
CVE-2026-77812
Proof-of-concept that passively sniffs cleartext BLE DUML traffic from DJI drones to recover Wi-Fi PSK and trusted session UUIDs, demonstrating…

Proof-of-concept that passively sniffs cleartext BLE DUML traffic from DJI drones to recover Wi-Fi PSK and trusted session UUIDs, demonstrating…

Proof-of-concept exploit for BLE cache poisoning in Bitchat 1.15.0, demonstrating a man-in-the-middle attack that poisons the Bluetooth Low Energy…

Firmware repository for CatSniffer, a multi-protocol IoT security research board supporting BLE, Zigbee, Sub-1 GHz, and more, with version-specific…

Capture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…

Reverse engineering of the oBike protocol communication (BLE and HTTP)

BLEBoy is a training tool to teach users about BLE security by providing a single BLE peripheral that can be used to experiment with each BLE pairing…

BLESuite is a Python package that provides an easier way to test Bluetooth Low Energy (BLE) device

Proof of Concept of Sweyntooth Bluetooth Low Energy (BLE) vulnerabilities.

A number of exploits and tools I've written for CVEs accredited to Marshall Whittaker/oxagast

iOS Bluetooth PAN vulnerability that opens USB port 62078 and displays Ethernet icon without any adapter (€0). Apple sells a €89.95 adapter for the…

Snoopy v2.0 - modular digital terrestrial tracking framework

A TUI bluetooth utility for radar analysis and war driving 🦉

Source code for the book "Violent Python" by TJ O'Connor. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards…

Proof of Concept code for interaction with Firewalla via Bluetooth Low-Energy and exploitation of CVE-2024-40892 / CVE-2024-40893

Proof-of-concept exploit for CVE-2024-34463 targeting insufficient Bluetooth security in BPL Smart Weighing Scale PWS-01-BT. Includes BLE scanner and…

Improper Access Control in Tata Sonata Smartband

Blueborne CVE-2017-0785 Android information leak vulnerability

ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32