Locate a Bluetooth device's full address when only part of it is known, for an authorized security assessment.
Survey nearby Bluetooth traffic with Ubertooth hardware to find candidate device addresses.
Resolve and log the readable name of a Bluetooth device once its address has been confirmed.
| ymsniper/bbf | nalltama/raiv | tencent-hunyuan/hy-mt2 | |
|---|---|---|---|
| Stars | 76 | 76 | 76 |
| Language | Python | Python | Python |
| Setup difficulty | moderate | easy | hard |
| Complexity | 3/5 | 2/5 | 4/5 |
| Audience | developer | general | researcher |
Figures from each repo's GitHub metadata at analysis time.
Requires Linux with BlueZ, a Bluetooth adapter, root privileges, and optionally Ubertooth hardware.
BBF is a command line security research tool for Bluetooth devices. Every Bluetooth device has an address called a BD_ADDR, made of three parts, and BBF focuses on finding one unknown part of that address, called the UAP, when you already know the other part called the LAP. It does this by trying every one of the 256 possible values and pinging each one, which usually takes a few minutes at most. If you do not already know the LAP portion of the address, BBF can instead use an Ubertooth One hardware device to listen for nearby Bluetooth traffic and suggest candidate addresses to investigate, which you can then feed into the main sweep. Once BBF finds a complete, working address, it also tries to look up the device's readable name over the air, and can save every result it finds, including the address, name, and how it was found, to a log file for later review. The tool is meant for security researchers and penetration testers who are authorized to test specific devices, since resolving a hidden Bluetooth address defeats the privacy protection that comes from a device being set to non-discoverable. The README is explicit that this should only be used on devices you own or have written permission to test, since locating or identifying someone else's device without consent may be illegal. BBF runs on Linux and depends on BlueZ, the standard Linux Bluetooth stack, along with a Bluetooth adapter and root privileges to run its commands. The Ubertooth survey feature is optional and requires separate hardware. Installation is done with pip after cloning the repository from GitHub, and the tool also bundles an optional companion program that can be built separately for more advanced testing scenarios.
BBF is a command line tool that brute-forces an unknown part of a Bluetooth device's hidden address, for authorized security testing only.
Mainly Python. The stack also includes Python, BlueZ, Linux.
No license information is stated in the explanation, so terms of use are unclear.
Setup difficulty is rated moderate, with roughly 30min to a first successful run.
Mainly developer.
This repo across BitVibe Labs
double-check against the repo, no cap.