Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
smart-sketcher-upload — Exploits Bluetooth authentication bypass on smART Sketcher 2.0 toy projector, allowing unauthenticated connection and image upload via Python scripts. | Kitploit
Tools/GitHubGitHub/davidrxchester/smart-sketcher-upload
Bluetooth SecurityIoT SecurityVulnerability AnalysisExploitationWireless SecurityPenetration TestingHardware & IoT Security
GitHubdavidrxchester/smart-sketcher-upload

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

smart-sketcher-upload

Exploits Bluetooth authentication bypass on smART Sketcher 2.0 toy projector, allowing unauthenticated connection and image upload via Python scripts.

View RepositoryWebsite
37 months agoNot yet reviewed

smART Sketcher 2.0 - Bluetooth Authentication Bypass

CVE-2026-0842 | Missing Authentication on BLE Interface

Overview

The smART Sketcher 2.0 is a Bluetooth-enabled toy projector that lets kids trace images. It has no authentication on its Bluetooth connection - anyone within range can connect and push images to the device without pairing or notification.

Demo

Bluetooth Shell

Image Upload

The Issue

  • Device broadcasts as "smART Sketcher 2.0" over Bluetooth
  • No pairing required to connect
  • No authentication to send commands or images
  • No notification when someone connects
  • Works from 30+ feet away

This means anyone in an apartment building, park, or public space can push content to a child's toy without the parent knowing.

Usage

root@kitploit:~
pip install bleak pillow
python bt_shell.py          # interactive bluetooth shell
python upload_image.py image.jpg   # upload an image

Disclosure

Vendor was contacted but did not respond. Full writeup:

CWE-306 | CVE Record

Download Tool