RE: Bluetooth

From: Matt Moore (matt.moore@pentest-limited.com)
Date: Wed Mar 19 2003 - 12:57:10 EST


Hello Gilles,

There are a couple of Bluetooth stacks available for Linux, Affix and
BlueZ - I think Bluez is the 'official' stack. BlueZ includes some tools
that may be useful from a security testing point of view. Available at
http://bluez.sourceforge.net/

You'll need a supported Bluetooth PCMCIA card (or other device) -
http://www.holtmann.org/linux/bluetooth/devices.html lists some.

I've used a card from www.brainboxes.com successfully with BlueZ/Linux.
Whilst the Win32 software that came with the card was a bit flaky in
some respects (file transfer was unreliable), it worked fine for
discovering BT enabled devices and the services they offer.

Regarding papers on bluetooth security, you could start with:

http://www.informatics.ed.ac.uk/teaching/modules/cn/groupreports/btsecurity.pdf

Google will turn up lots more papers / information.

regards,

Matt Moore
Pentest Limited, UK.

> -----Original Message-----
> From: gilles.lami@hays-dsia.fr [mailto:gilles.lami@hays-dsia.fr]
> Sent: 19 March 2003 11:16
> To: pen-test@securityfocus.com
> Subject: Bluetooth
>
> But does anyone know tools or documents to test bluetooth technology (
> 802.15 ) ?
> Any help greatly appreciated.
>
> Cordialement / Regards
> Gilles LAMI
>

----------------------------------------------------------------------------
Did you know that you have VNC running on your network?
Your hacker does. Plug your security holes now!
Download a free 15-day trial of VAM:
http://www2.stillsecure.com/download/sf_vuln_list.html



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:31 EDT