#1Tools for assessing and exploiting Bluetooth device security and communication vulnerabilities.
Kitploit recommended
k3vinlusec/bluefrag_cve-2020-0022This is a RCE bluetooth vulnerability on Android 8.0 and 9.0
nccgroup/bleboyBLEBoy is a training tool to teach users about BLE security by providing a single BLE peripheral that can be used to experiment with each BLE pairing…
alfa100001/-cve-2017-0785-blueborne-pocCVE-2017-0785 BlueBorne PoC
embedi/ble_norton_coreProof-of-concept exploit demonstrating command injection via BLE service in Norton Core Secure WiFi Router (CVE-2018-5234). Includes SSH access setup…
wh02m1/cve-2026-78306Proof-of-concept exploiting DJI drone Bluetooth DUML command injection, sending unauthenticated commands to read credentials, alter Wi-Fi config, and…
pieterbork/blueborneScan/Exploit Blueborne CVE-2017-0785
polo35/cve-2020-0022CVE-2020-0022 vulnerability exploitation on Bouygues BBox Miami (Android TV 8.0 - ARM32 Cortex A9)
cisc0-gif/kittPython-Based Pentesting Framework
omerporze/brokentoothPOC for CVE-2018-4327
antoinet/obikeReverse engineering of the oBike protocol communication (BLE and HTTP)
ymsniper/whisper_bullyThree-stage Bluetooth BDADDR extraction, DoS & hijack on Fast Pair devices; unpatched primitives outside CVE-2025-36911 scope (no Ubertooth needed)
ang13t/bluesnoopA TUI bluetooth utility for radar analysis and war driving 🦉
nccgroup/blesuite-cliBLESuite_CLI is a command line tool to enable an easier way to test Bluetooth Low Energy (BLE) devices
jasondoyle/google-nest-cam-bug-disclosuresPoC vulnerability disclosures for consumer IoT cameras, detailing BLE buffer overflow and WiFi disassociation attacks that can take devices offline.
saimanish1/logitech-ipc-protocolReverse-engineered Logi Options+ agent IPC protocol. Switch Logitech multi-host devices programmatically via Unix socket (macOS) or named pipe…
yslxotwod/wifistingGTK4 wireless security toolkit with 57 standalone shell modules for Wi-Fi, Bluetooth, RF, Zigbee, NFC and router-side attacks, plus MITM, recon,…
zhuowei/blueshrimpProof-of-concept for CVE-2025-48593
cosmic-zip/witchcraftWITCHCRAFT is a cyberdeck toolkit built for runners who dive deep into the mesh. It’s your all-in-one rig for data-ghosting, ICE-breaking, and…
