Passive Bluetooth Monitoring in Scapy

Architecture and Background

Copy of the slides for this talk are here: Extras: Passive Bluetooth Monitoring in Scapy Ryan Holeman Recognizing a need to support passive bluetooth monitoring in Scapy, Python's interactive monitoring framework, a project was launched to produce this functionality. Through this functionality, a new means for interactively observing bluetooth was created along with Python APIs to assist in the development of bluetooth auditing, pentesting and exploitation tools.

Vulnerability Analysis

The project supplements the work of Michael Ossman et al by providing Python extensions and Scapy modules which interact with an Ubertooth dongle. The project also provides support for other passive bluetooth techniques not present in the current Ubertooth core software such as NAP identification, vendor lookup, extended logging and more.

Exploitation and Demonstrations

In conjunction with this presentation, the source for this project will be released along with distribution packages for easy installation. Ryan Holeman resides in Austin Texas where he works as a software developer specializing in backend services.

Remediation and Defensive Strategies

He has a Masters of Science in Software Engineering and has published papers though ICSM and ICPC. His spare time is mostly spent digging into various network protocols and shredding local skateparks.