- [Lecturer] Throughout time, there have been a collection
of Bluetooth implementation vulnerabilities.
One of the most popular in the past
has been the BlueBorne.
And actually, BlueBorne
is a collection of vulnerabilities,
and these vulnerabilities collectively affect Windows,
iOS and Linux kernel-based operating systems,
including Android and Tizen.
Now, if an attacker exploits these vulnerabilities,
it will allow for an unauthenticated attacker
to do remote code execution on the affected devices.
There are several other attacks against Bluetooth,
although modern implementations and latest versions
of Bluetooth stacks have protections in place
that actually mitigate these attacks.
For example, there is a type of attack called BlueSnarfing,
and this attack takes data
from the Bluetooth enabled device.
This can include SMS messages, calendar information,
images, the phone book and even chats, right,
any type of a messaging in the system, the affected device.
There's also BluePrinting,
and that's actually the process
of footprinting the Bluetooth traffic.
Now, BlueBugging is another attack,
and the attacker using this type of attack
is actually able to take control of the target's phone.
And a tool called Bluever was actually developed
as a proof of concept tool for this attack.
Another one is BlueJacking,
and this is where you send, quote unquote,
a business card, or via a text message,
that if the user allows to be added in their contact list,
it will allow you to continue
to send additional messages, right.
There's also denial of service attacks like BlueSmack
that will actually cause denial of service conditions
in a Bluetooth device.
However, denial of service attacks in Bluetooth
are not that interesting from a pen testing perspective.