Hey guys, i know this is a question that is largely asked all over the internet but with few responses so far.
And please bare with me if any mistake arises.
Bluetooth hacking on BT4
The updated versions on the latest Blue_ron exploit:
What do i have on my box
First, i wrote a script to configure my Bluetooth device so that i wouldn't have to keep typing every time i need to set it up. This is what it looks like
Incase you want to change it by the file you can navigate to the bluetooth dir
Here you can have control of even more options by playing around with the conf files.
Footprinting the remote device
Scan for devices:
hcitool scan hci0
hcitool info xx:xx:xx:xx:xx:xx
You can also ping the device to know it's range
sdptools browse --l2cap <xx:xx:xx:xx:xx:xx>
This will list all service, channels and alot info about the remote device. You may wonder how this could help, but this is the gold mine of bluetooth hacking. Take a pen and paper and note down the important services with their channel numbers, record handles and value attributtes. Famous ports:-
DUN - Dial up network
OBEX - Object exchange
OPUSH - Object push for file trasfer
SAP - Sim access
Update you sdp db
sdptool add --handle=<Rechandle> --channel=<channel> <service name>
sdptool add --handle = 0x10013 --channel = 4 SAP
Now the stress starts from here,. Trying to bind and then connect the rfcomm to the remote device.
rfcomm bind /dev/bluetooth/rfcomm xx:xx:xx:xx:xx:xx 4
rfcomm connect /dev/bluetooth/rfcomm xx:xx:xx:xx:xx:xx 4
With the above code, my box turns into an error box. First i get the signals to the remote bluetooth phone but nothing can happen untill i accept the request from the phone. Well, the victim may by chance just hit the accept button without knowing..hahahahaaa....! After establishing connection the remote device needs a 16 digit number in order to complete the pairing!
Now guy, take the turn and tell me. How do you deal with this in your own world?
Tried bluesnarfer and bluebugger but still couldn't get so far. The funny thing is that i can make a call through to the remote device but i can't pull it's phonebook!
bluebugger -m Ron -c 7 -a xx:xx:xx:xx:xx:xx dail 9818303531
The phone goes through successfully even without making prompts accept from the screen light blink
These are some of the errors i get when i try it with bluesnarfer and more bluebugger.
Guys, if you are good enough with bluetooth please, help out. No one has yet attempted to find a solution to this question "I assume!" Because there are alot of questions but few answers.