Tools / BrakTooth (ESP32 PoC)

BrakTooth (ESP32 PoC)

PROJECT
Matheus Garbelini · Bluetooth Classic
GitHub repository ↗

The public PoC release for the BrakTooth family of Bluetooth Classic baseband/LMP vulnerabilities, roughly 16 CVEs and 20+ attack variants against the BR/EDR controllers of dozens of SoCs (Espressif ESP32, Intel AX200, Qualcomm, Cypress/Infineon, TI CC2564 and more). Built on the patched-ESP32 sniffer; the attacks range from crash/DoS to, on some targets, RCE. Representative, check vendor advisories for current patch status. Authorised testing only, against devices you own or are contracted to assess.

USED IN THE WAYFINDER

Bluetooth Classic · AT