<?xml version="1.0"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
	<id>https://elvis.hcw.ac.at/wiki/api.php?action=feedcontributions&amp;feedformat=atom&amp;user=LHerenda</id>
	<title>Elvis Wiki - User contributions [en]</title>
	<link rel="self" type="application/atom+xml" href="https://elvis.hcw.ac.at/wiki/api.php?action=feedcontributions&amp;feedformat=atom&amp;user=LHerenda"/>
	<link rel="alternate" type="text/html" href="https://elvis.hcw.ac.at/wiki/index.php/Special:Contributions/LHerenda"/>
	<updated>2026-09-10T18:55:31Z</updated>
	<subtitle>User contributions</subtitle>
	<generator>MediaWiki 1.41.5</generator>
	<entry>
		<id>https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=8125</id>
		<title>Bluetooth LE Hacking</title>
		<link rel="alternate" type="text/html" href="https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=8125"/>
		<updated>2021-12-06T19:43:15Z</updated>

		<summary type="html">&lt;p&gt;LHerenda: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Summary == &lt;br /&gt;
&lt;br /&gt;
This page describes the basics steps of how a BLE device can be attacked.&lt;br /&gt;
&lt;br /&gt;
== Requirements ==&lt;br /&gt;
&lt;br /&gt;
* Operating system: Ubuntu 18.04&lt;br /&gt;
* Elvis lab IoT devices&lt;br /&gt;
&lt;br /&gt;
== Description ==&lt;br /&gt;
First install Ubertooth one and all libraries. A full documentation is available on: https://ubertooth.readthedocs.io/en/latest/build_guide.html&lt;br /&gt;
&lt;br /&gt;
NEVER OPERATE YOUR UBERTOOTH WITHOUT ATTACHED ANTENNA!!&lt;br /&gt;
&lt;br /&gt;
Check if Ubertooth one is recognized:&lt;br /&gt;
 lsusb&lt;br /&gt;
Bus 001 Device 003: ID 1d50:6002 OpenMoko, Inc. Ubertooth One&lt;br /&gt;
&lt;br /&gt;
 sudo apt-get install -y ubertooth cmake libusb-1.0-0-dev make gcc g++ libbluetooth-dev pkg-config python3-numpy python3-qtpy&lt;br /&gt;
&lt;br /&gt;
=== Install libbtbb ===&lt;br /&gt;
 wget https://github.com/greatscottgadgets/libbtbb/archive/2020-12-R1.tar.gz -O libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 tar -xf libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 cd libbtbb-2020-12-R1&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Install Ubertooth Tools ===&lt;br /&gt;
&lt;br /&gt;
 wget https://github.com/greatscottgadgets/ubertooth/releases/download/2020-12-R1/ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 tar -xf ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 cd ubertooth-2020-12-R1/host&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Ubertooth One Firmware update ===&lt;br /&gt;
 cd firmware&lt;br /&gt;
 sudo apt-get install -y gcc-arm-none-eabi&lt;br /&gt;
 make clean all&lt;br /&gt;
 make&lt;br /&gt;
 cd bluetooth_rxtx&lt;br /&gt;
 ubertooth-dfu -d bluetooth_rxtx.dfu -r&lt;br /&gt;
&lt;br /&gt;
To show the Firmware use the command &lt;br /&gt;
 ubertooth-util -v&lt;br /&gt;
Firmware version: git-7b656c1 (API:1.07)&lt;br /&gt;
&lt;br /&gt;
=== Wireshark sniffing ===&lt;br /&gt;
The ubertooth one device is used for sniffing the bluetooth packets&lt;br /&gt;
and wireshark is displaying the packets. &lt;br /&gt;
 mkfifo /tmp/pipe&lt;br /&gt;
 sudo wireshark -k -i /tmp/pipe &amp;amp;&lt;br /&gt;
 sudo ubertooth-btle -f -c /tmp/pipe&lt;br /&gt;
&lt;br /&gt;
=== Bettercap sniffing ===&lt;br /&gt;
Installing Bettercap on Ubuntu:&lt;br /&gt;
 sudo -s&lt;br /&gt;
 wget https://golang.org/dl/go1.17.3.linux-amd64.tar.gz&lt;br /&gt;
 rm -rf /usr/local/go &amp;amp;&amp;amp; tar -C /usr/local -xzf go1.17.3.linux-amd64.tar.gz&lt;br /&gt;
 export PATH=$PATH:/usr/local/go/bin&lt;br /&gt;
 export GOPATH=~/go/bin&lt;br /&gt;
 go version&lt;br /&gt;
&lt;br /&gt;
 sudo apt install -y git build-essential \&lt;br /&gt;
 libpcap-dev libusb-1.0-0-dev libnetfilter-queue-dev&lt;br /&gt;
 go get -u github.com/bettercap/bettercap&lt;br /&gt;
 cd ~/go/bin/src/github.com/bettercap/bettercap&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
&lt;br /&gt;
Now run bettercap and search for Bluetooth devices.&lt;br /&gt;
&lt;br /&gt;
 sudo bettercap&lt;br /&gt;
 ble.recon.on&lt;br /&gt;
For more details on a specific device use the enum command.&lt;br /&gt;
In this case I used the MAC address of the smart bulb.&lt;br /&gt;
 ble.enum 6a:9b:4b:1b:ac:e6&lt;br /&gt;
&lt;br /&gt;
[[File:Bettercap enum.PNG | 700px]]&lt;br /&gt;
&lt;br /&gt;
To find out what characteristics the smartphone sends to the smart bulb to change the light colour,&lt;br /&gt;
I used a MITM attack.&lt;br /&gt;
&lt;br /&gt;
=== MITM attack ===&lt;br /&gt;
To find out what GAT messages between a BLE device and a smartphone are being exchanged, I used a&lt;br /&gt;
MITM attack. For this the tool btlejuice was used.&lt;br /&gt;
&lt;br /&gt;
Create 2 virtual machines with Ubuntu 18.04 and make sure that a bluetooth adapter is available on both machines.&lt;br /&gt;
Make sure that the machines can reach each other over the network. It is also recommend to turn &lt;br /&gt;
of the firewall.&lt;br /&gt;
 sudo apt-get install -y nodejs npm bluetooth bluez libbluetooth-dev libudev-dev&lt;br /&gt;
 sudo npm install -g btlejuice&lt;br /&gt;
 sudo service ufw stop&lt;br /&gt;
 sudo ufw disable&lt;br /&gt;
One machine acts as proxy. On this machine enter the command:&lt;br /&gt;
 sudo btlejuice-proxy&lt;br /&gt;
The second machine is the core unit and there you enter:&lt;br /&gt;
 sudo btlejuice -u &amp;lt;ip proxy&amp;gt; -w&lt;br /&gt;
&lt;br /&gt;
[[File:Btlejuice web.PNG | 700px]]&lt;br /&gt;
&lt;br /&gt;
The attack shows that on the characteristics fffc there is a write command whenever I change the colour on the smartphone.&lt;br /&gt;
It looks like the values represent rgb values. &lt;br /&gt;
=== Gatttool ===&lt;br /&gt;
From Bettercap we can see that characteristic fffc is on the handle 0x0019. &lt;br /&gt;
This can be used with gatttool to send different commands to the smart bulb and change the colours.&lt;br /&gt;
 gatttool -b 6A:9B:4B:1B:AC:E6 -I&lt;br /&gt;
  connect &lt;br /&gt;
  char-write-cmd 19 ff000000&lt;br /&gt;
  char-write-cmd 19 00ff0000&lt;br /&gt;
 &lt;br /&gt;
&lt;br /&gt;
== Used Hardware ==&lt;br /&gt;
All hardware is used from the Elvis Lab. &lt;br /&gt;
* [[Ubertooth One, 2.4 GHz wireless development platform]]&lt;br /&gt;
* [[Motorola Moto G4 Play Smartphone 16 GB, Android, Dual-SIM, black]]&lt;br /&gt;
* [[MIPOW PLAYBULB CANDLE - Smart Light, Leuchte]]&lt;br /&gt;
* [[UD100-G03 BlueSoleil Bluetooth USB Adapter]]&lt;br /&gt;
&lt;br /&gt;
== References ==&lt;br /&gt;
* [[Bettercap]]&lt;br /&gt;
* [[Bluetooth Pentesting Tools (HW/SW)]]&lt;br /&gt;
* [[BLE Fundamentals]]&lt;br /&gt;
* [[Installing BtleJuice]]&lt;br /&gt;
* [[Bluetooth Sniffing with Ubertooth: A Step-by-step guide]]&lt;br /&gt;
&lt;br /&gt;
[[Category:Documentation]]&lt;/div&gt;</summary>
		<author><name>LHerenda</name></author>
	</entry>
	<entry>
		<id>https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=8124</id>
		<title>Bluetooth LE Hacking</title>
		<link rel="alternate" type="text/html" href="https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=8124"/>
		<updated>2021-12-06T19:40:24Z</updated>

