caeruleus
praetorian-inc/caeruleusSingle Go binary for Bluetooth Low Energy security testing on Linux/BlueZ: scan, enumerate GATT, read/write/notify, fuzz characteristics, and run…
bluetooth-securityfuzzinghardware-iot-security+8
56
praetorian-inc/caeruleusSingle Go binary for Bluetooth Low Energy security testing on Linux/BlueZ: scan, enumerate GATT, read/write/notify, fuzz characteristics, and run…
trinadh465/device_renesas_kernel_aosp10_r33_cve-2021-33034Kernel source tree for Renesas AOSP10 R33 with a patch for CVE-2021-33034, addressing a use-after-free vulnerability in the Bluetooth HCI event…
wireshark/wiresharkCapture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…
anssi-fr/ultrablueUser-friendly Lightweight TPM Remote Attestation over Bluetooth
tarlogicsecurity/bluespyPoC to record audio from a Bluetooth device
nccgroup/ble-replayBLE-Replay is a Bluetooth Low Energy (BLE) peripheral assessment tool
matheus-garbelini/sweyntooth_bluetooth_low_energy_attacksProof of Concept of Sweyntooth Bluetooth Low Energy (BLE) vulnerabilities.
hackingdave/btrpa-scanBluetooth Low Energy (BLE) scanner with Resolvable Private Address (RPA) resolution using Identity Resolving Keys (IRKs)
oxasploits/oxasploitsA number of exploits and tools I've written for CVEs accredited to Marshall Whittaker/oxagast
trunkrecorder/trunk-recorderRecords calls from a Trunked Radio System (P25 & SmartNet)
sastraadiwiguna-purpleeliteteaming/cve-2025-13834-a-bluetooth-rfcomm-out-of-bounds-read-vulnerability-in-modern-wireless-devicesCVE-2025-13834 Technical Summary Vulnerability Type: Memory Disclosure / Out-of-Bounds (OOB) Read (CWE-125). CVSS Score: 7.5–8.1 (High/Critical). …
naren-jayram/linux-heap-based-type-confusion-in-l2capCVE-2020-12351
nsm-barii/cve-2025-15474A denial-of-service vulnerability in the AuntyFey BLE smart padlock allows unauthenticated connection floods to lock out legitimate users. …
rfidresearchgroup/proxmark3Hardware tool for RFID analysis, emulation, and penetration testing. Supports 125kHz, 13.56MHz protocols (MIFARE, iClass, ISO14443/15693) with key…
earlephilhower/arduino-picoRaspberry Pi Pico Arduino core, for all RP2040 and RP2350 boards
nmap/nmapHigh-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…
embedi/ble_norton_coreProof-of-concept exploit demonstrating command injection via BLE service in Norton Core Secure WiFi Router (CVE-2018-5234). Includes SSH access setup…
ymsniper/whisper_bullyThree-stage Bluetooth BDADDR extraction, DoS & hijack on Fast Pair devices; unpatched primitives outside CVE-2025-36911 scope (no Ubertooth needed)