internalblue
bluing
| internalblue | bluing | |
|---|---|---|
| 1 | 10 | |
| 656 | 686 | |
| 1.2% | - | |
| 3.7 | 2.1 | |
| 3 months ago | about 1 year ago | |
| Python | Python | |
| - | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
internalblue
-
Bluetooth relay attacks allow Tesla Model 3 / Y to be unlocked and driven away
I wonder how they deal with the channel hopping? I remember BT "Classic" derives the hoping sequence from the encryption key. Not sure if that changed significantly for BLE? So either they establish normal connections between relays and victims (meaning two keys, one between each relay and each victim), and then forward data coming out of the Link Layer between the attacker devices - or they need to sniff the whole spectrum in case there is just one key between car and fob.
Last time I checked, sniffing the full spectrum of BT required three SDRs, meaning six in total; making this attack rather expensive to pull off (no problem for professional thieves though, I guess). OTOH if they can use any BT stack (or manipulate it with e.g. InternalBlue[1]), potential carjackers just need two Android Phones and good WiFi :(
[1] InternalBlue: https://github.com/seemoo-lab/internalblue
bluing
What are some alternatives?
swiftGuard - Anti-forensic macOS tray application designed to safeguard your system by monitoring USB ports.
bluescan - An intelligence gathering tool for hacking Bluetooth [Moved to: https://github.com/fO-000/bluing]
pytile - 📡 A simple Python API for Tile® Bluetooth trackers
BLEHeartRateLogger - Bluetooth Low-Energy Heart Rate Monitor data logging in Python
miscale2garmin - Mi Body Composition Scale 2 Garmin Connect
flipperzero-firmware - Flipper Zero firmware source code
magicblue - 💡 Unofficial Python API to control Magic Blue bulbs over Bluetooth
pocs_slides - my advisory, poc, slides and scripts related to IoT/protocol security
knob - Key Negotiation Of Bluetooth (KNOB) attacks on Bluetooth BR/EDR and BLE [CVE-2019-9506]