This repository provides proof-of-concept (PoC) scripts for demonstrating the BlueBorne vulnerabilities (CVE-2017-0781, CVE-2017-0785, and CVE-2017-1000251). It includes exploit code targeting Android Remote Code Execution (RCE), Linux RCE (for Amazon Echo and Samsung Gear S3), and a framework for interacting with Bluetooth Low Energy (BLE) devices. The scripts are primarily written in Python and leverage libraries like pybluez, pwn, and scapy.
The repository offers a consolidated collection of PoC exploits for multiple BlueBorne vulnerabilities, simplifying experimentation and analysis. It includes a general-purpose testing framework for BLE communication and a dedicated tool for capturing Bluetooth MAC addresses. The scripts are structured into separate directories for Android, Linux, and BLE-related exploits, promoting organization and clarity.
- Android RCE: Exploits the Android RCE vulnerability (CVE-2017-0781) for demonstration and analysis.
- Linux RCE Framework: Provides a framework for exploiting the Linux RCE vulnerability (CVE-2017-1000251) on Amazon Echo and Samsung Gear S3 devices.
- BLE Testing Framework: Includes a general testing framework using
scapyfor sending and receiving raw L2CAP messages. - MAC Address Sniffer: Offers a tool for capturing Bluetooth MAC addresses (BDADDR) over-the-air using an nRF24L01 chip.
The project appears to be a collection of PoC scripts for research and demonstration purposes. It's unlikely to be actively maintained, but provides valuable historical context and examples of BlueBorne exploitation techniques. Documentation is minimal, relying heavily on README comments.
This repository is useful for security researchers, penetration testers, and developers interested in understanding and analyzing the BlueBorne vulnerabilities. It offers hands-on examples of exploiting these flaws and provides insights into potential attack vectors. It's a valuable resource for learning about Bluetooth security and the impact of these critical vulnerabilities.