Programmability, for the serious hacker doing serious experimentation.Field work, with both the ability to quickly find close-range targets as well as longer range targets using more sophisticated hardware with larger antennas.Lab work, including sniffing and probing.So we looked at tools with several different areas in mind: And some do weird things like deliver that one thing - that single thing you wished every tool you had would do as well. Some hardware tools are specifically tailored to excel in specific environments only. Finding consistency when scanning and probing is hard, and this is in part due to the nature of Bluetooth itself - it is a frequency-hopping set of protocols stacked on top of each other that transmits data at a signal much weaker than Wi-Fi.Īs a result, some hardware tools in certain environments do not perform well or consistently. There is nothing more frustrating than having a testing tool that is inconsistent, or one that does only one thing better than every other tool while performing additional tasks mediocre at best. Unfortunately, to perform every Bluetooth probe and scan perfectly requires a high dollar investment, so most of us are left with the choice of figuring out the best tool for the job. The second is to assist in other areas of an IoT investigation, such as finding input points that could help map out attack vectors or identify how device information is leaked that could allow for easy tracking of an individual or their expensive new IoT device (or both).ĭuo Labs has done research on multiple IoT devices that use Bluetooth, and like many people, we are left scratching our heads at how good or bad some of the testing tools are. The first is to simply check to make sure the attack surface of Bluetooth is safe. The idea of approaching IoT investigation with Bluetooth probing and sniffing is twofold. A solid strategy is to have multiple choices while focusing on the best one for the situation at hand. We’ve examined several, compared features and capabilities, and discovered that while the best appears to be the Nordic Semiconductor nRF-51DK, a number of selections exist that give good results for different situations.

Are you wondering what the best Bluetooth scanner is? Or what the most commonly used Bluetooth software is? We’ve wondered that too.

How to use wireshark with bluetooth