RE: Bluetooth

[Matt Moore <matt.moore () pentest-limited com>]

Hello Gilles,

There are a couple of Bluetooth stacks available for Linux,  Affix and 
BlueZ - I think Bluez is the 'official' stack. BlueZ includes some tools 
that may be useful from a security testing point of view. Available at 
http://bluez.sourceforge.net/

You'll need a supported Bluetooth PCMCIA card (or other device) - 
http://www.holtmann.org/linux/bluetooth/devices.html lists some.

I've used a card from www.brainboxes.com successfully with BlueZ/Linux. 
Whilst  the Win32 software that came with the card was a bit flaky in 
some respects (file transfer was unreliable), it worked fine for 
discovering BT enabled devices and the services they offer.

Regarding papers on bluetooth security, you could start with:

http://www.informatics.ed.ac.uk/teaching/modules/cn/groupreports/btsecurity.pdf

Google will turn up lots more papers / information.

regards,

Matt Moore
Pentest Limited, UK.









> -----Original Message-----
> From: gilles.lami () hays-dsia fr [mailto:gilles.lami () hays-dsia fr]
> Sent: 19 March 2003 11:16
> To: pen-test () securityfocus com
> Subject: Bluetooth
>
> But does anyone know tools or documents to test bluetooth technology (
> 802.15 ) ?
> Any help greatly appreciated.
>
> Cordialement / Regards
> Gilles LAMI
>



----------------------------------------------------------------------------
Did you know that you have VNC running on your network? 
Your hacker does. Plug your security holes now! 
Download a free 15-day trial of VAM:
http://www2.stillsecure.com/download/sf_vuln_list.html