Comments (4)
Hi mr-slonn - did you get it working in the end? any of the tested attacks work for you??
If you have managed to flash the ESP32, you only need the ESP-PROG for the fast serial connection. So you only need 3V3, GND, Rx, Tx pins connected. Don't need the JTAG pins hooked up.
I've noticed that same ERROR line in the logs - but only sometimes.
I think what happens is - one of your earlier attempts failed - and something got stuck - prom on the ESP.
If you unplug-and replug the device, you usually get past that error.
from braktooth_esp32_bluetooth_classic_attacks.
If I do "sudo esptool.py erase_flash
" and I see
esptool.py v4.5.1
Found 3 serial ports
Serial port /dev/ttyUSB0
Connecting...........
Detecting chip type... Unsupported detection protocol, switching and trying again...
Connecting......
Detecting chip type... ESP32
Chip is ESP32-D0WD-V3 (revision v3.0)
Features: WiFi, BT, Dual Core, 240MHz, VRef calibration in efuse, Coding Scheme None
Crystal is 40MHz
MAC: 8c:4b:14:15:c1:40
Uploading stub...
Running stub...
Stub running...
Erasing flash (this may take a while)...
Chip erase completed successfully in 21.1s
Hard resetting via RTS pin...
I have to do sudo python 3 firmware.py flash/dev/ttyUSB0
i.e. use ttyUSB0 ?
Just when I use "sudo python 3 firmware.py flash /dev/ttyUSB1
" then I get the following message:
Serial port /dev/ttyUSB1
Connecting........_____....._____....._____....._____....._____....._____....._____
A fatal error occurred: Failed to connect to ESP32: Timed out waiting for packet header
*** [upload] Error 2
And when I use "sudo python 3 firmware.py flash /dev/ttyUSB0
" then I get the following message:
Serial port /dev/ttyUSB0
Connecting....
Chip is ESP32-D0WD-V3 (revision 3)
......
Writing at 0x00010000... (7 %)
...
Writing at 0x00040000... (100 %)
Wrote 328416 bytes (199214 compressed) at 0x00010000 in 4.4 seconds (effective 591.0 kbit/s)...
Hash of data verified.
Leaving...
Hard resetting via RTS pin...
after_upload(["upload"], [".pio/build/esp32doit-devkit-v1-serial/firmware.bin"])
[Errno 2] could not open port /dev/ttyUSB1: [Errno 2] No such file or directory: '/dev/ttyUSB1'
==== [SUCCESS] Took 7.15 seconds ====
Environment Status Duration
-------------------------- -------- ------------
esp32doit-devkit-v1-jtag IGNORED
esp32doit-devkit-v1-serial SUCCESS 00:00:07.147
=== 1 succeeded in 00:00:07.147 ===
I don't understand what this message means:
after_upload(["upload"], [".pio/build/esp32doit-devkit-v1-serial/firmware.bin"])
[Errno 2] could not open port /dev/ttyUSB1: [Errno 2] No such file or directory: '/dev/ttyUSB1'
Successfully or still not successfully I recorded the firmware on ESP32?
Because then the "bin/bt_fuzzer" command does not start, i.e. it starts, but there is an error in the error log as I wrote earlier:
[Monitor] ERROR: Could not open /dev/ttyUSB1@115200
[ESP32BT] Firmware version not detected
from braktooth_esp32_bluetooth_classic_attacks.
[Errno 2] could not open port /dev/ttyUSB1: [Errno 2] No such file or directory: '/dev/ttyUSB1'
You might need to check whether your board really has /dev/ttyUSB1 or just /dev/ttyUSB0
As braktooth is intended to be used with ESP-WROVER-KIT or ESP-ETHERNET-KIT, /dev/ttyUSB1 should always be present.
Linux can also assign a different tty port if you already have something there. Therefore I recommend you check with dmesg -w
which is the second port added by linux. Your logs mention that you have 3 serial ports, therefore maybe you have something on /dev/ttyUSB3?
Connecting......................................_____
A fatal error occurred: Failed to connect to ESP32: Timed out waiting for packet header
In regards to the Timed out waiting for packet header
error. In some board and/or computers you have to press and hold the BOOT button of your esp32 board during the flash process.
from braktooth_esp32_bluetooth_classic_attacks.
Hi everyone, thank You for Your input in advance!
My environment:
OS: x86_64 Ubuntu 23.04
Device: ESP32-WROVER-DEV (ESP32-WROVER-E), Chip: ESP32-D0WDQ6 (Rev 1)
Your comments on below questions/issues/remarks are highly appreciated!:
-
When running the Braktooth BT classic PoC, I'm getting similar errors as already mentioned in the thread, therefore:
Could someone please elaborate regarding the need/requirement to have exactly ESP-WROVER-KIT or ESP-ETHERNET-KIT hardware and exactly two ttyUSB* devices to get the Braktooth BT classic attacks PoC running? -
I was able to run the sniffer code OK as per here: https://github.com/Matheus-Garbelini/esp32_bluetooth_classic_sniffer; therefore a bit confused, why the Braktooth classic attacks PoC are not working?
-
While reviewing some code and overall description of the Bluetooth Classic Sniffer project, just got the gut-feeling it would be possible to produce the Braktooth BT Classic attacks using the Sniffer project and the ESP32-WROVER-E putting some additional effort, is that correct?
from braktooth_esp32_bluetooth_classic_attacks.
Related Issues (20)
- How to find the anomaly that caused crash while running BT Fuzzer
- Kinda working - need some help please
- [Question] Dev Kit with LCD Screen and Kali Linux HOT 1
- xcb io crash HOT 3
- [Question} Shared Library Error HOT 2
- Error while running commands on Kali HOT 1
- General use issue HOT 2
- Run with arm-based system HOT 1
- Two questions on KNOB PoC
- Minor documentation nits
- Firmware restarts if sending packet from rx_post_dissection(), but works if sending from tx_post_dissection()
- Error with sdp_general_query's handling of -a (basically sdp_general_query doesn't work by default)
- Compatibility Question
- Is this compatible with ubuntu 20.04\22.04 HOT 1
- Source request form not working? HOT 1
- Can't flash firmware / having trouble getting started HOT 2
- Can't get the dissector HOT 1
- Trouble with bt_exploiter
- ESP-WROVER-KIT or ESP-WROVER-KITVE? HOT 1
- Unable to clone/ fetch wdissector.tar.zst HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from braktooth_esp32_bluetooth_classic_attacks.