#1Tools for assessing and exploiting Bluetooth device security and communication vulnerabilities.
Kitploit recommended
ravss/bluetooth-crash-cve-2017-0785Exploit script for CVE-2017-0785 that crashes the Bluetooth module on Android 4.0+ devices by sending crafted SDP search requests, causing…
sastraadiwiguna-purpleeliteteaming/cve-2025-13834-a-bluetooth-rfcomm-out-of-bounds-read-vulnerability-in-modern-wireless-devicesCVE-2025-13834 Technical Summary Vulnerability Type: Memory Disclosure / Out-of-Bounds (OOB) Read (CWE-125). CVSS Score: 7.5–8.1 (High/Critical). …
barghest-ngo/cve-2026-51376Proof-of-concept exploit for BLE cache poisoning in Bitchat 1.15.0, demonstrating a man-in-the-middle attack that poisons the Bluetooth Low Energy…
idkwim/cve-2020-0022Research repository documenting BlueFrag (CVE-2020-0022) Android Bluetooth heap overflow experiments, including GDB crash analysis and memcpy…
aprkr/cve-2023-48034Weak encryption in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject wireless…
jasondoyle/komfy-switch-wifi-password-disclosureProof-of-concept and writeup showing how to retrieve Wi-Fi SSID/password from a D-Link Komfy smart switch over BLE by reversing the iOS app’s custom…
thorat-shubham/jxl_infotainment_cve-2025-63895Proof-of-concept for CVE-2025-63895: Bluetooth Classic LMP buffer overflow exploitation in JXL 9-inch Android car infotainment systems, enabling…
harryanon/poc-cve-2018-4327-and-cve-2018-4330Proof-of-concept exploit for iOS Bluetooth stack vulnerabilities CVE-2018-4327 and CVE-2018-4330, enabling ARM PC register control on iPhone 6S via…
oxasploits/oxasploitsA number of exploits and tools I've written for CVEs accredited to Marshall Whittaker/oxagast
cipherx1802/cve-2025-69821-beat-xp-vega-smartwatch-security-assessmentA security assessment of the Beat XP VEGA Smartwatch (Firmware RB303ATV006229) focused on Bluetooth Low Energy (BLE) connectivity revealed a design…
gmh5225/cve-2023-21739Windows Bluetooth Driver Elevation of Privilege Vulnerability. CVE project by @Sn0wAlice
nanopathi/system_bt_aosp10_r33_cve-2021-0507Exploit for CVE-2021-0507, a remote code execution vulnerability in Android's Bluetooth stack (system/bt). Provides proof-of-concept for the flaw.
nanopathi/system_bt_aosp10_r33_cve-2020-0225Exploit for CVE-2020-0225 in the Android Fluoride Bluetooth stack, enabling remote code execution via a crafted Bluetooth packet. Includes build…
satheesh575555/system_bt_aosp10_r33_cve-2021-0589AOSP Bluetooth stack with a patch for CVE-2021-0589, providing a vulnerable version for security research and exploit development.
renukaselvar/system_bt_aosp10_cve-2022-20140Android Bluetooth stack (Fluoride) with a proof-of-concept for CVE-2022-20140, demonstrating a Bluetooth vulnerability and providing build…
satheesh575555/system_bt_aosp10_r33_cve-2020-0413Android Bluetooth stack (Fluoride) source code for AOSP 10, modified for CVE-2020-0413 analysis and patching.
nanopathi/system_bt_aosp10_r33_cve-2020-0471Android Bluetooth stack (Fluoride) with a proof-of-concept exploit for CVE-2020-0471, enabling vulnerability analysis and exploitation testing on…
nanopathi/system_bt_aosp10_r33_cve-2021-0476Android Bluetooth stack (AOSP 10 r33) containing CVE-2021-0476 for vulnerability analysis, exploitation testing, and security research.
