ubertooth | Kali Linux Tools (2024)

libubertooth-dev

Project Ubertooth is an open source wireless development platform suitable forBluetooth experimentation. Ubertooth ships with a capable BLE (Bluetooth Smart)sniffer and can sniff some data from Basic Rate (BR) Bluetooth Classicconnections.

This package provides the development files for using the ubertooth library.

Installed size: 52 KB
How to install: sudo apt install libubertooth-dev

libubertooth1

Project Ubertooth is an open source wireless development platform suitable forBluetooth experimentation. Ubertooth ships with a capable BLE (Bluetooth Smart)sniffer and can sniff some data from Basic Rate (BR) Bluetooth Classicconnections.

This package provides the shared library needed by Ubertooth.

Installed size: 87 KB
How to install: sudo apt install libubertooth1

ubertooth

Project Ubertooth is an open source wireless development platform suitable forBluetooth experimentation. This package contains everything necessary to usethe hardware dongle.

Ubertooth is capable of sniffing BLE (Bluetooth Smart) connections and it alsohas some ability to sniff some data from Basic Rate (BR) Bluetooth Classicconnections.

In addition to the Bluetooth specific capabilities, there is also a simplespectrum analyzer for the 2.4 GHz band included (ubertooth-specan-ui) whichcan be used to also observe other things in this frequency band.

Installed size: 336 KB
How to install: sudo apt install ubertooth

ubertooth-afh

Passive detection of AFH channel map

root@kali:~# ubertooth-afh -hubertooth-afh - passive detection of the AFH channel mapDetermine the AFH map for piconet ??:??:22:44:66:88: ubertooth-afh -u 22 -l 446688Main options:-l <LAP> LAP of target piconet (3 bytes / 6 hex digits)-u <UAP> UAP of target piconet (1 byte / 2 hex digits)-m <int> threshold for channel removal (default: 5)-r print AFH channel map once every second (default: print on update)Other options-t <seconds> timeout for initial AFH map detection (not required)-e maximum access code errors (default: 2, range: 0-4)-V print version information-U <0-7> set ubertooth device to use

ubertooth-btbr

ubertooth-btle

Bluetooth Low Energy (BLE) sniffing and more

root@kali:~# ubertooth-btle -hubertooth-btle - passive Bluetooth Low Energy monitoringUsage:-h this help Major modes:-f follow connections-n don't follow, only print advertisem*nts-p promiscuous: sniff active connections-a[address] get/set access address (example: -a8e89bed6)-s<address> faux slave mode, using MAC addr (example: -s22:44:66:88:aa:cc)-t<address> set connection following target (example: -t22:44:66:88:aa:cc/48)-tnone unset connection following target Interference (use with -f or -p):-i interfere with one connection and return to idle-I interfere continuously Data source:-U<0-7> set ubertooth device to use Misc:-r<filename> capture packets to PCAPNG file-q<filename> capture packets to PCAP file (DLT_BLUETOOTH_LE_LL_WITH_PHDR)-c<filename> capture packets to PCAP file (DLT_PPI + DLT_BLUETOOTH_LE_LL)-A<index> advertising channel index (default 37)-v[01] verify CRC mode, get status or enable/disable-x<n> allow n access address offenses (default 32)If an input file is not specified, an Ubertooth device is used for live capture.In get/set mode no capture occurs.

ubertooth-debug

Classic Bluetooth discovery, sniffing, and decoding

root@kali:~# ubertooth-debug -hubertooth-debug - command line utility for debugging Ubertooth OneUsage:-h this message-r <reg>[,<reg>[,...]] read the contents of CC2400 register(s)-r <start>-<end> read a consecutive set of CC2400 register(s)-U<0-7> set ubertooth device to use-v<0-2> verbosity (default=1)

ubertooth-dfu

Device firmware update for Ubertooth

root@kali:~# ubertooth-dfu -hubertooth-dfu - Ubertooth firmware update toolTo update firmware, run:ubertooth-dfu -d bluetooth_rxtx.dfu -rUsage:-u <filename> upload - read firmware from device-d <filename> download - write DFU file to device-r reset Ubertooth after other operations completeMiscellaneous:-s <filename> add DFU suffix to binary firmware file-U <0-7> set ubertooth device to use

ubertooth-ducky

root@kali:~# ubertooth-ducky -hubertooth-ducky - make an Uberducky quack like a USB Rubber DuckyUsage:-q [uuid] quack!-b signal Uberducky to enter bootloader-A <index> advertising channel index (default: 38)-a <BD ADDR> Bluetooth address (default: random)-h this helpFor more information on Uberducky, visit:https://github.com/mikeryan/uberducky

ubertooth-dump

Output a continuous stream of received bits

root@kali:~# ubertooth-dump -hubertooth-dump - output a continuous stream of received bitsUsage:-h this help-b only dump received bitstream (GnuRadio style)-c classic modulation-l LE modulation-U<0-7> set ubertooth device to use-d filenameThis program sends binary data to stdout. You probably don't want torun it from a terminal without redirecting the output.

ubertooth-ego

Yuneec E-GO skateboard sniffing

root@kali:~# ubertooth-ego -hubertooth-ego - Yuneec E-GO skateboard sniffingUsage:-h this help Major modes:-f follow connections-r continuous rx on a single channel-i interfere Options:-c <2402-2480> set channel in MHz (for continuous rx)-l <1-48> capture length (default: 18)-a <access_code> access code (default: 630f9ffe)

ubertooth-follow

CLK discovery and follow for a particular UAP/LAP

root@kali:~# ubertooth-follow -hubertooth-follow - active(bluez) CLK discovery and follow for a particular UAP/LAPUsage:-h this help-l<LAP> (in hexadecimal)-u<UAP> (in hexadecimal)-U<0-7> set ubertooth device to use-r<filename> capture packets to PCAPNG file-q<filename> capture packets to PCAP file-e max_ac_errors-d filename-a Enable AFH-b Bluetooth device (hci0)-w USB delay in 625us timeslots (default:5)LAP and UAP are both required, if not given they are read from the local device, in some cases this may give the incorrect address.

