Comments on: Underground – Bluetooth Hacking

By: insanity

insanity — Fri, 11 Dec 2009 02:21:06 +0000

I have released a new Bluetooth Auditing tool.

You can find it here: http://www.h4x.co.cc

By: renegade

renegade — Sun, 14 Jun 2009 03:24:35 +0000

Nevermind, service “Bluetooth modem” (channel works…I don’t know why I didn’t think of trying that before, lol.

By: renegade

renegade — Sat, 13 Jun 2009 05:20:38 +0000

This may be a dumb question, but do all Bluetooth devices have a serial interface?

Here is the output of “sdptool browse” on my phone:
http://pastebin.com/f61a23d03

Judging from that output, the only channel that could possibly be acting as a serial port is channel 16, but after I configure and start rfcomm0 and try to connect with minicom, I get a dead console (i.e. I can’t type anything and I don’t receive data). Any help would be greatly appreciated.

By: Strome

Strome — Fri, 01 May 2009 17:56:10 +0000

I don’t know. When I made this video the firmware on my phone was the oldest which is existing for K800i, because I bought the phone when it was released in 2006 I think.
And when I upgraded my firmware I chose the newest which was available. But when I remember back I can’t say which version it was exactly. Sorry

And at the moment I have some trouble whith my new video, because something isn’t working. I don’t know how much time it will take until I can post it. But I don’t give up!

Strome

By: user209

user209 — Thu, 30 Apr 2009 09:12:04 +0000

@Strome:
A very good video thanks, do you know which firmware version is vulnerable for the K800i and which firmware version patches the vulnerability?

Thanks,

Craig

By: anddresn

anddresn — Tue, 21 Apr 2009 22:40:12 +0000

I’ll be waiting for that video Strome

Thanks,

Andres

By: Strome

Strome — Tue, 21 Apr 2009 15:03:52 +0000

Hi,

@ anddresn:
I think your phone is not vulnerable with bluebug then.

At this point I should say for all guys here: Sony Ericsson updated the firmware and now the BlueBug-Attack do not work any longer on a K800i-phone. Now when I try this the phone shows a message “%hostname% is trying to access the phone? Allow?” And the victim can press “Deny”
And if Sony Ericsson updated its phones i believe the ohter manufacturers did that, too.

But I still started working on a new video including an attack which will work on updated phones.

@ Fingon:
There is a way that the victim’s phone will send a SMS Message to your phone including the phonenumber, but I don’t know the command for this …
If you wanna tell the victim that the bluetooth is on there is a better way I will in my new vid then.

Strome

By: anddresn

anddresn — Tue, 21 Apr 2009 00:38:25 +0000

Hey Strom,

I’m getting stuck where i type the command sudo minicom -m after configuring minicom and saving the new configuration. When i try sudo minicom -m i get minicom: cannot open /dev/rfcomm0: no such file or directory. I have checked the rfcomm.conf file and it has the MAC address and the channel for the serial port. And also shows when i type “ls /dev” I’m running ubuntu 8.10 just like you. i believe it’s a permissions issue but i can’t figure it out.

Thanks

Andres

By: GlaDOS

GlaDOS — Wed, 25 Mar 2009 17:16:38 +0000

Hi thanks for a great vid. Really cool to see how badly secured this technology is.

I have a problem thou. When I use the
# rfcomm bind /dev/rfcomm0
I get the samme error that magicaj92 is getting:
Can’t find a config entry for rfcomm0
I am using ubuntu 8.04 and checked the dev directory and cant find the file rfcomm0. How to restore this file and if you could provide some more underlying information about what this file does I’m always curious..

Ok before i subitted I found out what was wrong. In ubuntu the /etc/bluetooth/rfcomm.conf file was by default commented out. The hole thing was in comments like:
# device 00:00:00:00:00:00
So I just uncommented all the fields that was needed and now it works fine! Hope this works for u to magicaj.

By: maps007

maps007 — Fri, 20 Mar 2009 18:22:27 +0000

@ Strome ,
ok that is cleared here..Sorry I was confused for that b’caz i always use live cd which is having administrative rights sorry bro..and I will wait and regularly check for updates here.