btscanner

WVE ID: WVE-2005-0044

Type: Exploit

Status: Candidate

Classification:
Other

Description:
btscanner is a Bluetooth discovery tools for Linux utilzing the curses UI.

Discussion:
btscanner can find devices in discoverable mode by performing inquiry scans. In addition it can perform brute-force scanning to attempt to find devices in non-discoverable mode.

Once a device has been discovered. btscanner obtains its HCI and SDP information and logs it. One particularly interesting thing about btscanner is it includes BD_ADDR ranges of devices vulnerable to BlueSnarfing. Thus when a device is discovered within these ranges it is flagged as being vulnerable to the attack.

Credits
Author: Tim Herman (tim.hurman@pentest.co.uk) : Pentest Limited

References
URL: http://www.pentest.co.uk/cgi-bin/viewcat.cgi?cat=downloads&section=01_bluetooth
WVE: WVE-2005-0003

Released: 2003-11-15

Submitter
Andrew Lockhart (alockhart@networkchemistry.com) : Network Chemistry

Submitted: Tue Nov 29 17:22:50 -0800 2005

Candidate Date: Tue Nov 29 17:29:08 -0800 2005

Menu

btscanner

Recent Entries

News