		<summary type="html">&lt;p&gt;LHerenda: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Summary == &lt;br /&gt;
&lt;br /&gt;
This page describes the basics steps of how a BLE device can be attacked.&lt;br /&gt;
&lt;br /&gt;
== Requirements ==&lt;br /&gt;
&lt;br /&gt;
* Operating system: Ubuntu 18.04&lt;br /&gt;
* Elvis lab IoT devices&lt;br /&gt;
&lt;br /&gt;
== Description ==&lt;br /&gt;
First install Ubertooth one and all libraries. A full documentation is available on: https://ubertooth.readthedocs.io/en/latest/build_guide.html&lt;br /&gt;
&lt;br /&gt;
NEVER OPERATE YOUR UBERTOOTH WITHOUT ATTACHED ANTENNA!!&lt;br /&gt;
&lt;br /&gt;
Check if Ubertooth one is recognized:&lt;br /&gt;
 lsusb&lt;br /&gt;
Bus 001 Device 003: ID 1d50:6002 OpenMoko, Inc. Ubertooth One&lt;br /&gt;
&lt;br /&gt;
 sudo apt-get install -y ubertooth cmake libusb-1.0-0-dev make gcc g++ libbluetooth-dev pkg-config python3-numpy python3-qtpy&lt;br /&gt;
&lt;br /&gt;
=== Install libbtbb ===&lt;br /&gt;
 wget https://github.com/greatscottgadgets/libbtbb/archive/2020-12-R1.tar.gz -O libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 tar -xf libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 cd libbtbb-2020-12-R1&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Install Ubertooth Tools ===&lt;br /&gt;
&lt;br /&gt;
 wget https://github.com/greatscottgadgets/ubertooth/releases/download/2020-12-R1/ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 tar -xf ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 cd ubertooth-2020-12-R1/host&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Ubertooth One Firmware update ===&lt;br /&gt;
 cd firmware&lt;br /&gt;
 sudo apt-get install -y gcc-arm-none-eabi&lt;br /&gt;
 make clean all&lt;br /&gt;
 make&lt;br /&gt;
 cd bluetooth_rxtx&lt;br /&gt;
 ubertooth-dfu -d bluetooth_rxtx.dfu -r&lt;br /&gt;
&lt;br /&gt;
To show the Firmware use the command &lt;br /&gt;
 ubertooth-util -v&lt;br /&gt;
Firmware version: git-7b656c1 (API:1.07)&lt;br /&gt;
&lt;br /&gt;
=== Wireshark sniffing ===&lt;br /&gt;
The ubertooth one device is used for sniffing the bluetooth packets&lt;br /&gt;
and wireshark is displaying the packets. &lt;br /&gt;
 mkfifo /tmp/pipe&lt;br /&gt;
 sudo wireshark -k -i /tmp/pipe &amp;amp;&lt;br /&gt;
 sudo ubertooth-btle -f -c /tmp/pipe&lt;br /&gt;
&lt;br /&gt;
=== Bettercap sniffing ===&lt;br /&gt;
Installing Bettercap on Ubuntu:&lt;br /&gt;
 sudo -s&lt;br /&gt;
 wget https://golang.org/dl/go1.17.3.linux-amd64.tar.gz&lt;br /&gt;
 rm -rf /usr/local/go &amp;amp;&amp;amp; tar -C /usr/local -xzf go1.17.3.linux-amd64.tar.gz&lt;br /&gt;
 export PATH=$PATH:/usr/local/go/bin&lt;br /&gt;
 export GOPATH=~/go/bin&lt;br /&gt;
 go version&lt;br /&gt;
&lt;br /&gt;
 sudo apt install -y git build-essential \&lt;br /&gt;
 libpcap-dev libusb-1.0-0-dev libnetfilter-queue-dev&lt;br /&gt;
 go get -u github.com/bettercap/bettercap&lt;br /&gt;
 cd ~/go/bin/src/github.com/bettercap/bettercap&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
&lt;br /&gt;
Now run bettercap and search for Bluetooth devices.&lt;br /&gt;
&lt;br /&gt;
 sudo bettercap&lt;br /&gt;
 ble.recon.on&lt;br /&gt;
For more details on a specific device use the enum command.&lt;br /&gt;
In this case I used the MAC address of the smart bulb.&lt;br /&gt;
 ble.enum 6a:9b:4b:1b:ac:e6&lt;br /&gt;
&lt;br /&gt;
[[File:Bettercap enum.PNG | 700px]]&lt;br /&gt;
&lt;br /&gt;
To find out what characteristics the smartphone sends to the smart bulb to change the light colour,&lt;br /&gt;
I used a MITM attack.&lt;br /&gt;
&lt;br /&gt;
=== MITM attack ===&lt;br /&gt;
To find out what GAT messages between a BLE device and a smartphone are being exchanged, I used a&lt;br /&gt;
MITM attack. For this the tool btlejuice was used.&lt;br /&gt;
&lt;br /&gt;
Create 2 virtual machines with Ubuntu 18.04 and make sure that a bluetooth adapter is available on both machines.&lt;br /&gt;
Make sure that the machines can reach each other over the network. It is also recommend to turn &lt;br /&gt;
of the firewall.&lt;br /&gt;
 sudo apt-get install -y nodejs npm bluetooth bluez libbluetooth-dev libudev-dev&lt;br /&gt;
 sudo npm install -g btlejuice&lt;br /&gt;
 sudo service ufw stop&lt;br /&gt;
 sudo ufw disable&lt;br /&gt;
One machine acts as proxy. On this machine enter the command:&lt;br /&gt;
 sudo btlejuice-proxy&lt;br /&gt;
The second machine is the core unit and there you enter:&lt;br /&gt;
 sudo btlejuice -u &amp;lt;ip proxy&amp;gt; -w&lt;br /&gt;
&lt;br /&gt;
[[File:Btlejuice web.PNG | 700px]]&lt;br /&gt;
&lt;br /&gt;
The attack shows that on the characteristics fffc there is a write command whenever I change the colour on the smartphone.&lt;br /&gt;
It looks like the values represent rgb values. &lt;br /&gt;
=== Gatttool ===&lt;br /&gt;
From Bettercap we can see that characteristic fffc is on the handle 0x0019. &lt;br /&gt;
This can be used with gatttool to send different commands to the smart bulb and change the colours.&lt;br /&gt;
 gatttool -b 6A:9B:4B:1B:AC:E6 -I&lt;br /&gt;
  connect &lt;br /&gt;
  char-write-cmd 19 ff000000&lt;br /&gt;
  char-write-cmd 19 00ff0000&lt;br /&gt;
 &lt;br /&gt;
&lt;br /&gt;
== Used Hardware ==&lt;br /&gt;
All hardware is used from the Elvis Lab. &lt;br /&gt;
* [[Ubertooth One, 2.4 GHz wireless development platform]]&lt;br /&gt;
* [[Motorola Moto G4 Play Smartphone 16 GB, Android, Dual-SIM, black]]&lt;br /&gt;
* [[MIPOW PLAYBULB CANDLE - Smart Light, Leuchte]]&lt;br /&gt;
* [[UD100-G03 BlueSoleil Bluetooth USB Adapter]]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== Courses ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== References ==&lt;br /&gt;
* [[Bettercap]]&lt;br /&gt;
* [[Bluetooth Pentesting Tools (HW/SW)]]&lt;br /&gt;
* [[BLE Fundamentals]]&lt;br /&gt;
* [[Installing BtleJuice]]&lt;br /&gt;
* [[Bluetooth Sniffing with Ubertooth: A Step-by-step guide]]&lt;br /&gt;
&lt;br /&gt;
[[Category:Documentation]]&lt;/div&gt;</summary>
		<author><name>LHerenda</name></author>
	</entry>
	<entry>
		<id>https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=8091</id>
		<title>Bluetooth LE Hacking</title>
		<link rel="alternate" type="text/html" href="https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=8091"/>
		<updated>2021-11-30T16:18:41Z</updated>

		<summary type="html">&lt;p&gt;LHerenda: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Summary == &lt;br /&gt;
&lt;br /&gt;
This page describes the basics steps of how a BLE device can be attacked.&lt;br /&gt;
&lt;br /&gt;
== Requirements ==&lt;br /&gt;
&lt;br /&gt;
* Operating system: Ubuntu 18.04&lt;br /&gt;
* Elvis lab IoT devices&lt;br /&gt;
&lt;br /&gt;
== Description ==&lt;br /&gt;
First install Ubertooth one and all libraries. A full documentation is available on: https://ubertooth.readthedocs.io/en/latest/build_guide.html&lt;br /&gt;
&lt;br /&gt;
NEVER OPERATE YOUR UBERTOOTH WITHOUT ATTACHED ANTENNA!!&lt;br /&gt;
&lt;br /&gt;
Check if Ubertooth one is recognized:&lt;br /&gt;
 lsusb&lt;br /&gt;
Bus 001 Device 003: ID 1d50:6002 OpenMoko, Inc. Ubertooth One&lt;br /&gt;
&lt;br /&gt;
 sudo apt-get install -y ubertooth cmake libusb-1.0-0-dev make gcc g++ libbluetooth-dev pkg-config python3-numpy python3-qtpy&lt;br /&gt;
&lt;br /&gt;
=== Install libbtbb ===&lt;br /&gt;
 wget https://github.com/greatscottgadgets/libbtbb/archive/2020-12-R1.tar.gz -O libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 tar -xf libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 cd libbtbb-2020-12-R1&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Install Ubertooth Tools ===&lt;br /&gt;
&lt;br /&gt;
 wget https://github.com/greatscottgadgets/ubertooth/releases/download/2020-12-R1/ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 tar -xf ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 cd ubertooth-2020-12-R1/host&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Ubertooth One Firmware update ===&lt;br /&gt;
 cd firmware&lt;br /&gt;
 sudo apt-get install -y gcc-arm-none-eabi&lt;br /&gt;
 make clean all&lt;br /&gt;
 make&lt;br /&gt;
 cd bluetooth_rxtx&lt;br /&gt;
 ubertooth-dfu -d bluetooth_rxtx.dfu -r&lt;br /&gt;
&lt;br /&gt;
To show the Firmware use the command &lt;br /&gt;
 ubertooth-util -v&lt;br /&gt;
Firmware version: git-7b656c1 (API:1.07)&lt;br /&gt;
&lt;br /&gt;
=== Wireshark sniffing ===&lt;br /&gt;
The ubertooth one device is used for sniffing the bluetooth packets&lt;br /&gt;
and wireshark is displaying the packets. &lt;br /&gt;
 mkfifo /tmp/pipe&lt;br /&gt;
 sudo wireshark -k -i /tmp/pipe &amp;amp;&lt;br /&gt;
 sudo ubertooth-btle -f -c /tmp/pipe&lt;br /&gt;
&lt;br /&gt;
=== Bettercap sniffing ===&lt;br /&gt;
Installing Bettercap on Ubuntu:&lt;br /&gt;
 sudo -s&lt;br /&gt;
 wget https://golang.org/dl/go1.17.3.linux-amd64.tar.gz&lt;br /&gt;
 rm -rf /usr/local/go &amp;amp;&amp;amp; tar -C /usr/local -xzf go1.17.3.linux-amd64.tar.gz&lt;br /&gt;
 export PATH=$PATH:/usr/local/go/bin&lt;br /&gt;
 export GOPATH=~/go/bin&lt;br /&gt;
 go version&lt;br /&gt;
&lt;br /&gt;
 sudo apt install -y git build-essential \&lt;br /&gt;
 libpcap-dev libusb-1.0-0-dev libnetfilter-queue-dev&lt;br /&gt;
 go get -u github.com/bettercap/bettercap&lt;br /&gt;
 cd ~/go/bin/src/github.com/bettercap/bettercap&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
&lt;br /&gt;
Now run bettercap and search for Bluetooth devices.&lt;br /&gt;
&lt;br /&gt;
 sudo bettercap&lt;br /&gt;
 ble.recon.on&lt;br /&gt;
For more details on a specific device use the enum command.&lt;br /&gt;
In this case I used the MAC address of the smart bulb.&lt;br /&gt;
 ble.enum 6a:9b:4b:1b:ac:e6&lt;br /&gt;
&lt;br /&gt;
[[File:Bettercap enum.PNG | 700px]]&lt;br /&gt;
&lt;br /&gt;
To find out what characteristics the smartphone sends to the smart bulb to change the light colour,&lt;br /&gt;
I used a MITM attack.&lt;br /&gt;
&lt;br /&gt;
=== MITM attack ===&lt;br /&gt;
To find out what GAT messages between a BLE device and a smartphone are being exchanged, I used a&lt;br /&gt;
MITM attack. For this the tool btlejuice was used.&lt;br /&gt;
&lt;br /&gt;
Create 2 virtual machines with Ubuntu 18.04 and make sure that a bluetooth adapter is available on both machines.&lt;br /&gt;
Make sure that the machines can reach each other over the network. It is also recommend to turn &lt;br /&gt;
of the firewall.&lt;br /&gt;
 sudo apt-get install -y nodejs npm bluetooth bluez libbluetooth-dev libudev-dev&lt;br /&gt;
 sudo npm install -g btlejuice&lt;br /&gt;
 sudo service ufw stop&lt;br /&gt;
 sudo ufw disable&lt;br /&gt;
One machine acts as proxy. On this machine enter the command:&lt;br /&gt;
 sudo btlejuice-proxy&lt;br /&gt;
The second machine is the core unit and there you enter:&lt;br /&gt;
 sudo btlejuice -u &amp;lt;ip proxy&amp;gt; -w&lt;br /&gt;
&lt;br /&gt;
[[File:Btlejuice web.PNG | 700px]]&lt;br /&gt;
&lt;br /&gt;
The attack shows that on the characteristics fffc there is a write command whenever I change the colour on the smartphone.&lt;br /&gt;
It looks like the values represent rgb values. &lt;br /&gt;
=== Gatttool ===&lt;br /&gt;
From Bettercap we can see that characteristic fffc is on the handle 0x0019. &lt;br /&gt;
This can be used with gatttool to send different commands to the smart bulb and change the colours.&lt;br /&gt;
 gatttool -b 6A:9B:4B:1B:AC:E6 -I&lt;br /&gt;
  connect &lt;br /&gt;
  char-write-cmd 19 ff000000&lt;br /&gt;
  char-write-cmd 19 00ff0000&lt;br /&gt;
 &lt;br /&gt;
&lt;br /&gt;
== Used Hardware ==&lt;br /&gt;
All hardware is used from the Elvis Lab. &lt;br /&gt;
* [[Ubertooth One, 2.4 GHz wireless development platform]]&lt;br /&gt;
* [[Motorola Moto G4 Play Smartphone 16 GB, Android, Dual-SIM, black]]&lt;br /&gt;
* [[MIPOW PLAYBULB CANDLE - Smart Light, Leuchte]]&lt;br /&gt;
* [[UD100-G03 BlueSoleil Bluetooth USB Adapter]]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== Courses ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== References ==&lt;br /&gt;
&lt;br /&gt;
* https://wikipedia.org&lt;br /&gt;
* https://google.com&lt;br /&gt;
&lt;br /&gt;
[[Category:Documentation]]&lt;/div&gt;</summary>
		<author><name>LHerenda</name></author>
	</entry>
	<entry>
		<id>https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=8090</id>
		<title>Bluetooth LE Hacking</title>
		<link rel="alternate" type="text/html" href="https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=8090"/>
		<updated>2021-11-30T16:10:48Z</updated>