ubertooth-rx

Classic Bluetooth discovery, sniffing, and decoding

root@kali:~# ubertooth-rx -hubertooth-rx - passive Classic Bluetooth discovery/decodeExample usage:ubertooth-rx -- sniff for all LAPsubertooth-rx -l <lap> -- calculate UAP for a given LAPubertooth-rx -l <lap> -u <uap> -- calculate clock and follow piconetubertooth-rx -z -t 20 -- survey mode: discover all LAPs+UAPs for 20 secondsMajor modes:-l <LAP> to decode (6 hex) - if not specified sniff all LAPs-u <UAP> to decode (2 hex) - if not specified calculate UAP (requires LAP)-z Survey mode - discover and list piconets (implies -s, interrupt with ctrl-C)-i <filename> input file - if not specified use Ubertooth for live captureConfiguration:-c <BT Channel> set a fixed bluetooth channel [Default: 39]-e max_ac_errors (default: 2, range: 0-4)-t <SECONDS> sniff timeout - 0 means no timeout [Default: 0]Output options:-r<filename> capture packets to PcapNG file-q<filename> capture packets to PCAP file-d<filename> dump packets to binary fileMiscellaneous:-V print version information-U <0-7> set ubertooth device to use

ubertooth-scan

Scan frequency band active (Bluez) device scan and inquiry supported by Ubertooth

root@kali:~# ubertooth-scan -hubertooth-scan - active(Bluez) device scan and inquiry supported by UbertoothThis tool uses a normal Bluetooth dongle to perform Inquiry Scans andExtended Inquiry scans of Bluetooth devices. It uses Ubertooth todiscover undiscoverable devices and can use BlueZ to scan fordiscoverable devices.Usage: ubertooth-scan Use Ubertooth to discover devices and perform Inquiry Scan. ubertooth-scan -s -x Use BlueZ and Ubertooth to discover devices and perform Inquiry Scan and Extended Inquiry Scan.Options:-s hci Scan - use BlueZ to scan for discoverable devices-x eXtended scan - retrieve additional information about target devices-t scan Time (seconds) - length of time to sniff packets. [Default: 20s]-e max_ac_errors (default: 2, range: 0-4)-b Bluetooth device (hci0)-U<0-7> set Ubertooth device to use

ubertooth-specan

A spectrum analyzer for Ubertooth

root@kali:~# ubertooth-specan -hubertooth-specan - output a continuous stream of signal strengths!!!!!NOTE: you probably want ubertooth-specan-ui!!!!!Usage:-h this help-v verbose (print debug information to stderr)-g output suitable for feedgnuplot-G output suitable for 3D feedgnuplot-d <filename> output to file-l lower frequency (default 2402)-u upper frequency (default 2480)-U<0-7> set ubertooth device to use

ubertooth-specan-ui

Spectrum analyzer for the 2.4 GHz ISM band

root@kali:~# man ubertooth-specan-uiUBERTOOTH-SPECAN-UI(1) UBERTOOTH-SPECAN-UI(1)NAME ubertooth-specan-ui - spectrum analyzer for the 2.4 GHz ISM bandSYNOPSIS ubertooth-specan-uiDESCRIPTION This shows a GUI window with a spectrum analyzer for the 2.4 GHz band. It is very useful to see at what frequencies there are signals.OPTIONS There are no command line options.SEE ALSO ubertooth-specan(1)AUTHOR This manual page was written by Ruben Undheim <[emailprotected]> for the Debian project (and may be used by others). 12 December 2022 UBERTOOTH-SPECAN-UI(1)

ubertooth-util

General purpose Ubertooth utility

root@kali:~# ubertooth-util -hubertooth-util - command line utility for Ubertooth Zero and Ubertooth OneCommon options:-v get firmware revision number-V get compile info-I identify ubertooth device by flashing all LEDs-d[0-1] get/set all LEDs-l[0-1] get/set USR LED-S stop current operation-r full reset-U<0-7> set ubertooth device to use-N print total number of Uberteeth and exitRadio options:-a[0-7] get/set power amplifier level-c[2400-2483] get/set channel in MHz-C[0-78] get/set channel-q[1-225 (RSSI threshold)] start LED spectrum analyzer-t intitiate continuous transmit test-z set squelch levelRange test:-e start repeater mode-m display range test result-n initiate range testMiscellaneous:-f activate flash programming (DFU) mode-i activate In-System Programming (ISP) mode-b get hardware board id number-p get microcontroller Part ID-s get microcontroller serial number-x xmas lights

ubertooth-firmware

The Ubertooth hardware needs some firmware to run. The firmware is built witharm-none-eabi-gcc. This package contains a number of firmware images thatmay be programmed into the Ubertooth hardware using the ‘ubertooth-dfu’command.

The firmware images are installed in /usr/share/ubertooth/firmware/

Installed size: 89 KB
How to install: sudo apt install ubertooth-firmware

ubertooth-firmware-source

The Ubertooth hardware needs some firmware to run. The firmware is built witharm-none-eabi-gcc. This package contains the source code for the firmware thatis found in the ubertooth-firmware package.

The firmware source may be found in /usr/src/ubertooth-firmware-source.tar.gzafter installing this package.

Installed size: 251 KB
How to install: sudo apt install ubertooth-firmware-source