RE: Bluetooth

From: Rob Shein <shoten(at)starpower.net>
Date: Wed Mar 19 2003 - 12:44:42 EST

I know of several academic documents that outline places to start looking, but I know of no pen-testing tools as of yet. What's your ultimate goal here? Some wired-side vulnerabilities have been found in access points (like Red-M's product, for example, which has a TFTP server you can't turn off...lovely for brute force password attacks).

For documents, I know a few good ones:

http://ece.gmu.edu/courses/ECE543/presentationsF01/pachpa_bluetooth.pdf (good overview)

http://www.giac.org/practical/GSEC/Tu_Niem_GSEC.pdf (good refs at end)

http://www.rsasecurity.com/rsalabs/staff/bios/mjakobsson/bluetooth/bluetooth .pdf (the really good one)

> -----Original Message-----
> From: gilles.lami@hays-dsia.fr [mailto:gilles.lami@hays-dsia.fr]
> Sent: Wednesday, March 19, 2003 6:16 AM
> To: pen-test@securityfocus.com
> Subject: Bluetooth
>
>
> Hello pen-testers,

---

Did you know that you have VNC running on your network? Your hacker does. Plug your security holes now! Download a free 15-day trial of VAM:
http://www2.stillsecure.com/download/sf_vuln_list.html Received on Wed Mar 19 13:07:31 2003