		<summary type="html">&lt;p&gt;LHerenda: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Summary == &lt;br /&gt;
&lt;br /&gt;
This page describes the basics steps of how a BLE device can be attacked.&lt;br /&gt;
&lt;br /&gt;
== Requirements ==&lt;br /&gt;
&lt;br /&gt;
* Operating system: Ubuntu 18.04&lt;br /&gt;
* Elvis lab IoT devices&lt;br /&gt;
&lt;br /&gt;
In order to complete these steps, you must have followed before.&lt;br /&gt;
&lt;br /&gt;
== Description ==&lt;br /&gt;
First install ubertooth one and all libraries. A full documentation is available on: https://ubertooth.readthedocs.io/en/latest/build_guide.html&lt;br /&gt;
&lt;br /&gt;
NEVER OPERATE YOUR UBERTOOTH WITHOUT ATTACHED ANTENNA!!&lt;br /&gt;
&lt;br /&gt;
Check if Ubertooth one is recognized:&lt;br /&gt;
 lsusb&lt;br /&gt;
Bus 001 Device 003: ID 1d50:6002 OpenMoko, Inc. Ubertooth One&lt;br /&gt;
&lt;br /&gt;
 sudo apt-get install -y ubertooth cmake libusb-1.0-0-dev make gcc g++ libbluetooth-dev pkg-config python3-numpy python3-qtpy&lt;br /&gt;
&lt;br /&gt;
=== Install libbtbb ===&lt;br /&gt;
 wget https://github.com/greatscottgadgets/libbtbb/archive/2020-12-R1.tar.gz -O libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 tar -xf libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 cd libbtbb-2020-12-R1&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Install Ubertooth Tools ===&lt;br /&gt;
&lt;br /&gt;
 wget https://github.com/greatscottgadgets/ubertooth/releases/download/2020-12-R1/ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 tar -xf ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 cd ubertooth-2020-12-R1/host&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Ubertooth One Firmware update ===&lt;br /&gt;
 cd firmware&lt;br /&gt;
 sudo apt-get install -y gcc-arm-none-eabi&lt;br /&gt;
 make clean all&lt;br /&gt;
 make&lt;br /&gt;
 cd bluetooth_rxtx&lt;br /&gt;
 ubertooth-dfu -d bluetooth_rxtx.dfu -r&lt;br /&gt;
&lt;br /&gt;
To show the Firmware use the command &lt;br /&gt;
 ubertooth-util -v&lt;br /&gt;
Firmware version: git-7b656c1 (API:1.07)&lt;br /&gt;
&lt;br /&gt;
=== Wireshark sniffing ===&lt;br /&gt;
The ubertooth one device is used for sniffing the bluetooth packets&lt;br /&gt;
and wireshark is displaying the packets. &lt;br /&gt;
 mkfifo /tmp/pipe&lt;br /&gt;
 sudo wireshark -k -i /tmp/pipe &amp;amp;&lt;br /&gt;
 sudo ubertooth-btle -f -c /tmp/pipe&lt;br /&gt;
&lt;br /&gt;
=== Bettercap sniffing ===&lt;br /&gt;
Installing Bettercap on Ubuntu:&lt;br /&gt;
 sudo -s&lt;br /&gt;
 wget https://golang.org/dl/go1.17.3.linux-amd64.tar.gz&lt;br /&gt;
 rm -rf /usr/local/go &amp;amp;&amp;amp; tar -C /usr/local -xzf go1.17.3.linux-amd64.tar.gz&lt;br /&gt;
 export PATH=$PATH:/usr/local/go/bin&lt;br /&gt;
 export GOPATH=~/go/bin&lt;br /&gt;
 go version&lt;br /&gt;
&lt;br /&gt;
 sudo apt install -y git build-essential \&lt;br /&gt;
 libpcap-dev libusb-1.0-0-dev libnetfilter-queue-dev&lt;br /&gt;
 go get -u github.com/bettercap/bettercap&lt;br /&gt;
 cd ~/go/bin/src/github.com/bettercap/bettercap&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
&lt;br /&gt;
Now run bettercap and search for Bluetooth devices.&lt;br /&gt;
&lt;br /&gt;
 sudo bettercap&lt;br /&gt;
 ble.recon.on&lt;br /&gt;
For more details on a specific device use the enum command.&lt;br /&gt;
In this case I used the MAC address of the smart bulb.&lt;br /&gt;
 ble.enum 6a:9b:4b:1b:ac:e6&lt;br /&gt;
&lt;br /&gt;
[[File:Bettercap enum.PNG | 700px]]&lt;br /&gt;
&lt;br /&gt;
To find out what characteristics the smartphone sends to the smart bulb to change the light colour,&lt;br /&gt;
I used a MITM attack.&lt;br /&gt;
&lt;br /&gt;
=== MITM attack ===&lt;br /&gt;
To find out what GAT messages between a BLE device and a smartphone are being exchanged, I used a&lt;br /&gt;
MITM attack. For this the tool btlejuice was used.&lt;br /&gt;
&lt;br /&gt;
Create 2 virtual machines with Ubuntu 18.04 and make sure that a bluetooth adapter is available on both machines.&lt;br /&gt;
Make sure that the machines can reach each other over the network. It is also recommend to turn &lt;br /&gt;
of the firewall.&lt;br /&gt;
 sudo apt-get install -y nodejs npm bluetooth bluez libbluetooth-dev libudev-dev&lt;br /&gt;
 sudo npm install -g btlejuice&lt;br /&gt;
 sudo service ufw stop&lt;br /&gt;
 sudo ufw disable&lt;br /&gt;
One machine acts as proxy. On this machine enter the command:&lt;br /&gt;
 sudo btlejuice-proxy&lt;br /&gt;
The second machine is the core unit and there you enter:&lt;br /&gt;
 sudo btlejuice -u &amp;lt;ip proxy&amp;gt; -w&lt;br /&gt;
&lt;br /&gt;
[[File:Btlejuice web.PNG | 700px]]&lt;br /&gt;
&lt;br /&gt;
The attack shows that on the characteristics fffc there is a write command whenever I change the colour on the smartphone.&lt;br /&gt;
It looks like the values represent rgb values. &lt;br /&gt;
=== Gatttool ===&lt;br /&gt;
From Bettercap we can see that characteristic fffc is on the handle 0x0019. &lt;br /&gt;
This can be used with gatttool to send different commands to the smart bulb and change the colours.&lt;br /&gt;
 gatttool -b 6A:9B:4B:1B:AC:E6 -I&lt;br /&gt;
  connect &lt;br /&gt;
  char-write-cmd 19 ff000000&lt;br /&gt;
  char-write-cmd 19 00ff0000&lt;br /&gt;
 &lt;br /&gt;
&lt;br /&gt;
== Used Hardware ==&lt;br /&gt;
All hardware is used from the Elvis Lab. &lt;br /&gt;
* Ubertooth One&lt;br /&gt;
* &lt;br /&gt;
&lt;br /&gt;
== Courses ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== References ==&lt;br /&gt;
&lt;br /&gt;
* https://wikipedia.org&lt;br /&gt;
* https://google.com&lt;br /&gt;
&lt;br /&gt;
[[Category:Documentation]]&lt;/div&gt;</summary>
		<author><name>LHerenda</name></author>
	</entry>
	<entry>
		<id>https://elvis.hcw.ac.at/wiki/index.php?title=File:Btlejuice_web.PNG&amp;diff=8089</id>
		<title>File:Btlejuice web.PNG</title>
		<link rel="alternate" type="text/html" href="https://elvis.hcw.ac.at/wiki/index.php?title=File:Btlejuice_web.PNG&amp;diff=8089"/>
		<updated>2021-11-30T16:04:55Z</updated>

		<summary type="html">&lt;p&gt;LHerenda: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;/div&gt;</summary>
		<author><name>LHerenda</name></author>
	</entry>
	<entry>
		<id>https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=8088</id>
		<title>Bluetooth LE Hacking</title>
		<link rel="alternate" type="text/html" href="https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=8088"/>
		<updated>2021-11-30T16:03:03Z</updated>

