Sniffle
nccgroup/sniffleBluetooth 5 and 4.x LE sniffer for TI CC1352/CC26x2 hardware with support for extended advertising, all PHY modes, MAC/RSSI filtering, and PCAP…
bluetooth-securityembedded-systems-securityhardware-hacking+5
1.2k
nccgroup/sniffleBluetooth 5 and 4.x LE sniffer for TI CC1352/CC26x2 hardware with support for extended advertising, all PHY modes, MAC/RSSI filtering, and PCAP…
ghostesp-revival/ghostespThe open-source wireless research platform for ESP32.
flipperdevices/flipperzero-firmwareFlipper Zero firmware source code
elevenpaths/devicepairedtoolTool for testing and auditing Bluetooth device pairing security, identifying vulnerabilities in wireless pairing protocols and hardware IoT…
threat9/routersploitExploitation Framework for Embedded Devices
brucedevices/firmwarePredatory ESP32 Firmware
electroniccats/catsniffer-firmwareFirmware repository for CatSniffer, a multi-protocol IoT security research board supporting BLE, Zigbee, Sub-1 GHz, and more, with version-specific…
wh02m1/cve-2026-78306Proof-of-concept exploiting DJI drone Bluetooth DUML command injection, sending unauthenticated commands to read credentials, alter Wi-Fi config, and…
eternityforest/lazymeshProof of concept IoT/Ham Radio mesh network with global routing over the internet
seemoo-lab/internalblueBluetooth experimentation framework for Broadcom and Cypress chips.
george0papasotiriou/cve-2026-22017-firmware-update-via-ble-without-authenticationSimulated BLE peripheral exposing an unauthenticated GATT firmware-update characteristic; demonstrates critical CVE-2026-22017 device-takeover…
seemoo-lab/fitness-appBLE-based Fitbit research tool for authentication replay, encrypted activity dump decryption, memory/firmware extraction, and custom firmware…
insecurityofthings/uc_mousejackMousejack for ATmega32u4
matheus-garbelini/esp32_bluetooth_classic_snifferActive Bluetooth BR/EDR Sniffer/Injector as cheap as any ESP32 board can get. Works with Scapy ;-)
jasondoyle/google-nest-cam-bug-disclosuresPoC vulnerability disclosures for consumer IoT cameras, detailing BLE buffer overflow and WiFi disassociation attacks that can take devices offline.
spiritualmachines/buds-auditNo-dongle, no-root Bluetooth security assessment tool for wireless earbuds affected by the Airoha SDK vulnerability chain (CVE-2025-20700/20701/20702)
thorat-shubham/jxl_infotainment_cve-2025-63895Proof-of-concept for CVE-2025-63895: Bluetooth Classic LMP buffer overflow exploitation in JXL 9-inch Android car infotainment systems, enabling…
jasonw88/esp32-cve-2025-27840-power-trace-experimentFirmware for getting a power trace of the behavior of the bluetooth module on the ESP32 when the ESP32 is sent the undocumented hci bluetooth…