- [Narrator] In lesson three, you learn all about
the different antennas and devices
to monitor wireless networks, including Bluetooth.
The antenna that actually I show you
from Bluetooth, was the Ubertooth-One
as I mentioned in lesson three, Bluetooth monitoring
was really expensive before this device was created.
I am including here, the creators, GitHub, Wiki
and also the repository for installation instructions.
So I personally install the Ubertooth underlying packages
in kali Linux but you can even install it in MacOS 6
and any other Linux based operating systems.
So red hat, Ubuntu, DBN, and so on.
Now there are several utilities that can be used
with Ubertooth-One.
For example you can actually launch its
packet capture module and interact with Wireshark
to monitor all Bluetooth transactions near you.
Now keep in mind that Bluetooth is actually
a short distance technology, so you will have to be in range
of the Bluetooth devices that you want to scan and monitor.
Let's see how this works.
First. I'm going to use the mkfifo, or F-I-F-O command
or tool to create a name pipe to slash temp slash pipe,
in my example, then let's actually launch Wireshark.
I'm going to select a capture interface
and then click on manage interfaces.
Now under the pipes tab
I will add the name pipe that I actually created earlier
under the slash temp slash pipe.
So once I do that, I click on, okay
and then I click on start
and then I start the actual packet capture itself.
So then I'm gonna open a new terminal
and then I will invoke the Ubertooth dash B-T-L-E command
with a minus F option to follow the connections.
So then I'm gonna specify minus C to specify
the capture file or the name pipe in this case
that I actually created earlier.
So once I press enter, you will see the Bluetooth packages
or packets rather in the terminal screen
and also in Wireshark.
Now this is a very cool way of actually seeing
all the Bluetooth transactions in detail, just like you
learned how to actually use Wireshark in the past
with other scenarios.
So now let's take a look at a transaction in detail.
So in this case, this is a communication
between my iPhone and my Bluetooth headset.
So there, you can see the scan request
the advertising address, and a lot more information.
Now in the past, in weak Bluetooth implementations
you can use this information to
spoofed pair devices.
And in some cases even get like address books and
contact information and other sensitive information.
So of course in modern implementations,
there's a lot of protections against that
but you may be actually surprised you can
spoof some of these transactions with ease.
Now let's take a look at another tool
in this case is the Ubertooth Spectrum Analyzer.
And basically a spectrum analyzer is a useful tool
for assessing or troubleshooting in some cases
RF interference because it visualizes RF signals.
So the display of spectrum analyzers
or any spectrum analyzer rather shows the amplitude
of all signals over a particular range of frequencies.
And it also represents a combination of signals
coming from data traffic on wireless networks.
And of course, in this case in Bluetooth devices.
Now the guys behind Kismet also created another
spectrum analyzer that you can use called the Spec Tool.
Here I'm actually showing an example
of how you can use the Ubertooth-One
with this tool, so in this one you can see
that the tool has three different views.
The spectral view, the topo view to measure
the amplitude of signals in decibels, and also
a plainer view that also shows signals in decibels as well.
So this tools can also be used for in-depth troubleshooting
not only for pen testing but, to troubleshoot
any Bluetooth implementation and also do research
in Bluetooth environments.