		<summary type="html">&lt;p&gt;LHerenda: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Summary == &lt;br /&gt;
&lt;br /&gt;
This page describes the basics steps of how a BLE device can be attacked.&lt;br /&gt;
&lt;br /&gt;
== Requirements ==&lt;br /&gt;
&lt;br /&gt;
* Operating system: Ubuntu 18.04&lt;br /&gt;
* Elvis lab IoT devices&lt;br /&gt;
&lt;br /&gt;
In order to complete these steps, you must have followed before.&lt;br /&gt;
&lt;br /&gt;
== Description ==&lt;br /&gt;
First install ubertooth one and all libraries. A full documentation is available on: https://ubertooth.readthedocs.io/en/latest/build_guide.html&lt;br /&gt;
&lt;br /&gt;
NEVER OPERATE YOUR UBERTOOTH WITHOUT ATTACHED ANTENNA!!&lt;br /&gt;
&lt;br /&gt;
Check if Ubertooth one is recognized:&lt;br /&gt;
 lsusb&lt;br /&gt;
Bus 001 Device 003: ID 1d50:6002 OpenMoko, Inc. Ubertooth One&lt;br /&gt;
&lt;br /&gt;
 sudo apt-get install -y ubertooth cmake libusb-1.0-0-dev make gcc g++ libbluetooth-dev pkg-config python3-numpy python3-qtpy&lt;br /&gt;
&lt;br /&gt;
=== Install libbtbb ===&lt;br /&gt;
 wget https://github.com/greatscottgadgets/libbtbb/archive/2020-12-R1.tar.gz -O libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 tar -xf libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 cd libbtbb-2020-12-R1&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Install Ubertooth Tools ===&lt;br /&gt;
&lt;br /&gt;
 wget https://github.com/greatscottgadgets/ubertooth/releases/download/2020-12-R1/ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 tar -xf ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 cd ubertooth-2020-12-R1/host&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Ubertooth One Firmware update ===&lt;br /&gt;
 cd firmware&lt;br /&gt;
 sudo apt-get install -y gcc-arm-none-eabi&lt;br /&gt;
 make clean all&lt;br /&gt;
 make&lt;br /&gt;
 cd bluetooth_rxtx&lt;br /&gt;
 ubertooth-dfu -d bluetooth_rxtx.dfu -r&lt;br /&gt;
&lt;br /&gt;
To show the Firmware use the command &lt;br /&gt;
 ubertooth-util -v&lt;br /&gt;
Firmware version: git-7b656c1 (API:1.07)&lt;br /&gt;
&lt;br /&gt;
=== Wireshark sniffing ===&lt;br /&gt;
The ubertooth one device is used for sniffing the bluetooth packets&lt;br /&gt;
and wireshark is displaying the packets. &lt;br /&gt;
 mkfifo /tmp/pipe&lt;br /&gt;
 sudo wireshark -k -i /tmp/pipe &amp;amp;&lt;br /&gt;
 sudo ubertooth-btle -f -c /tmp/pipe&lt;br /&gt;
&lt;br /&gt;
=== Bettercap sniffing ===&lt;br /&gt;
Installing Bettercap on Ubuntu:&lt;br /&gt;
 sudo -s&lt;br /&gt;
 wget https://golang.org/dl/go1.17.3.linux-amd64.tar.gz&lt;br /&gt;
 rm -rf /usr/local/go &amp;amp;&amp;amp; tar -C /usr/local -xzf go1.17.3.linux-amd64.tar.gz&lt;br /&gt;
 export PATH=$PATH:/usr/local/go/bin&lt;br /&gt;
 export GOPATH=~/go/bin&lt;br /&gt;
 go version&lt;br /&gt;
&lt;br /&gt;
 sudo apt install -y git build-essential \&lt;br /&gt;
 libpcap-dev libusb-1.0-0-dev libnetfilter-queue-dev&lt;br /&gt;
 go get -u github.com/bettercap/bettercap&lt;br /&gt;
 cd ~/go/bin/src/github.com/bettercap/bettercap&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
&lt;br /&gt;
Now run bettercap and search for Bluetooth devices.&lt;br /&gt;
&lt;br /&gt;
 sudo bettercap&lt;br /&gt;
 ble.recon.on&lt;br /&gt;
For more details on a specific device use the enum command.&lt;br /&gt;
In this case I used the MAC address of the smart bulb.&lt;br /&gt;
 ble.enum 6a:9b:4b:1b:ac:e6&lt;br /&gt;
[[File:Bettercap enum.PNG | 700px]]&lt;br /&gt;
To find out what characteristics the smartphone sends to the smart bulb to change the light colour,&lt;br /&gt;
I used a MITM attack.&lt;br /&gt;
&lt;br /&gt;
=== MITM attack ===&lt;br /&gt;
To find out what GAT messages between a BLE device and a smartphone are being exchanged, I used a&lt;br /&gt;
MITM attack. For this the tool btlejuice was used.&lt;br /&gt;
&lt;br /&gt;
Create 2 virtual machines with Ubuntu 18.04 and make sure that a bluetooth adapter is available on both machines.&lt;br /&gt;
Make sure that the machines can reach each other over the network. It is also recommend to turn &lt;br /&gt;
of the firewall.&lt;br /&gt;
 sudo apt-get install -y nodejs npm bluetooth bluez libbluetooth-dev libudev-dev&lt;br /&gt;
 sudo npm install -g btlejuice&lt;br /&gt;
 sudo service ufw stop&lt;br /&gt;
 sudo ufw disable&lt;br /&gt;
One machine acts as proxy. On this machine enter the command:&lt;br /&gt;
 sudo btlejuice-proxy&lt;br /&gt;
The second machine is the core unit and there you enter:&lt;br /&gt;
 sudo btlejuice -u &amp;lt;ip proxy&amp;gt; -w&lt;br /&gt;
&lt;br /&gt;
=== Gatttool ===&lt;br /&gt;
&lt;br /&gt;
== Used Hardware ==&lt;br /&gt;
All hardware is used from the Elvis Lab. &lt;br /&gt;
* Ubertooth One&lt;br /&gt;
* &lt;br /&gt;
&lt;br /&gt;
== Courses ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== References ==&lt;br /&gt;
&lt;br /&gt;
* https://wikipedia.org&lt;br /&gt;
* https://google.com&lt;br /&gt;
&lt;br /&gt;
[[Category:Documentation]]&lt;/div&gt;</summary>
		<author><name>LHerenda</name></author>
	</entry>
	<entry>
		<id>https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=8087</id>
		<title>Bluetooth LE Hacking</title>
		<link rel="alternate" type="text/html" href="https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=8087"/>
		<updated>2021-11-30T16:01:22Z</updated>

		<summary type="html">&lt;p&gt;LHerenda: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Summary == &lt;br /&gt;
&lt;br /&gt;
This page describes the basics steps of how a BLE device can be attacked.&lt;br /&gt;
&lt;br /&gt;
== Requirements ==&lt;br /&gt;
&lt;br /&gt;
* Operating system: Ubuntu 18.04&lt;br /&gt;
* Elvis lab IoT devices&lt;br /&gt;
&lt;br /&gt;
In order to complete these steps, you must have followed before.&lt;br /&gt;
&lt;br /&gt;
== Description ==&lt;br /&gt;
First install ubertooth one and all libraries. A full documentation is available on: https://ubertooth.readthedocs.io/en/latest/build_guide.html&lt;br /&gt;
&lt;br /&gt;
NEVER OPERATE YOUR UBERTOOTH WITHOUT ATTACHED ANTENNA!!&lt;br /&gt;
&lt;br /&gt;
Check if Ubertooth one is recognized:&lt;br /&gt;
 lsusb&lt;br /&gt;
Bus 001 Device 003: ID 1d50:6002 OpenMoko, Inc. Ubertooth One&lt;br /&gt;
&lt;br /&gt;
 sudo apt-get install -y ubertooth cmake libusb-1.0-0-dev make gcc g++ libbluetooth-dev pkg-config python3-numpy python3-qtpy&lt;br /&gt;
&lt;br /&gt;
=== Install libbtbb ===&lt;br /&gt;
 wget https://github.com/greatscottgadgets/libbtbb/archive/2020-12-R1.tar.gz -O libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 tar -xf libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 cd libbtbb-2020-12-R1&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Install Ubertooth Tools ===&lt;br /&gt;
&lt;br /&gt;
 wget https://github.com/greatscottgadgets/ubertooth/releases/download/2020-12-R1/ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 tar -xf ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 cd ubertooth-2020-12-R1/host&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Ubertooth One Firmware update ===&lt;br /&gt;
 cd firmware&lt;br /&gt;
 sudo apt-get install -y gcc-arm-none-eabi&lt;br /&gt;
 make clean all&lt;br /&gt;
 make&lt;br /&gt;
 cd bluetooth_rxtx&lt;br /&gt;
 ubertooth-dfu -d bluetooth_rxtx.dfu -r&lt;br /&gt;
&lt;br /&gt;
To show the Firmware use the command &lt;br /&gt;
 ubertooth-util -v&lt;br /&gt;
Firmware version: git-7b656c1 (API:1.07)&lt;br /&gt;
&lt;br /&gt;
=== Wireshark sniffing ===&lt;br /&gt;
The ubertooth one device is used for sniffing the bluetooth packets&lt;br /&gt;
and wireshark is displaying the packets. &lt;br /&gt;
 mkfifo /tmp/pipe&lt;br /&gt;
 sudo wireshark -k -i /tmp/pipe &amp;amp;&lt;br /&gt;
 sudo ubertooth-btle -f -c /tmp/pipe&lt;br /&gt;
&lt;br /&gt;
=== Bettercap sniffing ===&lt;br /&gt;
Installing Bettercap on Ubuntu:&lt;br /&gt;
 sudo -s&lt;br /&gt;
 wget https://golang.org/dl/go1.17.3.linux-amd64.tar.gz&lt;br /&gt;
 rm -rf /usr/local/go &amp;amp;&amp;amp; tar -C /usr/local -xzf go1.17.3.linux-amd64.tar.gz&lt;br /&gt;
 export PATH=$PATH:/usr/local/go/bin&lt;br /&gt;
 export GOPATH=~/go/bin&lt;br /&gt;
 go version&lt;br /&gt;
&lt;br /&gt;
 sudo apt install -y git build-essential \&lt;br /&gt;
 libpcap-dev libusb-1.0-0-dev libnetfilter-queue-dev&lt;br /&gt;
 go get -u github.com/bettercap/bettercap&lt;br /&gt;
 cd ~/go/bin/src/github.com/bettercap/bettercap&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
&lt;br /&gt;
Now run bettercap and search for Bluetooth devices.&lt;br /&gt;
&lt;br /&gt;
 sudo bettercap&lt;br /&gt;
 ble.recon.on&lt;br /&gt;
For more details on a specific device use the enum command.&lt;br /&gt;
In this case I used the MAC address of the smart bulb.&lt;br /&gt;
 ble.enum 6a:9b:4b:1b:ac:e6&lt;br /&gt;
[[File:Bettercap enum.PNG]]&lt;br /&gt;
To find out what characteristics the smartphone sends to the smart bulb to change the light colour,&lt;br /&gt;
I used a MITM attack.&lt;br /&gt;
&lt;br /&gt;
=== MITM attack ===&lt;br /&gt;
To find out what GAT messages between a BLE device and a smartphone are being exchanged, I used a&lt;br /&gt;
MITM attack. For this the tool btlejuice was used.&lt;br /&gt;
&lt;br /&gt;
Create 2 virtual machines with Ubuntu 18.04 and make sure that a bluetooth adapter is available on both machines.&lt;br /&gt;
Make sure that the machines can reach each other over the network. It is also recommend to turn &lt;br /&gt;
of the firewall.&lt;br /&gt;
 sudo apt-get install -y nodejs npm bluetooth bluez libbluetooth-dev libudev-dev&lt;br /&gt;
 sudo npm install -g btlejuice&lt;br /&gt;
 sudo service ufw stop&lt;br /&gt;
 sudo ufw disable&lt;br /&gt;
One machine acts as proxy. On this machine enter the command:&lt;br /&gt;
 sudo btlejuice-proxy&lt;br /&gt;
The second machine is the core unit and there you enter:&lt;br /&gt;
 sudo btlejuice -u &amp;lt;ip proxy&amp;gt; -w&lt;br /&gt;
&lt;br /&gt;
=== Gatttool ===&lt;br /&gt;
&lt;br /&gt;
== Used Hardware ==&lt;br /&gt;
All hardware is used from the Elvis Lab. &lt;br /&gt;
* Ubertooth One&lt;br /&gt;
* &lt;br /&gt;
&lt;br /&gt;
== Courses ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== References ==&lt;br /&gt;
&lt;br /&gt;
* https://wikipedia.org&lt;br /&gt;
* https://google.com&lt;br /&gt;
&lt;br /&gt;
[[Category:Documentation]]&lt;/div&gt;</summary>
		<author><name>LHerenda</name></author>
	</entry>
	<entry>
		<id>https://elvis.hcw.ac.at/wiki/index.php?title=File:Bettercap_enum.PNG&amp;diff=8086</id>
		<title>File:Bettercap enum.PNG</title>
		<link rel="alternate" type="text/html" href="https://elvis.hcw.ac.at/wiki/index.php?title=File:Bettercap_enum.PNG&amp;diff=8086"/>
		<updated>2021-11-30T15:59:04Z</updated>

		<summary type="html">&lt;p&gt;LHerenda: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;/div&gt;</summary>
		<author><name>LHerenda</name></author>
	</entry>
	<entry>
		<id>https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=8085</id>
		<title>Bluetooth LE Hacking</title>
		<link rel="alternate" type="text/html" href="https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=8085"/>
		<updated>2021-11-30T15:57:28Z</updated>

