internetofdongs/iod-buttsniffer

IoD Bluetooth Sniffer rPi solution

IoD-ButtSniffer

IoD Bluetooth Sniffer rPi solution

Hardware:

Raspberry Pi 3 model B - LINK
DS3231 Real Time Clock - LINK
Asus BT400 USB Bluetooth 4.0 adapter LINK
8gb or larger MicroSD card for rPi

Software:

• OS: Raspian Buster Lite (Built and tested on release 2019-07-10) Download link
• Scanner: Kismet Wireless Scanner Download link
• Kismet Plugin: IoD-Screwdriver IoD device highlighting plugin Download link
• Kismet Plugin: Kismet Mobile Dashboard Download link
• BT Firmware: WinterHeart Broadcom Firmware repository Download link

This uses the new Kismet Development branch which is changing daily and a moving target. Things may break from time to time. Use at your own risk

Assumptions:

• rPi3 onboard Bluetooth and two BT400's all used for scanning
• rPi3 onboard Wi-Fi used as access point for serving Kismet console data to mobile device
• rPi3 onboard Ethernet is set to DHCP for LAN access and SSH data access
• DS3231 RTC module for maintaining the clock sync for accurate logs (optional but useful for accurate log timestamps)
• Mobile device (phone/tablet) used for accessing web interface to monitor data collection (if you want to do realtime monitoring. Can also access the Kismet console over ethernet)
• System can be run easily off of USB 5v battery packs with 2.1 AMP capability. Runtime determined by capacity of battery pack
• Unit can used for static installation as well over LAN connection as well
• Usernames and Passwords assumed to be default on the rPi, but any sudo capable user should work
• Installation assumes Internet access via LAN Ethernet connection for github downloads, etc.

Install Instructions:

• Write Raspian image to SD card as per normal and boot the image

• Install git via apt-get (sudo apt-get install git)

• Grab the IoD-ButtSniffer scripts (git clone https://github.com/internetofdongs/IoD-ButtSniffer)

• Change into the IoD-ButtSniffer directory (cd IoD-ButtSniffer) and run the scripts (no sudo needed, the script calls sudo when needed):

There are 3 main scripts to run and should be run in this order:

1. setup_system.sh - Sets up the system, installs dependancies and configurations for various system services

2. setup_kismet.sh - Download kismet dependancies, the git repository and plugins. It then builds kismet, the plugins, copies the config files, and sets up the data directory

3. setup_BT_FW - (Optional) - If your Bluetooth adapter is complaining in dmesg about needing a firmware:

Bluetooth hci1: Direct firmware load for brcm/BCM20702A1-0b05-17cb.hcd failed with error -2"
Bluetooth: hci1: BCM: Patch brcm/BCM20702A1-0b05-17cb.hcd not found"

Run this script to download the various firmwares for broadcom based adapters and copy the .hcd file that it is looking for (i.e. BCM20702A1-0b05-17cb.hcd) from the ~/broadcom-bt-firmware/brcm/ directory to /lib/firmware/brcm/, then reboot or reinsert the adapter"

Errata

On first run, you'll have to setup a username and password in Kismet. Connect to the Wifi SSID "ButtSniffer" with a mobile device or laptop and connect to Kismet at http://192.168.88.1:2501. Next time you connect, you'll have to enter this username and password again.

Currently not automatically installing the mobile dashboard since there is no simple way to build it if you use the Kismet packages. May need to figure out a build package system of some sort.

TO DO

Menus and install questions to allow various configuration options
Tons of tweaks to the Kismet config (updated for Raspian 2019-07-10 and Kismet Packages as of September 24th, 2019)