GATTacker From Sudohackers.,
GATTacker From Sudohackers-
A Node.js package for BLE (Bluetooth Low Energy) security assessment using Man-in-the-Middle and other attacks.
Install
Usage
Configure
Running both components Set up variables in config.env:
-
NOBLE_HCI_DEVICE_ID : noble (“central”, ws-slave) device
-
BLENO_HCI_DEVICE_ID : bleno (“peripheral”, advertise) device
If you run “central” and “peripheral” modules on separate boxes with just one BT4 interface, you can leave the values commented.
-
WS_SLAVE : IP address of ws-slave box
-
DEVICES_PATH : path to store json files
Start “central” device
Connects to targeted peripheral and acts as websocket server.
Debug:
Scanning
Scan for advertisements
Without parameters scans for broadcasted advertisements, and records them as json files (.adv.json) in DEVICES_PATH
Explore services and characteristics
Explore services and characteristics of chosen peripheral. Saves the explored service structure in json file (.srv.json) in DEVICES_PATH.
Hook configuration (option)
For active request/response tampering configure hook functions for characteristic in device’s json services file.
Example:
Functions:
<dynamic|static><Write|Read|Notify>
dynamic: connect to original device
static: do not connect to original device, run the tampering function locally
It will try to invoke the specified function from hookFunctions, include your own. A few examples provided in hookFunctions subdir.
Start “peripheral” device
It connects via websocket to ws-slave in order to forward requests to original device. Static run (-s) sets services locally, does not connect to ws-slave. You have to configure the hooks properly.
MAC address cloning
For many applications it is necessary to clone MAC address of original device. A helper tool bdaddr from Bluez is provided in helpers/bdaddr.
wrapper script:
./mac_adv -a <advertisement_json_file> [ -s <services_json_file> ]
Dump, replay
Dump files are saved in a path configured by DUMP_PATH in config.env (by default dump). More info: https://github.com/securing/gattacker/wiki/Dump-and-replay
Troubleshooting
Turn off, cross fingers, try again
reset device
Running ws-slave and advertise on the same box
With this configuration you may experience various problems.
Try switching NOBLE_HCI_INTERFACE and BLENO_HCI_INTERFACE
hcidump debug
Code:
hcidump -x -t <hci_interface>
That’s all on GATTacker From Sudohackers.
WE ARE HERE FOR SERIOUS BUSINESS, WE DO NOT TOLERATE TIME WASTERS AND BEGGARS TRYING TO BEG OR SCAM US OF OUR PRODUCTS. Payment is Upfront, Our services are not free CONTACT US FOR PURCHASE/INQUIRIES, WE RESPOND ALMOST INSTANTLY : WHATSAPP: sudohackers.com CLICK HERE EMAIL: [email protected] EMAIL US NOW ICQ: sudohackers.com CLICK HERE TELEGRAM: sudohackers.com CLICK HERE
Contact us for support. We sell fresh ATM Hacking, Paypal/Cashapp accounts & Transfers, Dumps with Pin, Western Union Transfers, ATM Skimmers, Bank logins, and lots more.
