Bluetooth Security Testing with BlueToolkit: a Large-Scale Automotive Case Study
summary
BlueToolkit is an open-source Bluetooth Classic security framework that performs over-the-air black-box testing with no vendor firmware required, using YAML-configured exploits and producing human- and machine-readable JSON reports. The tool bundles 44 exploits (MITM, RCE, DoS, etc.), runs tailored checks, and scales to automotive IVIs: 22 vehicles from 14 manufacturers (2016–2023) undergo 891 tests / 128 vulnerabilities found. BlueToolkit discovers concrete issues (knob weak-k pairing, contact extractor, insecure numeric comparison), integrates new exploits, and validates results end-to-end.
AI-written summary · about
chapters (7)
- 0:00Bluetooth security testing intro
- 2:40Why build BlueToolkit
- 5:08How BlueToolkit works
- 8:19KNOB attack demo
- 10:03Automotive Bluetooth security
- 13:15Car implementation flaws
- 16:47Conclusion
related talks
16mBluetooth Low Energy Security Testing with Combinatorial Methods
25mSweynTooth: Unleashing Mayhem over Bluetooth Low Energy
54mAnalyzing the Security of Mobile Apps for Automobiles
40mPerfektBlue: Universal 1-click Exploit to Pwn Automotive Industry…
37mAutomatic Automotive Hacking
35mDeep into Android Bluetooth Bug Hunting: New Attack Surfaces and Weak Code Patterns
41mPanel: Tackling Automotive Hardware Vulnerabilities
57mBlueBorne - A New Class of Airborne Attacks that can Remotely Compromise Any Linux/IoT Device