Bluetooth Hacking: Tools And Techniques
summary
Concrete reverse‑engineering steps and outcomes: uses Android HCI logging and Wireshark to capture pre‑encryption HCI dumps; heart monitor leaks RR intervals in clear; BLE blood‑pressure device sends systolic/diastolic without encryption and exposes a firmware‑update service; padlock uses custom opaque crypto; classic headset yields recoverable audio; Bluetooth credit card stores LE long‑term key in host logs so physical access can extract card numbers; electric skateboard lacks encryption allowing remote hijack (CVE issued).
AI-written summary · about
chapters (11)
- 0:00Introduction to Bluetooth hacking
- 2:10Why focus on Bluetooth security
- 9:54Capturing Bluetooth data with tools
- 12:03Case study: BLE heart rate monitor
- 20:14Case study: BLE blood pressure monitor
- 27:31Case study: BLE padlock
- 32:00Case study: Classic Bluetooth headset
- 36:34Case study: BLE credit card
- 41:05Case study: BLE electric skateboard
- 45:45Common Bluetooth security flaws
- 47:09Conclusion and call to action
related talks
24mAttacking Bluetooth LE Design and Implementation in Mobile + Wearables Ecosystems
30mUnfit Story of Fitness Trackers: Hacking BLE Fitness Trackers
43mWhen encryption is not enough: Attacking Wearable
30mUnfit Story of Fitness Trackers: Hacking BLE Fitness Trackers
35mDeep into Android Bluetooth Bug Hunting: New Attack Surfaces and Weak Code Patterns
42mBreakMi: Reversing, Exploiting & Fixing Fitness Tracking Ecosystems
48mCreating a Bluetooth Toolbox
46mBlueMaster: Bypassing and Fixing Bluetooth-based Proximity Authentication