RE: Bluetooth

From: Matt Moore <matt.moore(at)pentest-limited.com>
Date: Wed Mar 19 2003 - 12:57:10 EST

Hello Gilles,

There are a couple of Bluetooth stacks available for Linux, Affix and BlueZ - I think Bluez is the 'official' stack. BlueZ includes some tools that may be useful from a security testing point of view. Available at http://bluez.sourceforge.net/

You'll need a supported Bluetooth PCMCIA card (or other device) - http://www.holtmann.org/linux/bluetooth/devices.html lists some.

I've used a card from www.brainboxes.com successfully with BlueZ/Linux. Whilst the Win32 software that came with the card was a bit flaky in some respects (file transfer was unreliable), it worked fine for discovering BT enabled devices and the services they offer.

Regarding papers on bluetooth security, you could start with:

http://www.informatics.ed.ac.uk/teaching/modules/cn/groupreports/btsecurity.pdf

Google will turn up lots more papers / information.

regards,

Matt Moore
Pentest Limited, UK.

> -----Original Message-----

---

Did you know that you have VNC running on your network? Your hacker does. Plug your security holes now! Download a free 15-day trial of VAM:
http://www2.stillsecure.com/download/sf_vuln_list.html Received on Wed Mar 19 13:09:09 2003