shaikusaf/system_bt_aosp10_r33_cve-2021-0435AOSP Bluetooth stack repository modified for CVE-2021-0435, providing a patched or vulnerable version for analysis and testing of Bluetooth…
shaikusaf/system_bt_aosp10_r33_cve-2021-0431Android Bluetooth stack (Fluoride) with a specific patch for CVE-2021-0431, enabling analysis and testing of Bluetooth vulnerabilities in AOSP 10.
shaikusaf/packages_apps_bluetooth_aosp10_r33_cve-2021-0329Android Bluetooth package with modifications addressing CVE-2021-0329, a critical remote code execution vulnerability in Bluetooth. Provides patched…
ghostesp-revival/ghostespThe open-source wireless research platform for ESP32.
seemoo-lab/internalblueBluetooth experimentation framework for Broadcom and Cypress chips.
marcnewlin/hi_my_name_is_keyboardBluetooth keystroke injection exploit PoCs for CVE-2023-45866, CVE-2024-21306, and CVE-2024-0230 targeting Android, Linux, macOS, and iOS via…
tarlogicsecurity/bluespyPoC to record audio from a Bluetooth device
george0papasotiriou/cve-2026-11109-bluetooth-classic-knob-attack-key-negotiation-of-bluetooth-Python simulation of the Bluetooth Classic KNOB attack, showing encryption key-size downgrade and brute-force decryption of intercepted Bluetooth…
bin4ry/unipwnBLE exploit framework for Unitree robots: command injection via hardcoded AES keys enables remote takeover, payload injection, and wormable…
jasonw88/esp32-cve-2025-27840-power-trace-experimentFirmware for getting a power trace of the behavior of the bluetooth module on the ESP32 when the ESP32 is sent the undocumented hci bluetooth…
scramblr/rf-chaosRF CHAOS is an Android App That Is Designed To Cause Chaos via All RF Adapters Possible - Enjoy!
i-am-shodan/usbarmyknifeUSB Army Knife – the ultimate close access tool for penetration testers and red teamers.
jasondoyle/google-nest-cam-bug-disclosuresPoC vulnerability disclosures for consumer IoT cameras, detailing BLE buffer overflow and WiFi disassociation attacks that can take devices offline.
jasondoyle/komfy-switch-wifi-password-disclosureProof-of-concept and writeup showing how to retrieve Wi-Fi SSID/password from a D-Link Komfy smart switch over BLE by reversing the iOS app’s custom…
antoinet/obikeReverse engineering of the oBike protocol communication (BLE and HTTP)
bishopfox/shining-maskBLE-based tool that automatically discovers and exploits Shining LED Masks by uploading a custom image without user interaction, proving security…
nanopathi/system_bt_aosp10_r33_cve-2021-0476Android Bluetooth stack (AOSP 10 r33) containing CVE-2021-0476 for vulnerability analysis, exploitation testing, and security research.
nanopathi/system_bt_aosp10_r33_cve-2021-0507Exploit for CVE-2021-0507, a remote code execution vulnerability in Android's Bluetooth stack (system/bt). Provides proof-of-concept for the flaw.