		<summary type="html">&lt;p&gt;LHerenda: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Summary == &lt;br /&gt;
&lt;br /&gt;
This page describes the basics steps of how a BLE device can be attacked.&lt;br /&gt;
&lt;br /&gt;
== Requirements ==&lt;br /&gt;
&lt;br /&gt;
* Operating system: Ubuntu 18.04&lt;br /&gt;
* Elvis lab IoT devices&lt;br /&gt;
&lt;br /&gt;
In order to complete these steps, you must have followed before.&lt;br /&gt;
&lt;br /&gt;
== Description ==&lt;br /&gt;
First install ubertooth one and all libraries. A full documentation is available on: https://ubertooth.readthedocs.io/en/latest/build_guide.html&lt;br /&gt;
&lt;br /&gt;
NEVER OPERATE YOUR UBERTOOTH WITHOUT ATTACHED ANTENNA!!&lt;br /&gt;
&lt;br /&gt;
Check if Ubertooth one is recognized:&lt;br /&gt;
 lsusb&lt;br /&gt;
Bus 001 Device 003: ID 1d50:6002 OpenMoko, Inc. Ubertooth One&lt;br /&gt;
&lt;br /&gt;
 sudo apt-get install -y ubertooth cmake libusb-1.0-0-dev make gcc g++ libbluetooth-dev pkg-config python3-numpy python3-qtpy&lt;br /&gt;
&lt;br /&gt;
=== Install libbtbb ===&lt;br /&gt;
 wget https://github.com/greatscottgadgets/libbtbb/archive/2020-12-R1.tar.gz -O libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 tar -xf libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 cd libbtbb-2020-12-R1&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Install Ubertooth Tools ===&lt;br /&gt;
&lt;br /&gt;
 wget https://github.com/greatscottgadgets/ubertooth/releases/download/2020-12-R1/ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 tar -xf ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 cd ubertooth-2020-12-R1/host&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Ubertooth One Firmware update ===&lt;br /&gt;
 cd firmware&lt;br /&gt;
 sudo apt-get install -y gcc-arm-none-eabi&lt;br /&gt;
 make clean all&lt;br /&gt;
 make&lt;br /&gt;
 cd bluetooth_rxtx&lt;br /&gt;
 ubertooth-dfu -d bluetooth_rxtx.dfu -r&lt;br /&gt;
&lt;br /&gt;
To show the Firmware use the command &lt;br /&gt;
 ubertooth-util -v&lt;br /&gt;
Firmware version: git-7b656c1 (API:1.07)&lt;br /&gt;
&lt;br /&gt;
=== Wireshark sniffing ===&lt;br /&gt;
The ubertooth one device is used for sniffing the bluetooth packets&lt;br /&gt;
and wireshark is displaying the packets. &lt;br /&gt;
 mkfifo /tmp/pipe&lt;br /&gt;
 sudo wireshark -k -i /tmp/pipe &amp;amp;&lt;br /&gt;
 sudo ubertooth-btle -f -c /tmp/pipe&lt;br /&gt;
&lt;br /&gt;
=== Bettercap sniffing ===&lt;br /&gt;
Installing bettercap on Ubuntu:&lt;br /&gt;
 sudo -s&lt;br /&gt;
 wget https://golang.org/dl/go1.17.3.linux-amd64.tar.gz&lt;br /&gt;
 rm -rf /usr/local/go &amp;amp;&amp;amp; tar -C /usr/local -xzf go1.17.3.linux-amd64.tar.gz&lt;br /&gt;
 export PATH=$PATH:/usr/local/go/bin&lt;br /&gt;
 export GOPATH=~/go/bin&lt;br /&gt;
 go version&lt;br /&gt;
&lt;br /&gt;
 sudo apt install -y git build-essential \&lt;br /&gt;
 libpcap-dev libusb-1.0-0-dev libnetfilter-queue-dev&lt;br /&gt;
 go get -u github.com/bettercap/bettercap&lt;br /&gt;
 cd ~/go/bin/src/github.com/bettercap/bettercap&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
&lt;br /&gt;
Now run bettercap and search for Bluetooth devices.&lt;br /&gt;
&lt;br /&gt;
 sudo bettercap&lt;br /&gt;
 ble.recon.on&lt;br /&gt;
For more details on a specific device use the enum command.&lt;br /&gt;
In this case I used the MAC address of the smart bulb.&lt;br /&gt;
 ble.enum 6a:9b:4b:1b:ac:e6&lt;br /&gt;
&lt;br /&gt;
To find out what characteristics the smartphone sends to the smart bulb to change the light colour,&lt;br /&gt;
I used a MITM attack.&lt;br /&gt;
&lt;br /&gt;
=== MITM attack ===&lt;br /&gt;
To find out what GAT messages between a BLE device and a smartphone are being exchanged, I used a&lt;br /&gt;
MITM attack. For this the tool btlejuice was used.&lt;br /&gt;
&lt;br /&gt;
Create 2 virtual machines with Ubuntu 18.04 and make sure that a bluetooth adapter is available on both machines.&lt;br /&gt;
Make sure that the machines can reach each other over the network. It is also recommend to turn &lt;br /&gt;
of the firewall.&lt;br /&gt;
 sudo apt-get install -y nodejs npm bluetooth bluez libbluetooth-dev libudev-dev&lt;br /&gt;
 sudo npm install -g btlejuice&lt;br /&gt;
 sudo service ufw stop&lt;br /&gt;
 sudo ufw disable&lt;br /&gt;
One machine acts as proxy. On this machine enter the command:&lt;br /&gt;
 sudo btlejuice-proxy&lt;br /&gt;
The second machine is the core unit and there you enter:&lt;br /&gt;
 sudo btlejuice -u &amp;lt;ip proxy&amp;gt; -w&lt;br /&gt;
&lt;br /&gt;
=== Gatttool ===&lt;br /&gt;
&lt;br /&gt;
== Used Hardware ==&lt;br /&gt;
All hardware is used from the Elvis Lab. &lt;br /&gt;
* Ubertooth One&lt;br /&gt;
* &lt;br /&gt;
&lt;br /&gt;
== Courses ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== References ==&lt;br /&gt;
&lt;br /&gt;
* https://wikipedia.org&lt;br /&gt;
* https://google.com&lt;br /&gt;
&lt;br /&gt;
[[Category:Documentation]]&lt;/div&gt;</summary>
		<author><name>LHerenda</name></author>
	</entry>
	<entry>
		<id>https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=8017</id>
		<title>Bluetooth LE Hacking</title>
		<link rel="alternate" type="text/html" href="https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=8017"/>
		<updated>2021-11-21T13:15:18Z</updated>

		<summary type="html">&lt;p&gt;LHerenda: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Summary == &lt;br /&gt;
&lt;br /&gt;
This page describes the basics steps of how a BLE device can be attacked.&lt;br /&gt;
&lt;br /&gt;
== Requirements ==&lt;br /&gt;
&lt;br /&gt;
* Operating system: Ubuntu 18.04&lt;br /&gt;
* Elvis lab IoT devices&lt;br /&gt;
&lt;br /&gt;
In order to complete these steps, you must have followed before.&lt;br /&gt;
&lt;br /&gt;
== Description ==&lt;br /&gt;
First install ubertooth one and all libraries. A full documentation is available on: https://ubertooth.readthedocs.io/en/latest/build_guide.html&lt;br /&gt;
&lt;br /&gt;
Check if ubertooth one is recognized:&lt;br /&gt;
 lsusb&lt;br /&gt;
Bus 001 Device 003: ID 1d50:6002 OpenMoko, Inc. Ubertooth One&lt;br /&gt;
&lt;br /&gt;
 sudo apt-get install -y ubertooth cmake libusb-1.0-0-dev make gcc g++ libbluetooth-dev pkg-config python3-numpy python3-qtpy&lt;br /&gt;
&lt;br /&gt;
=== Install libbtbb ===&lt;br /&gt;
 wget https://github.com/greatscottgadgets/libbtbb/archive/2020-12-R1.tar.gz -O libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 tar -xf libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 cd libbtbb-2020-12-R1&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Install Ubertooth Tools ===&lt;br /&gt;
&lt;br /&gt;
 wget https://github.com/greatscottgadgets/ubertooth/releases/download/2020-12-R1/ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 tar -xf ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 cd ubertooth-2020-12-R1/host&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Ubertooth One Firmware update ===&lt;br /&gt;
 cd firmware&lt;br /&gt;
 sudo apt-get install -y gcc-arm-none-eabi&lt;br /&gt;
 make clean all&lt;br /&gt;
 make&lt;br /&gt;
 cd bluetooth_rxtx&lt;br /&gt;
 ubertooth-dfu -d bluetooth_rxtx.dfu -r&lt;br /&gt;
&lt;br /&gt;
To show the Firmware use the command &lt;br /&gt;
 ubertooth-util -v&lt;br /&gt;
Firmware version: git-7b656c1 (API:1.07)&lt;br /&gt;
&lt;br /&gt;
=== Wireshark sniffing ===&lt;br /&gt;
The ubertooth one device is used for sniffing the bluetooth packets&lt;br /&gt;
and wireshark is displaying the packets. &lt;br /&gt;
 mkfifo /tmp/pipe&lt;br /&gt;
 sudo wireshark -k -i /tmp/pipe &amp;amp;&lt;br /&gt;
 sudo ubertooth-btle -f -c /tmp/pipe&lt;br /&gt;
=== MITM attack ===&lt;br /&gt;
To find out what GAT messages between a BLE device and a smartphone are being exchanged, I used a&lt;br /&gt;
MITM attack. For this the tool btlejuice was used.&lt;br /&gt;
&lt;br /&gt;
Create 2 virtual machines with Ubuntu 18.04 and make sure that a bluetooth adapter is available on both machines.&lt;br /&gt;
Make sure that the machines can reach each other over the network. It is also recommend to turn &lt;br /&gt;
of the firewall.&lt;br /&gt;
 sudo apt-get install -y nodejs npm bluetooth bluez libbluetooth-dev libudev-dev&lt;br /&gt;
 sudo npm install -g btlejuice&lt;br /&gt;
 sudo service ufw stop&lt;br /&gt;
 sudo ufw disable&lt;br /&gt;
One machine acts as proxy. On this machine enter the command:&lt;br /&gt;
 sudo btlejuice-proxy&lt;br /&gt;
The second machine is the core unit and there you enter:&lt;br /&gt;
 sudo btlejuice -u &amp;lt;ip proxy&amp;gt; -w&lt;br /&gt;
&lt;br /&gt;
=== Gatttool ===&lt;br /&gt;
&lt;br /&gt;
== Used Hardware ==&lt;br /&gt;
All hardware is used from the Elvis Lab. &lt;br /&gt;
* Ubertooth One&lt;br /&gt;
* &lt;br /&gt;
&lt;br /&gt;
== Courses ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== References ==&lt;br /&gt;
&lt;br /&gt;
* https://wikipedia.org&lt;br /&gt;
* https://google.com&lt;br /&gt;
&lt;br /&gt;
[[Category:Documentation]]&lt;/div&gt;</summary>
		<author><name>LHerenda</name></author>
	</entry>
	<entry>
		<id>https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=8016</id>
		<title>Bluetooth LE Hacking</title>
		<link rel="alternate" type="text/html" href="https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=8016"/>
		<updated>2021-11-21T13:14:48Z</updated>

