Comments (1)
Hi @guillaumeschatz thanks for the feedback
About the link-layer overflow. While we have explained the attack by using the version indication, it was stated that increasing the Link Layer length field is the main requirement. Even if L2CAP is involved, we are changing the Link Layer length which is processed before the L2CAP is processed. Furthermore, L2CAP has its own length field which we are not changing here.
Nevertheless, we will update the link_layer_length_overflow to alternate between sending a malformed version request and pairing request by this weekend and let you know.
We are aware of the LLID deadlock script issues and already fixed it by a recent commit:
https://github.com/Matheus-Garbelini/sweyntooth_bluetooth_low_energy_attacks/blob/master/llid_dealock.py
As for the Zero LTK installation, some peripherals do not support pairing at all. In this case, it's not possible to trigger the Zero LTK installation. To verify if the peripheral you are testing indeed is not supporting pairing you can try to use your smartphone to manually perform a pairing. In android, you can do that by connecting to the peripheral via the Bluetooth system menu.
from sweyntooth_bluetooth_low_energy_attacks.
Related Issues (20)
- llid_deadlock.py test script hanging HOT 1
- device cannot be correctly detected again after the firmware is flashed HOT 7
- Vulnerable peripherals HOT 3
- Question about the vulnerabilities. HOT 3
- About the vulnerable source code HOT 10
- Encryption Error HOT 8
- Question about LEDs color of NRF dongle flashed in the firware. HOT 1
- Question about sending custom BLE packet HOT 2
- Invalid non-compliance warning
- some questions about capturing the ble packets HOT 12
- Questions about firmware reverse
- Question about BR connection HOT 1
- Error with ADVA with sequential_att_deadlock script
- Truncated L2CAP attack misalignment between script and paper HOT 2
- Telink_Key_Size_Overflow hanging endlessly
- ImportError: No module named html.parser HOT 2
- Routine code about the device under test
- Question about firmware's source code
- AttributeError: AdvA
- NRF52_CMD_CHECKSUM_ERROR HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from sweyntooth_bluetooth_low_energy_attacks.