RE: Bluetooth

From: Matt Moore (matt.moore@pentest-limited.com)
Date: 03/19/03

  • Next message: Noonan, Wesley: "RE: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability"
    Date: Wed, 19 Mar 2003 17:57:10 +0000
    From: Matt Moore <matt.moore@pentest-limited.com>
    To: pen-test@securityfocus.com
    
    

    Hello Gilles,

    There are a couple of Bluetooth stacks available for Linux, Affix and
    BlueZ - I think Bluez is the 'official' stack. BlueZ includes some tools
    that may be useful from a security testing point of view. Available at
    http://bluez.sourceforge.net/

    You'll need a supported Bluetooth PCMCIA card (or other device) -
    http://www.holtmann.org/linux/bluetooth/devices.html lists some.

    I've used a card from www.brainboxes.com successfully with BlueZ/Linux.
    Whilst the Win32 software that came with the card was a bit flaky in
    some respects (file transfer was unreliable), it worked fine for
    discovering BT enabled devices and the services they offer.

    Regarding papers on bluetooth security, you could start with:

    http://www.informatics.ed.ac.uk/teaching/modules/cn/groupreports/btsecurity.pdf

    Google will turn up lots more papers / information.

    regards,

    Matt Moore
    Pentest Limited, UK.

    > -----Original Message-----
    > From: gilles.lami@hays-dsia.fr [mailto:gilles.lami@hays-dsia.fr]
    > Sent: 19 March 2003 11:16
    > To: pen-test@securityfocus.com
    > Subject: Bluetooth
    >
    > But does anyone know tools or documents to test bluetooth technology (
    > 802.15 ) ?
    > Any help greatly appreciated.
    >
    > Cordialement / Regards
    > Gilles LAMI
    >

    ----------------------------------------------------------------------------
    Did you know that you have VNC running on your network?
    Your hacker does. Plug your security holes now!
    Download a free 15-day trial of VAM:
    http://www2.stillsecure.com/download/sf_vuln_list.html


  • Next message: Noonan, Wesley: "RE: Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability"

    Relevant Pages

    • USB Bluetooth using BLUEZ and kernel 2.6
      ... misconception regarding the bluetooth stack. ... A search on my machine for 'bluez' turns up ... kernel and not my 2.6.7 kernel. ... it is in either bluez-libs or bluez-utils. ...
      (comp.os.linux.questions)
    • Re: [opensuse] How to configure bluetooth
      ... Although I do see there I could setup bluetooth at a network device, ... Bluez uses DBus to get PIN and the easiest solution for me was to ...
      (SuSE)
    • Re: anyone have bluetooth working?
      ... Subject: anyone have bluetooth working? ... There are a set of bluez related updates in updates-testing if you ... I performed a "check-update" after enabling updates-testing and I do not see any bluez updates available. ...
      (Fedora)
    • AT91SAM9260-EK Bluez?
      ... Does anyone have any links or tutorials for getting bluez to run in an ... embedded system to create a network access point via bluetooth? ...
      (comp.arch.embedded)
    • Re: Upgrading Toshiba e800 to Windows Mobile 2004...
      ... I suppose you have a WLAN version? ... since I'll also buy a Bluetooth lan access point... ... needed I'd buy WLAN card for Compact Flash slot... ... > that is also labeled Toshiba SD-BT2. ...
      (microsoft.public.pocketpc.developer)