		<summary type="html">&lt;p&gt;LHerenda: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Summary == &lt;br /&gt;
&lt;br /&gt;
This page describes the basics steps of how a BLE device can be attacked.&lt;br /&gt;
&lt;br /&gt;
== Requirements ==&lt;br /&gt;
[[File:Bluetoothservice.PNG]]&lt;br /&gt;
&lt;br /&gt;
* Operating system: Ubuntu 18.04&lt;br /&gt;
* Elvis lab IoT devices&lt;br /&gt;
&lt;br /&gt;
In order to complete these steps, you must have followed before.&lt;br /&gt;
&lt;br /&gt;
== Description ==&lt;br /&gt;
First install ubertooth one and all libraries. A full documentation is available on: https://ubertooth.readthedocs.io/en/latest/build_guide.html&lt;br /&gt;
&lt;br /&gt;
Check if ubertooth one is recognized:&lt;br /&gt;
 lsusb&lt;br /&gt;
Bus 001 Device 003: ID 1d50:6002 OpenMoko, Inc. Ubertooth One&lt;br /&gt;
&lt;br /&gt;
 sudo apt-get install -y ubertooth cmake libusb-1.0-0-dev make gcc g++ libbluetooth-dev pkg-config python3-numpy python3-qtpy&lt;br /&gt;
&lt;br /&gt;
=== Install libbtbb ===&lt;br /&gt;
 wget https://github.com/greatscottgadgets/libbtbb/archive/2020-12-R1.tar.gz -O libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 tar -xf libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 cd libbtbb-2020-12-R1&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Install Ubertooth Tools ===&lt;br /&gt;
&lt;br /&gt;
 wget https://github.com/greatscottgadgets/ubertooth/releases/download/2020-12-R1/ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 tar -xf ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 cd ubertooth-2020-12-R1/host&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Ubertooth One Firmware update ===&lt;br /&gt;
 cd firmware&lt;br /&gt;
 sudo apt-get install -y gcc-arm-none-eabi&lt;br /&gt;
 make clean all&lt;br /&gt;
 make&lt;br /&gt;
 cd bluetooth_rxtx&lt;br /&gt;
 ubertooth-dfu -d bluetooth_rxtx.dfu -r&lt;br /&gt;
&lt;br /&gt;
To show the Firmware use the command &lt;br /&gt;
 ubertooth-util -v&lt;br /&gt;
Firmware version: git-7b656c1 (API:1.07)&lt;br /&gt;
&lt;br /&gt;
=== Wireshark sniffing ===&lt;br /&gt;
The ubertooth one device is used for sniffing the bluetooth packets&lt;br /&gt;
and wireshark is displaying the packets. &lt;br /&gt;
 mkfifo /tmp/pipe&lt;br /&gt;
 sudo wireshark -k -i /tmp/pipe &amp;amp;&lt;br /&gt;
 sudo ubertooth-btle -f -c /tmp/pipe&lt;br /&gt;
=== MITM attack ===&lt;br /&gt;
To find out what GAT messages between a BLE device and a smartphone are being exchanged, I used a&lt;br /&gt;
MITM attack. For this the tool btlejuice was used.&lt;br /&gt;
&lt;br /&gt;
Create 2 virtual machines with Ubuntu 18.04 and make sure that a bluetooth adapter is available on both machines.&lt;br /&gt;
Make sure that the machines can reach each other over the network. It is also recommend to turn &lt;br /&gt;
of the firewall.&lt;br /&gt;
 sudo apt-get install -y nodejs npm bluetooth bluez libbluetooth-dev libudev-dev&lt;br /&gt;
 sudo npm install -g btlejuice&lt;br /&gt;
 sudo service ufw stop&lt;br /&gt;
 sudo ufw disable&lt;br /&gt;
One machine acts as proxy. On this machine enter the command:&lt;br /&gt;
 sudo btlejuice-proxy&lt;br /&gt;
The second machine is the core unit and there you enter:&lt;br /&gt;
 sudo btlejuice -u &amp;lt;ip proxy&amp;gt; -w&lt;br /&gt;
&lt;br /&gt;
=== Gatttool ===&lt;br /&gt;
&lt;br /&gt;
== Used Hardware ==&lt;br /&gt;
All hardware is used from the Elvis Lab. &lt;br /&gt;
* Ubertooth One&lt;br /&gt;
* &lt;br /&gt;
&lt;br /&gt;
== Courses ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== References ==&lt;br /&gt;
&lt;br /&gt;
* https://wikipedia.org&lt;br /&gt;
* https://google.com&lt;br /&gt;
&lt;br /&gt;
[[Category:Documentation]]&lt;/div&gt;</summary>
		<author><name>LHerenda</name></author>
	</entry>
	<entry>
		<id>https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=7999</id>
		<title>Bluetooth LE Hacking</title>
		<link rel="alternate" type="text/html" href="https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=7999"/>
		<updated>2021-11-14T21:46:22Z</updated>

		<summary type="html">&lt;p&gt;LHerenda: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Summary == &lt;br /&gt;
&lt;br /&gt;
This page describes the basics steps of how a BLE device can be attacked.&lt;br /&gt;
&lt;br /&gt;
== Requirements ==&lt;br /&gt;
&lt;br /&gt;
* Operating system: Ubuntu 18.04&lt;br /&gt;
* Elvis lab IoT devices&lt;br /&gt;
&lt;br /&gt;
In order to complete these steps, you must have followed before.&lt;br /&gt;
&lt;br /&gt;
== Description ==&lt;br /&gt;
First install ubertooth one and all libraries. A full documentation is available on: https://ubertooth.readthedocs.io/en/latest/build_guide.html&lt;br /&gt;
&lt;br /&gt;
Check if ubertooth one is recognized:&lt;br /&gt;
 lsusb&lt;br /&gt;
Bus 001 Device 003: ID 1d50:6002 OpenMoko, Inc. Ubertooth One&lt;br /&gt;
&lt;br /&gt;
 sudo apt-get install -y ubertooth cmake libusb-1.0-0-dev make gcc g++ libbluetooth-dev pkg-config python3-numpy python3-qtpy&lt;br /&gt;
&lt;br /&gt;
=== Install libbtbb ===&lt;br /&gt;
 wget https://github.com/greatscottgadgets/libbtbb/archive/2020-12-R1.tar.gz -O libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 tar -xf libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 cd libbtbb-2020-12-R1&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Install Ubertooth Tools ===&lt;br /&gt;
&lt;br /&gt;
 wget https://github.com/greatscottgadgets/ubertooth/releases/download/2020-12-R1/ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 tar -xf ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 cd ubertooth-2020-12-R1/host&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Ubertooth One Firmware update ===&lt;br /&gt;
 cd firmware&lt;br /&gt;
 sudo apt-get install -y gcc-arm-none-eabi&lt;br /&gt;
 make clean all&lt;br /&gt;
 make&lt;br /&gt;
 cd bluetooth_rxtx&lt;br /&gt;
 ubertooth-dfu -d bluetooth_rxtx.dfu -r&lt;br /&gt;
&lt;br /&gt;
To show the Firmware use the command &lt;br /&gt;
 ubertooth-util -v&lt;br /&gt;
Firmware version: git-7b656c1 (API:1.07)&lt;br /&gt;
&lt;br /&gt;
=== Wireshark sniffing ===&lt;br /&gt;
The ubertooth one device is used for sniffing the bluetooth packets&lt;br /&gt;
and wireshark is displaying the packets. &lt;br /&gt;
 mkfifo /tmp/pipe&lt;br /&gt;
 sudo wireshark -k -i /tmp/pipe &amp;amp;&lt;br /&gt;
 sudo ubertooth-btle -f -c /tmp/pipe&lt;br /&gt;
=== MITM attack ===&lt;br /&gt;
To find out what GAT messages between a BLE device and a smartphone are being exchanged, I used a&lt;br /&gt;
MITM attack. For this the tool btlejuice was used.&lt;br /&gt;
&lt;br /&gt;
Create 2 virtual machines with Ubuntu 18.04 and make sure that a bluetooth adapter is available on both machines.&lt;br /&gt;
Make sure that the machines can reach each other over the network. It is also recommend to turn &lt;br /&gt;
of the firewall.&lt;br /&gt;
 sudo apt-get install -y nodejs npm bluetooth bluez libbluetooth-dev libudev-dev&lt;br /&gt;
 sudo npm install -g btlejuice&lt;br /&gt;
 sudo service ufw stop&lt;br /&gt;
 sudo ufw disable&lt;br /&gt;
One machine acts as proxy. On this machine enter the command:&lt;br /&gt;
 sudo btlejuice-proxy&lt;br /&gt;
The second machine is the core unit and there you enter:&lt;br /&gt;
 sudo btlejuice -u &amp;lt;ip proxy&amp;gt; -w&lt;br /&gt;
&lt;br /&gt;
=== Gatttool ===&lt;br /&gt;
&lt;br /&gt;
== Used Hardware ==&lt;br /&gt;
All hardware is used from the Elvis Lab. &lt;br /&gt;
* Ubertooth One&lt;br /&gt;
* &lt;br /&gt;
&lt;br /&gt;
== Courses ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== References ==&lt;br /&gt;
&lt;br /&gt;
* https://wikipedia.org&lt;br /&gt;
* https://google.com&lt;br /&gt;
&lt;br /&gt;
[[Category:Documentation]]&lt;/div&gt;</summary>
		<author><name>LHerenda</name></author>
	</entry>
	<entry>
		<id>https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=7987</id>
		<title>Bluetooth LE Hacking</title>
		<link rel="alternate" type="text/html" href="https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=7987"/>
		<updated>2021-11-11T17:13:22Z</updated>

		<summary type="html">&lt;p&gt;LHerenda: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Summary == &lt;br /&gt;
&lt;br /&gt;
This page describes the basics steps of how a BLE device can be attacked.&lt;br /&gt;
&lt;br /&gt;
== Requirements ==&lt;br /&gt;
&lt;br /&gt;
* Operating system: Ubuntu 21.10, Ubuntu 18.04&lt;br /&gt;
* Elvis lab IoT devices&lt;br /&gt;
&lt;br /&gt;
In order to complete these steps, you must have followed before.&lt;br /&gt;
&lt;br /&gt;
== Description ==&lt;br /&gt;
First install ubertooth one and all libraries. A full documentation is available on: https://ubertooth.readthedocs.io/en/latest/build_guide.html&lt;br /&gt;
&lt;br /&gt;
Check if ubertooth one is recognized:&lt;br /&gt;
 lsusb&lt;br /&gt;
Bus 001 Device 003: ID 1d50:6002 OpenMoko, Inc. Ubertooth One&lt;br /&gt;
&lt;br /&gt;
 sudo apt-get install -y ubertooth cmake libusb-1.0-0-dev make gcc g++ libbluetooth-dev pkg-config python3-numpy python3-qtpy&lt;br /&gt;
&lt;br /&gt;
=== Install libbtbb ===&lt;br /&gt;
 wget https://github.com/greatscottgadgets/libbtbb/archive/2020-12-R1.tar.gz -O libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 tar -xf libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 cd libbtbb-2020-12-R1&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Install Ubertooth Tools ===&lt;br /&gt;
&lt;br /&gt;
 wget https://github.com/greatscottgadgets/ubertooth/releases/download/2020-12-R1/ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 tar -xf ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 cd ubertooth-2020-12-R1/host&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Ubertooth One Firmware update ===&lt;br /&gt;
 cd firmware&lt;br /&gt;
 sudo apt-get install -y gcc-arm-none-eabi&lt;br /&gt;
 make clean all&lt;br /&gt;
 make&lt;br /&gt;
 cd bluetooth_rxtx&lt;br /&gt;
 ubertooth-dfu -d bluetooth_rxtx.dfu -r&lt;br /&gt;
&lt;br /&gt;
To show the Firmware use the command &lt;br /&gt;
 ubertooth-util -v&lt;br /&gt;
Firmware version: git-7b656c1 (API:1.07)&lt;br /&gt;
&lt;br /&gt;
=== Wireshark sniffing ===&lt;br /&gt;
The ubertooth one device is used for sniffing the bluetooth packets&lt;br /&gt;
and wireshark is displaying the packets. &lt;br /&gt;
 mkfifo /tmp/pipe&lt;br /&gt;
 sudo wireshark -k -i /tmp/pipe &amp;amp;&lt;br /&gt;
 sudo ubertooth-btle -f -c /tmp/pipe&lt;br /&gt;
=== MITM attack ===&lt;br /&gt;
To find out what GAT messages between a BLE device and a smartphone are being exchanged, I used a&lt;br /&gt;
MITM attack. For this the tool btlejuice was used.&lt;br /&gt;
&lt;br /&gt;
Create 2 virtual machines with Ubuntu 18.04 and make sure that a bluetooth adapter is available on both machines.&lt;br /&gt;
Make sure that the machines can reach each other over the network. It is also recommend to turn &lt;br /&gt;
of the firewall.&lt;br /&gt;
 sudo apt-get install -y nodejs npm bluetooth bluez libbluetooth-dev libudev-dev&lt;br /&gt;
 sudo npm install -g btlejuice&lt;br /&gt;
 sudo service ufw stop&lt;br /&gt;
 sudo ufw disable&lt;br /&gt;
One machine acts as proxy. On this machine enter the command:&lt;br /&gt;
 sudo btlejuice-proxy&lt;br /&gt;
The second machine is the core unit and there you enter:&lt;br /&gt;
 sudo btlejuice -u &amp;lt;ip proxy&amp;gt; -w&lt;br /&gt;
&lt;br /&gt;
=== Gatttool ===&lt;br /&gt;
&lt;br /&gt;
== Used Hardware ==&lt;br /&gt;
All hardware is used from the Elvis Lab. &lt;br /&gt;
* Ubertooth One&lt;br /&gt;
* &lt;br /&gt;
&lt;br /&gt;
== Courses ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== References ==&lt;br /&gt;
&lt;br /&gt;
* https://wikipedia.org&lt;br /&gt;
* https://google.com&lt;br /&gt;
&lt;br /&gt;
[[Category:Documentation]]&lt;/div&gt;</summary>
		<author><name>LHerenda</name></author>
	</entry>
	<entry>
		<id>https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=7972</id>
		<title>Bluetooth LE Hacking</title>
		<link rel="alternate" type="text/html" href="https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=7972"/>
		<updated>2021-11-06T20:32:30Z</updated>

