#1Tools for assessing and exploiting Bluetooth device security and communication vulnerabilities.
Kitploit recommended
bloodcode-spasov/ble-cve2025-attack-new-version# android-ble-cve-2025-4866 🔐 **PoC za CVE-2025-4866 — Android BLE ranjivost (javna verzija)** 📡 Iskorišćavanje slabosti u BLE autorizaciji na…
elevenpaths/devicepairedtoolTool for testing and auditing Bluetooth device pairing security, identifying vulnerabilities in wireless pairing protocols and hardware IoT…
kevinmitchell-oswp-cissp/cve-2023-52709-pocPoC for 2023-52709 - TI Bluetooth stack can fail to generate a resolvable Random Private Address (RPA) leading to DoS for already bonded peer devices.
adrihd/shiningappmask-reverseengineeringReverse Engineering of the Shining App Mask
veteranop/trackemPassive Device Tracker (Android)TrackEm Mobile is a real-time, passive Wi-Fi + Bluetooth LE probe-request scanner designed for OSINT, red-team ops,…
trinadh465/packages_apps_bluetooth_aosp10_r33_cve-2022-20126Android Bluetooth package with a patch for CVE-2022-20126, addressing a security vulnerability in AOSP 10.
keldnorman/cve-2024-0230-blueHelper script to POC of CVE-2024-0230 Bluetooth
wh02m1/cve-2026-77812Proof-of-concept that passively sniffs cleartext BLE DUML traffic from DJI drones to recover Wi-Fi PSK and trusted session UUIDs, demonstrating…
xen0bit/fwbtProof of Concept code for interaction with Firewalla via Bluetooth Low-Energy and exploitation of CVE-2024-40892 / CVE-2024-40893
george0papasotiriou/cve-2026-22017-firmware-update-via-ble-without-authenticationSimulated BLE peripheral exposing an unauthenticated GATT firmware-update characteristic; demonstrates critical CVE-2026-22017 device-takeover…
nsm-barii/cve-2025-15474A denial-of-service vulnerability in the AuntyFey BLE smart padlock allows unauthenticated connection floods to lock out legitimate users. …
jasonw88/esp32-cve-2025-27840-power-trace-experimentFirmware for getting a power trace of the behavior of the bluetooth module on the ESP32 when the ESP32 is sent the undocumented hci bluetooth…
george0papasotiriou/cve-2026-11109-bluetooth-classic-knob-attack-key-negotiation-of-bluetooth-Python simulation of the Bluetooth Classic KNOB attack, showing encryption key-size downgrade and brute-force decryption of intercepted Bluetooth…
george0papasotiriou/cve-2026-0101-ble-address-spoofing-via-weak-resolvable-private-addressPython PoC for CVE-2026-0101 demonstrating BLE address spoofing via replay of a captured Resolvable Private Address to impersonate a trusted…
toxy4ny/rinhitCollects macOS and iOS artifacts to build timelines of network activity, cross-device identity, and physical location correlation for reconnaissance…
coleshelly/bandexploitM1 Band Smart Watch Bluetooth Low Energy Exploit python script (CVE-2018-11631)
avishekdhakal/cve-2023-45866_exploitsExploits Tested in Mi A2 Lite and Realme 2 pro
davidrxchester/smart-sketcher-uploadExploits Bluetooth authentication bypass on smART Sketcher 2.0 toy projector, allowing unauthenticated connection and image upload via Python scripts.
