akramiot/ble

ble's Issues

Attack

!/bin/bash

AUTHOR -AKRAM-

clear
echo "STARTING TO CAPTURE HIDDEN WIFI ESSI - NWK"

wireless_interface=wlan0

airodump-ng wlan0 --band g >> SNIFF_G.txt

while true
do
echo -n "MESSAGE: Please enter the target channel here: "
read -e CHANNEL
echo "MESSAGE: Target Channel : ${CHANNEL}"
echo "MESSAGE: CLIENT MAC Address : ${MACADDRESS}
read -e CONFIRM
case $CONFIRM in
y|Y|YES|yes|Yes)
break ;;
*) echo "MESSAGE: Please re-enter information"
esac
done
fi
~

WIFI Hidden ESSID Detection [Using a Shell Script] -Automated and Solved using Kali Bactrack Linux Tool

!/bin/bash

AUTHOR -AKRAM-

clear
echo "STARTING TO CAPTURE HIDDEN WIFI ESSID - NWK"

wireless_interface=wlan0

echo -n "MESSAGE: Please enter the target channel BAND here: A or G: "
read -e CHANNEL

Scanning for 10 Mins

if [ $CHANNEL == "A" ]
then
{ airodump-ng wlan0 2>> SNIFF.txt; } &
PID=$!
sleep 10
elif [ $CHANNEL == "G" ]
then
{ airodump-ng wlan0 2>> SNIFF.txt; } &
PID=$!
sleep 10
else
echo "ALL DONE"
fi

Hidden ESSID Pattern

egrep '<length:' SNIFF.txt > airodump.txt

echo "This is the list of Hidden WIFI NWK BSSID's and Corresponding Channel Numbers"
echo "BSSID CHANNEL"

cat airodump.txt | awk '{print $1, $6}'

kill -TERM $PID

Done

BLE_scan.c

include <stdio.h>

include <stdlib.h>

include <unistd.h>

include <sys/socket.h>

include <bluetooth/bluetooth.h>

include <bluetooth/hci.h>

include <bluetooth/hci_lib.h>

int main(int argc, char *argv)
{
inquiry_info *ii = NULL;
int max_rsp, num_rsp;
int dev_id, sock, len, flags;
int i;
char addr[19] = { 0 };
char name[248] = { 0 };
dev_id = hci_get_route(NULL);
sock = hci_open_dev( dev_id );
if (dev_id < 0 || sock < 0)
{
perror("opening socket");
exit(1);
}
len = 8;
max_rsp = 255;
flags = IREQ_CACHE_FLUSH;
ii = (inquiry_info)malloc(max_rsp * sizeof(inquiry_info));
num_rsp = hci_inquiry(dev_id, len, max_rsp, NULL, &ii, flags);
if( num_rsp < 0 ) perror("hci_inquiry");
for (i = 0; i < num_rsp; i++)
{
ba2str(&(ii+i)->bdaddr, addr);
memset(name, 0, sizeof(name));
if (hci_read_remote_name(sock, &(ii+i)->bdaddr, sizeof(name),name, 0) < 0)
strcpy(name, "[unknown]");
printf("%s %s\n", addr, name);
}
free( ii );
close( sock );
return 0;
}
~