connect, and read device model and serial number.