Tackle Boxes - Bluetooth Exploit Toolkit

[Lisbeth]

Hello everyone! 

I work in Network Security and Software Exploits in my school, mostly to just see how it works
and how something as simple as a feature on a phone could cause a million problems.
(I'm looking at you Bluetooth...  )

So because I have to work with all kinds of weird devices that are either overly pricey and unreliable,
or just from some country that has been known for selling dangerous knockoffs or exploited hardware,
I have decided to start designing a new tool of my own called Tackle Boxes.

The first one I'm working on is for Bluetooth, every single thing with a chip in it pretty much has Bluetooth
and with that comes a lot of vulnerabilities. So I want to make a device that can:

• Connect to a computer through USB (Micro controller takes care of that most likely)
• Has a display that can be programmed (Maybe a small recycled Nokia phone display w/ backlight)
• A micro controller that can support Processing compiler (Most likely Arduino, but open to alternatives)
• Has a battery in it for portable usage (Preferably Lithium Ion)

I do not intend to sell it or market it, but it's just for a demonstration on how vulnerable ANYTHING can be.

If you guys can suggest good Bluetooth Modules, Micro controllers, Rechargeable Batteries or even tips
on how to tackle (God I made a pun...) this project, much appreciated! ^^

There is another thing I wanna do to make this, and it's to make it a tad stylish and compact, like lights and/or
a good housing, so again tips are appreciated.

I haven't sketched it out JUST yet, but I'm working through a couple drafts.

[Wilksey]

Look up the Ubertooth One.

[Lisbeth]

Look up the Ubertooth One.

Buying something similar is not making it personal though...
Some people prefer to make their own model plane rather than just buy one.

[tonyarkles]

Buying something similar is not making it personal though...
Some people prefer to make their own model plane rather than just buy one.

That's totally fine, and I'd encourage you to do so! Nothing quite like designing and programming a piece of hardware yourself to get a really solid understanding of how it works.

However, there's also something to be said for taking an existing piece of gear and figuring out how it works. Even just to help put together your block diagram. The Ubertooth one has fantastic documentation, and lists all of the part numbers that it uses. Look at the parts list, look up the parts they used, and decide whether those are parts that you might want to use too!

Edit: also, I can say that the TI CC2400 (which is used on the Ubertooth) is a super interesting module for bluetooth hacking. It's not a bluetooth module per se, but it's sufficiently compatible that you can extract a raw Bluetooth bitstream out of it. Most bluetooth-specific modules that you're going to find probably *won't* have that capability, since they'll be targetted at people who want to use BT in-spec and in a legitimate way

[Wilksey]

I meant for a reference design!

The UTOne can go beyond BT,you can learn how Michael interfaces with the TI chipset for example!  Also look at the SDR HackRF

[Lisbeth]

I meant for a reference design!

The UTOne can go beyond BT,you can learn how Michael interfaces with the TI chipset for example!  Also look at the SDR HackRF

Oh goodness! I'm so sorry! >~<"
Usually people just say "Just buy this instead" and be rude...
I'm sorry!

[Wilksey]

Well, you can do if you want to buy off the shelf, but Bluetooth modules are not really useful for hacking, they need to be in "listening" / promiscuous mode  (more for WiFi, but a Bluetooth equivalent), the TI chipset will allow you access to the raw data which is what you want, I would (and have personally) buy a Ubertooth one, use it as a development platform if you will for your own personal design.

Most people on here will help you if you have specific questions, but will not do it for you, helping also includes pointing you in the direction of something which you can learn from, such as the UT one.

If you do a bit of forward thinking, using that TI chipset will also allow you to progress onto other 2.4GHz frequency protocols like WiFi, ZigBee, etc

[Lisbeth]

Well, you can do if you want to buy off the shelf, but Bluetooth modules are not really useful for hacking, they need to be in "listening" / promiscuous mode  (more for WiFi, but a Bluetooth equivalent), the TI chipset will allow you access to the raw data which is what you want, I would (and have personally) buy a Ubertooth one, use it as a development platform if you will for your own personal design.

Most people on here will help you if you have specific questions, but will not do it for you, helping also includes pointing you in the direction of something which you can learn from, such as the UT one.

If you do a bit of forward thinking, using that TI chipset will also allow you to progress onto other 2.4GHz frequency protocols like WiFi, ZigBee, etc

Sounds like a good idea! ^^ I'll check out ubertooth then, and see where I go from there. I'll post updates now and then.