Passive Bluetooth Monitoring in Scapy

Presented at DEF CON 20 (2012), July 27, 2012, 11 a.m. (20 minutes)

Recognizing a need to support passive bluetooth monitoring in Scapy, Python's interactive monitoring framework, a project was launched to produce this functionality. Through this functionality, a new means for interactively observing bluetooth was created along with Python APIs to assist in the development of bluetooth auditing, pentesting and exploitation tools. The project supplements the work of Michael Ossman et al by providing Python extensions and Scapy modules which interact with an Ubertooth dongle. The project also provides support for other passive bluetooth techniques not present in the current Ubertooth core software such as NAP identification, vendor lookup, extended logging and more. In conjunction with this presentation, the source for this project will be released along with distribution packages for easy installation.

Presenters:

• Ryan Holeman
  Ryan Holeman resides in Austin Texas where he works as a software developer specializing in backend services. He has a Masters of Science in Software Engineering and has published papers though ICSM and ICPC. His spare time is mostly spent digging into various network protocols and shredding local skateparks.

Links:

• https://defcon.org/html/defcon-20/dc-20-speakers.html#Holeman
• https://infocon.org/cons/DEF CON/DEF CON 20/DEF CON 20 video and slides/DEF CON 20 - Ryan Holeman - Passive Bluetooth Monitoring in Scapy - Video and Slides.mp4 (Video and Slides)
• https://www.youtube.com/watch?v=P4akUvCB0S0

Tags:

• Bluetooth

Similar Presentations:

• DEF CON 11 (2003) / Bluetooth
• Black Hat USA 2012 / Passive Bluetooth Monitoring in Scapy
• REcon 2015 / Building a Better Bluetooth Attack Framework: Ubertooth attack and injection tool suite