		<summary type="html">&lt;p&gt;LHerenda: /* MITM attack */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Summary == &lt;br /&gt;
&lt;br /&gt;
This page describes the basics steps of how a BLE device can be attacked.&lt;br /&gt;
&lt;br /&gt;
== Requirements ==&lt;br /&gt;
&lt;br /&gt;
* Operating system: Ubuntu 21.10, Ubuntu 18.04&lt;br /&gt;
* Elvis lab IoT devices&lt;br /&gt;
&lt;br /&gt;
In order to complete these steps, you must have followed before.&lt;br /&gt;
&lt;br /&gt;
== Description ==&lt;br /&gt;
First install ubertooth one and all libraries. A full documentation is available on: https://ubertooth.readthedocs.io/en/latest/build_guide.html&lt;br /&gt;
&lt;br /&gt;
Check if ubertooth one is recognized:&lt;br /&gt;
 lsusb&lt;br /&gt;
Bus 001 Device 003: ID 1d50:6002 OpenMoko, Inc. Ubertooth One&lt;br /&gt;
&lt;br /&gt;
 sudo apt-get install -y ubertooth cmake libusb-1.0-0-dev make gcc g++ libbluetooth-dev pkg-config python3-numpy python3-qtpy&lt;br /&gt;
&lt;br /&gt;
=== Install libbtbb ===&lt;br /&gt;
 wget https://github.com/greatscottgadgets/libbtbb/archive/2020-12-R1.tar.gz -O libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 tar -xf libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 cd libbtbb-2020-12-R1&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Install Ubertooth Tools ===&lt;br /&gt;
&lt;br /&gt;
 wget https://github.com/greatscottgadgets/ubertooth/releases/download/2020-12-R1/ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 tar -xf ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 cd ubertooth-2020-12-R1/host&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Ubertooth One Firmware update ===&lt;br /&gt;
 cd firmware&lt;br /&gt;
 sudo apt-get install -y gcc-arm-none-eabi&lt;br /&gt;
 make clean all&lt;br /&gt;
 make&lt;br /&gt;
 cd bluetooth_rxtx&lt;br /&gt;
 ubertooth-dfu -d bluetooth_rxtx.dfu -r&lt;br /&gt;
&lt;br /&gt;
To show the Firmware use the command &lt;br /&gt;
 ubertooth-util -v&lt;br /&gt;
Firmware version: git-7b656c1 (API:1.07)&lt;br /&gt;
&lt;br /&gt;
=== Wireshark sniffing ===&lt;br /&gt;
The ubertooth one device is used for sniffing the bluetooth packets&lt;br /&gt;
and wireshark is displaying the packets. &lt;br /&gt;
 mkpipe /tmp/pipe&lt;br /&gt;
 sudo wireshark -k -i /tmp/pipe &amp;amp;&lt;br /&gt;
 sudo ubertooth-btle -f -c /tmp/pipe&lt;br /&gt;
=== MITM attack ===&lt;br /&gt;
To find out what GAT messages between a BLE device and a smartphone are being exchanged, I used a&lt;br /&gt;
MITM attack. For this the tool btlejuice was used.&lt;br /&gt;
&lt;br /&gt;
Create 2 virtual machines with Ubuntu 18.04 and make sure that a bluetooth adapter is available on both machines.&lt;br /&gt;
Make sure that the machines can reach each other over the network. It is also recommend to turn &lt;br /&gt;
of the firewall.&lt;br /&gt;
 sudo apt-get install -y nodejs npm bluetooth bluez libbluetooth-dev libudev-dev&lt;br /&gt;
 sudo npm install -g btlejuice&lt;br /&gt;
 sudo service ufw stop&lt;br /&gt;
 sudo ufw disable&lt;br /&gt;
One machine acts as proxy. On this machine enter the command:&lt;br /&gt;
 sudo btlejuice-proxy&lt;br /&gt;
The second machine is the core unit and there you enter:&lt;br /&gt;
 sudo btlejuice -u &amp;lt;ip proxy&amp;gt; -w&lt;br /&gt;
&lt;br /&gt;
=== Gatttool ===&lt;br /&gt;
&lt;br /&gt;
== Used Hardware ==&lt;br /&gt;
All hardware is used from the Elvis Lab. &lt;br /&gt;
* Ubertooth One&lt;br /&gt;
* &lt;br /&gt;
&lt;br /&gt;
== Courses ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== References ==&lt;br /&gt;
&lt;br /&gt;
* https://wikipedia.org&lt;br /&gt;
* https://google.com&lt;br /&gt;
&lt;br /&gt;
[[Category:Documentation]]&lt;/div&gt;</summary>
		<author><name>LHerenda</name></author>
	</entry>
	<entry>
		<id>https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=7971</id>
		<title>Bluetooth LE Hacking</title>
		<link rel="alternate" type="text/html" href="https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=7971"/>
		<updated>2021-11-06T17:23:55Z</updated>

		<summary type="html">&lt;p&gt;LHerenda: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Summary == &lt;br /&gt;
&lt;br /&gt;
This page describes the basics steps of how a BLE device can be attacked.&lt;br /&gt;
&lt;br /&gt;
== Requirements ==&lt;br /&gt;
&lt;br /&gt;
* Operating system: Ubuntu 21.10, Ubuntu 18.04&lt;br /&gt;
* Elvis lab IoT devices&lt;br /&gt;
&lt;br /&gt;
In order to complete these steps, you must have followed before.&lt;br /&gt;
&lt;br /&gt;
== Description ==&lt;br /&gt;
First install ubertooth one and all libraries. A full documentation is available on: https://ubertooth.readthedocs.io/en/latest/build_guide.html&lt;br /&gt;
&lt;br /&gt;
Check if ubertooth one is recognized:&lt;br /&gt;
 lsusb&lt;br /&gt;
Bus 001 Device 003: ID 1d50:6002 OpenMoko, Inc. Ubertooth One&lt;br /&gt;
&lt;br /&gt;
 sudo apt-get install -y ubertooth cmake libusb-1.0-0-dev make gcc g++ libbluetooth-dev pkg-config python3-numpy python3-qtpy&lt;br /&gt;
&lt;br /&gt;
=== Install libbtbb ===&lt;br /&gt;
 wget https://github.com/greatscottgadgets/libbtbb/archive/2020-12-R1.tar.gz -O libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 tar -xf libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 cd libbtbb-2020-12-R1&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Install Ubertooth Tools ===&lt;br /&gt;
&lt;br /&gt;
 wget https://github.com/greatscottgadgets/ubertooth/releases/download/2020-12-R1/ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 tar -xf ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 cd ubertooth-2020-12-R1/host&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Ubertooth One Firmware update ===&lt;br /&gt;
 cd firmware&lt;br /&gt;
 sudo apt-get install -y gcc-arm-none-eabi&lt;br /&gt;
 make clean all&lt;br /&gt;
 make&lt;br /&gt;
 cd bluetooth_rxtx&lt;br /&gt;
 ubertooth-dfu -d bluetooth_rxtx.dfu -r&lt;br /&gt;
&lt;br /&gt;
To show the Firmware use the command &lt;br /&gt;
 ubertooth-util -v&lt;br /&gt;
Firmware version: git-7b656c1 (API:1.07)&lt;br /&gt;
&lt;br /&gt;
=== Wireshark sniffing ===&lt;br /&gt;
The ubertooth one device is used for sniffing the bluetooth packets&lt;br /&gt;
and wireshark is displaying the packets. &lt;br /&gt;
 mkpipe /tmp/pipe&lt;br /&gt;
 sudo wireshark -k -i /tmp/pipe &amp;amp;&lt;br /&gt;
 sudo ubertooth-btle -f -c /tmp/pipe&lt;br /&gt;
=== MITM attack ===&lt;br /&gt;
To find out what GAT messages between a BLE device and a smartphone are being exchanged, I used a&lt;br /&gt;
MITM attack. For this the tool btlejuice was used.&lt;br /&gt;
&lt;br /&gt;
Create 2 virtual machines with Ubuntu 18.04 and make sure that a bluetooth adapter is available on both machines.&lt;br /&gt;
Make sure that the machines can reach each other over the network. It is also recommend to turn &lt;br /&gt;
of the firewall.&lt;br /&gt;
 sudo service ufw stop&lt;br /&gt;
 sudo ufw disable&lt;br /&gt;
One machine acts as proxy. On this machine enter the command:&lt;br /&gt;
 sudo btlejuice-proxy&lt;br /&gt;
The second machine is the core unit and there you enter:&lt;br /&gt;
 sudo btlejuice -u &amp;lt;ip proxy&amp;gt; -w&lt;br /&gt;
=== Gatttool ===&lt;br /&gt;
&lt;br /&gt;
== Used Hardware ==&lt;br /&gt;
All hardware is used from the Elvis Lab. &lt;br /&gt;
* Ubertooth One&lt;br /&gt;
* &lt;br /&gt;
&lt;br /&gt;
== Courses ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== References ==&lt;br /&gt;
&lt;br /&gt;
* https://wikipedia.org&lt;br /&gt;
* https://google.com&lt;br /&gt;
&lt;br /&gt;
[[Category:Documentation]]&lt;/div&gt;</summary>
		<author><name>LHerenda</name></author>
	</entry>
	<entry>
		<id>https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=7959</id>
		<title>Bluetooth LE Hacking</title>
		<link rel="alternate" type="text/html" href="https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=7959"/>
		<updated>2021-11-02T10:24:26Z</updated>

