


CVE-2017-0785 BlueBorne PoC

Scan/Exploit Blueborne CVE-2017-0785

Three-stage Bluetooth BDADDR extraction, DoS & hijack on Fast Pair devices; unpatched primitives outside CVE-2025-36911 scope (no Ubertooth needed)

RF CHAOS is an Android App That Is Designed To Cause Chaos via All RF Adapters Possible - Enjoy!

Proof-of-concept exploit for Blueborne CVE-2017-1000251 enabling Bluetooth denial-of-service attacks on Linux machines via crafted L2CAP packets.

Exploit of the CVE-2025-36911 vulnerability in Python for testing our own equipment

:unlock: transfer ownership of any FB50 smart lock to yourself (CVE-2019-13143)

Exploit implementation for CVE-2023-45866 enabling unauthenticated Bluetooth keyboard injection using DuckyScript payloads on Raspberry Pi.

WhisperPair (CVE-2025-36911) POC for ESP32 device

Unitree G1 RCE PoC & Scripts (CVE-2026-76639 / CVE-2026-76640) technical details at boschko.ca/g1-ble-rce/

CVE-2024-21306 BadBlue implementation (Using DuckyScript)

A security research tool that identifies and demonstrates the CVE-2025-36911: Fast Pair Pairing Mode Bypass vulnerability

PoC for 2023-52709 - TI Bluetooth stack can fail to generate a resolvable Random Private Address (RPA) leading to DoS for already bonded peer devices.

Helper script to POC of CVE-2024-0230 Bluetooth

Proof-of-concept that passively sniffs cleartext BLE DUML traffic from DJI drones to recover Wi-Fi PSK and trusted session UUIDs, demonstrating…

M1 Band Smart Watch Bluetooth Low Energy Exploit python script (CVE-2018-11631)

Exploits Bluetooth authentication bypass on smART Sketcher 2.0 toy projector, allowing unauthenticated connection and image upload via Python scripts.