		<summary type="html">&lt;p&gt;LHerenda: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Summary == &lt;br /&gt;
&lt;br /&gt;
This page describes the basics steps of how a BLE device can be attacked.&lt;br /&gt;
&lt;br /&gt;
== Requirements ==&lt;br /&gt;
&lt;br /&gt;
* Operating system: Ubuntu 21.10&lt;br /&gt;
* Elvis lab IoT devices&lt;br /&gt;
&lt;br /&gt;
In order to complete these steps, you must have followed before.&lt;br /&gt;
&lt;br /&gt;
== Description ==&lt;br /&gt;
First install ubertooth one and all libraries. A full documentation is available on: https://ubertooth.readthedocs.io/en/latest/build_guide.html&lt;br /&gt;
&lt;br /&gt;
Check if ubertooth one is recognized:&lt;br /&gt;
 lsusb&lt;br /&gt;
Bus 001 Device 003: ID 1d50:6002 OpenMoko, Inc. Ubertooth One&lt;br /&gt;
&lt;br /&gt;
 sudo apt-get install -y ubertooth cmake libusb-1.0-0-dev make gcc g++ libbluetooth-dev pkg-config python3-numpy python3-qtpy&lt;br /&gt;
&lt;br /&gt;
=== Install libbtbb ===&lt;br /&gt;
 wget https://github.com/greatscottgadgets/libbtbb/archive/2020-12-R1.tar.gz -O libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 tar -xf libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 cd libbtbb-2020-12-R1&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Install Ubertooth Tools ===&lt;br /&gt;
&lt;br /&gt;
 wget https://github.com/greatscottgadgets/ubertooth/releases/download/2020-12-R1/ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 tar -xf ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 cd ubertooth-2020-12-R1/host&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Ubertooth One Firmware update ===&lt;br /&gt;
 cd firmware&lt;br /&gt;
 sudo apt-get install -y gcc-arm-none-eabi&lt;br /&gt;
 make clean all&lt;br /&gt;
 make&lt;br /&gt;
 cd bluetooth_rxtx&lt;br /&gt;
 ubertooth-dfu -d bluetooth_rxtx.dfu -r&lt;br /&gt;
&lt;br /&gt;
To show the Firmware use the command &lt;br /&gt;
 ubertooth-util -v&lt;br /&gt;
Firmware version: git-7b656c1 (API:1.07)&lt;br /&gt;
&lt;br /&gt;
=== Wireshark sniffing ===&lt;br /&gt;
The ubertooth one device is used for sniffing the bluetooth packets&lt;br /&gt;
and wireshark is displaying the packets. &lt;br /&gt;
 mkpipe /tmp/pipe&lt;br /&gt;
 sudo wireshark -k -i /tmp/pipe &amp;amp;&lt;br /&gt;
 sudo ubertooth-btle -f -c /tmp/pipe&lt;br /&gt;
=== Gatttool ===&lt;br /&gt;
&lt;br /&gt;
== Used Hardware ==&lt;br /&gt;
All hardware is used from the Elvis Lab. &lt;br /&gt;
* Ubertooth One&lt;br /&gt;
* &lt;br /&gt;
&lt;br /&gt;
== Courses ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== References ==&lt;br /&gt;
&lt;br /&gt;
* https://wikipedia.org&lt;br /&gt;
* https://google.com&lt;br /&gt;
&lt;br /&gt;
[[Category:Documentation]]&lt;/div&gt;</summary>
		<author><name>LHerenda</name></author>
	</entry>
	<entry>
		<id>https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=7958</id>
		<title>Bluetooth LE Hacking</title>
		<link rel="alternate" type="text/html" href="https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=7958"/>
		<updated>2021-11-01T17:31:55Z</updated>

		<summary type="html">&lt;p&gt;LHerenda: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Summary == &lt;br /&gt;
&lt;br /&gt;
This page describes the basics steps of a BLE device attack.&lt;br /&gt;
&lt;br /&gt;
== Requirements ==&lt;br /&gt;
&lt;br /&gt;
* Operating system: Ubuntu 21.10&lt;br /&gt;
&lt;br /&gt;
In order to complete these steps, you must have followed before.&lt;br /&gt;
&lt;br /&gt;
== Description ==&lt;br /&gt;
First install ubertooth one and all libraries. A full documentation is available on: https://ubertooth.readthedocs.io/en/latest/build_guide.html&lt;br /&gt;
&lt;br /&gt;
Check if ubertooth one is recognized:&lt;br /&gt;
 lsusb&lt;br /&gt;
Bus 001 Device 003: ID 1d50:6002 OpenMoko, Inc. Ubertooth One&lt;br /&gt;
&lt;br /&gt;
 sudo apt-get install -y ubertooth cmake libusb-1.0-0-dev make gcc g++ libbluetooth-dev pkg-config python3-numpy python3-qtpy&lt;br /&gt;
&lt;br /&gt;
=== Install libbtbb ===&lt;br /&gt;
 wget https://github.com/greatscottgadgets/libbtbb/archive/2020-12-R1.tar.gz -O libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 tar -xf libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 cd libbtbb-2020-12-R1&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Install Ubertooth Tools ===&lt;br /&gt;
&lt;br /&gt;
 wget https://github.com/greatscottgadgets/ubertooth/releases/download/2020-12-R1/ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 tar -xf ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 cd ubertooth-2020-12-R1/host&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Ubertooth One Firmware update ===&lt;br /&gt;
 cd firmware&lt;br /&gt;
 sudo apt-get install -y gcc-arm-none-eabi&lt;br /&gt;
 make clean all&lt;br /&gt;
 make&lt;br /&gt;
 cd bluetooth_rxtx&lt;br /&gt;
 ubertooth-dfu -d bluetooth_rxtx.dfu -r&lt;br /&gt;
&lt;br /&gt;
To show the Firmware use the command &lt;br /&gt;
 ubertooth-util -v&lt;br /&gt;
Firmware version: git-7b656c1 (API:1.07)&lt;br /&gt;
&lt;br /&gt;
== Wireshark sniffing ==&lt;br /&gt;
&lt;br /&gt;
== gatttool ==&lt;br /&gt;
&lt;br /&gt;
== Used Hardware ==&lt;br /&gt;
&lt;br /&gt;
* Ubertooth One&lt;br /&gt;
* &lt;br /&gt;
&lt;br /&gt;
[[Device to be used with this documentation]]&lt;br /&gt;
[[Maybe another device to be used with this documentation]]&lt;br /&gt;
&lt;br /&gt;
== Courses ==&lt;br /&gt;
&lt;br /&gt;
* [[A course where this documentation was used]] (2017, 2018)&lt;br /&gt;
* [[Another one]] (2018)&lt;br /&gt;
&lt;br /&gt;
== References ==&lt;br /&gt;
&lt;br /&gt;
* https://wikipedia.org&lt;br /&gt;
* https://google.com&lt;br /&gt;
&lt;br /&gt;
[[Category:Documentation]]&lt;/div&gt;</summary>
		<author><name>LHerenda</name></author>
	</entry>
	<entry>
		<id>https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=7957</id>
		<title>Bluetooth LE Hacking</title>
		<link rel="alternate" type="text/html" href="https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=7957"/>
		<updated>2021-11-01T17:31:17Z</updated>

		<summary type="html">&lt;p&gt;LHerenda: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Summary == &lt;br /&gt;
&lt;br /&gt;
This page describes the basics steps of a BLE device attack.&lt;br /&gt;
&lt;br /&gt;
== Requirements ==&lt;br /&gt;
&lt;br /&gt;
* Operating system: Ubuntu 21.10&lt;br /&gt;
&lt;br /&gt;
In order to complete these steps, you must have followed [[Some Other Documentation]] before.&lt;br /&gt;
&lt;br /&gt;
== Description ==&lt;br /&gt;
First install ubertooth one and all libraries. A full documentation is available on: https://ubertooth.readthedocs.io/en/latest/build_guide.html&lt;br /&gt;
&lt;br /&gt;
Check if ubertooth one is recognized:&lt;br /&gt;
 lsusb&lt;br /&gt;
Bus 001 Device 003: ID 1d50:6002 OpenMoko, Inc. Ubertooth One&lt;br /&gt;
&lt;br /&gt;
 sudo apt-get install -y ubertooth cmake libusb-1.0-0-dev make gcc g++ libbluetooth-dev pkg-config python3-numpy python3-qtpy&lt;br /&gt;
&lt;br /&gt;
=== Install libbtbb ===&lt;br /&gt;
 wget https://github.com/greatscottgadgets/libbtbb/archive/2020-12-R1.tar.gz -O libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 tar -xf libbtbb-2020-12-R1.tar.gz&lt;br /&gt;
 cd libbtbb-2020-12-R1&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Install Ubertooth Tools ===&lt;br /&gt;
&lt;br /&gt;
 wget https://github.com/greatscottgadgets/ubertooth/releases/download/2020-12-R1/ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 tar -xf ubertooth-2020-12-R1.tar.xz&lt;br /&gt;
 cd ubertooth-2020-12-R1/host&lt;br /&gt;
 mkdir build&lt;br /&gt;
 cd build&lt;br /&gt;
 cmake ..&lt;br /&gt;
 make&lt;br /&gt;
 sudo make install&lt;br /&gt;
 sudo ldconfig&lt;br /&gt;
&lt;br /&gt;
=== Ubertooth One Firmware update ===&lt;br /&gt;
 cd firmware&lt;br /&gt;
 sudo apt-get install -y gcc-arm-none-eabi&lt;br /&gt;
 make clean all&lt;br /&gt;
 make&lt;br /&gt;
 cd bluetooth_rxtx&lt;br /&gt;
 ubertooth-dfu -d bluetooth_rxtx.dfu -r&lt;br /&gt;
&lt;br /&gt;
To show the Firmware use the command &lt;br /&gt;
 ubertooth-util -v&lt;br /&gt;
Firmware version: git-7b656c1 (API:1.07)&lt;br /&gt;
&lt;br /&gt;
== Wireshark sniffing ==&lt;br /&gt;
&lt;br /&gt;
== gatttool ==&lt;br /&gt;
&lt;br /&gt;
== Used Hardware ==&lt;br /&gt;
&lt;br /&gt;
* Ubertooth One&lt;br /&gt;
* &lt;br /&gt;
&lt;br /&gt;
[[Device to be used with this documentation]]&lt;br /&gt;
[[Maybe another device to be used with this documentation]]&lt;br /&gt;
&lt;br /&gt;
== Courses ==&lt;br /&gt;
&lt;br /&gt;
* [[A course where this documentation was used]] (2017, 2018)&lt;br /&gt;
* [[Another one]] (2018)&lt;br /&gt;
&lt;br /&gt;
== References ==&lt;br /&gt;
&lt;br /&gt;
* https://wikipedia.org&lt;br /&gt;
* https://google.com&lt;br /&gt;
&lt;br /&gt;
[[Category:Documentation]]&lt;/div&gt;</summary>
		<author><name>LHerenda</name></author>
	</entry>
	<entry>
		<id>https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=7956</id>
		<title>Bluetooth LE Hacking</title>
		<link rel="alternate" type="text/html" href="https://elvis.hcw.ac.at/wiki/index.php?title=Bluetooth_LE_Hacking&amp;diff=7956"/>
		<updated>2021-11-01T15:57:08Z</updated>

		<summary type="html">&lt;p&gt;LHerenda: Created page with &amp;quot;== Summary ==   This page describes the basics steps of a BLE device attack.  == Requirements ==  * Operating system: Ubuntu 21.10 * Packages: git emacs  In order to complete...&amp;quot;&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Summary == &lt;br /&gt;
&lt;br /&gt;
This page describes the basics steps of a BLE device attack.&lt;br /&gt;
&lt;br /&gt;
== Requirements ==&lt;br /&gt;
&lt;br /&gt;
* Operating system: Ubuntu 21.10&lt;br /&gt;
* Packages: git emacs&lt;br /&gt;
&lt;br /&gt;
In order to complete these steps, you must have followed [[Some Other Documentation]] before.&lt;br /&gt;
&lt;br /&gt;
== Description ==&lt;br /&gt;
Install ubertooth&lt;br /&gt;
&lt;br /&gt;
=== Step 1 ===&lt;br /&gt;
&lt;br /&gt;
Enter these commands in the shell&lt;br /&gt;
&lt;br /&gt;
 echo foo&lt;br /&gt;
 echo bar&lt;br /&gt;
&lt;br /&gt;
=== Step 2 ===&lt;br /&gt;
&lt;br /&gt;
Make sure to read&lt;br /&gt;
&lt;br /&gt;
* War and Peace&lt;br /&gt;
* Lord of the Rings&lt;br /&gt;
* The Baroque Cycle&lt;br /&gt;
&lt;br /&gt;
== Used Hardware ==&lt;br /&gt;
&lt;br /&gt;
[[Device to be used with this documentation]]&lt;br /&gt;
[[Maybe another device to be used with this documentation]]&lt;br /&gt;
&lt;br /&gt;
== Courses ==&lt;br /&gt;
&lt;br /&gt;
* [[A course where this documentation was used]] (2017, 2018)&lt;br /&gt;
* [[Another one]] (2018)&lt;br /&gt;
&lt;br /&gt;
== References ==&lt;br /&gt;
&lt;br /&gt;
* https://wikipedia.org&lt;br /&gt;
* https://google.com&lt;br /&gt;
&lt;br /&gt;
[[Category:Documentation]]&lt;/div&gt;</summary>
		<author><name>LHerenda</name></author>
	</entry>
</feed>