Anyone with Bluetooth want to test a program I am working on?

MS3FGX · 06-06-2010, 09:16 PM

I have recently gotten a pet project of mine to the level where I think it works well enough that other people can give it a shot, and I'm looking for some help in making sure it works as expected.

Basically, it is a Bluetooth scanner that is designed to do just one thing, scan for discoverable devices in range and record their MAC, name, and the time/date they were found to a log file. There are only a few options, it is pretty much a set it and forget it sort of thing.

The only requirements are BlueZ (3.x or 4.x), and that your computer has a Bluetooth device that is supported by Linux. Obviously you will also need at least one device to scan for, and the more the better. If you want to take a walk through your mall while running it and seeing what you found, I would be ecstatic.

A word of warning, I am not a very good C programmer and I have no doubt that there are mistakes in the code and improvements that could be made. To that end, if you have any suggestions, please let me know.

You can download the source and get a little more specific information about it from: http://bluelog.digifail.com

Any help would be greatly appreciated, thanks.

rabbit2345 · 06-06-2010, 10:56 PM

Works great, just like you said. It picked up about 15 devices while I was walking around my house and logged everything correctly. (I have a lot of bluetooth stuff)

good luck,
rabbit2345

MS3FGX · 06-07-2010, 04:53 PM

That's a start, thanks.

Is this on the 64 bit SUSE in your profile, or a different distribution?

Hangdog42 · 06-08-2010, 07:47 AM

It seems to work nicely on my rig (Slackware64 13.1). The only thing I had to do was set the march option in the makefile to x86-64 to get it to compile. It picked up my Android phone without a problem.

MS3FGX · 06-08-2010, 02:52 PM

Yeah, I forgot to add any options for 64 bit in the makefile because I am on 32 bit, I'll fix that for the next version. Good to know it works on 64 bit machines though.

What kind of Bluetooth device were you using? Internal on a laptop, or a USB adapter? If you don't mind, the output of the following command would be helpful:

Code:

hciconfig hci0 version

Hangdog42 · 06-08-2010, 03:49 PM

It is internal on the laptop:

Code:

hci0:   Type: BR/EDR  Bus: USB
        BD Address: 00:00:00:00:00:00  ACL MTU: 310:10  SCO MTU: 64:8
        HCI Version: 2.0 (0x3)  Revision: 0x10db
        LMP Version: 2.0 (0x3)  Subversion: 0x10db
        Manufacturer: Cambridge Silicon Radio (10)

And yes, I did mask the address. Lshw identifies it as a Wireless 360 Bluetooth from Dell. The laptop itself is a Dell Precision M6300. I've also got a netbook I can put it on and give it a go.

Hangdog42 · 06-08-2010, 04:56 PM

Yup, works nicely on the netbook (Dell Mini 9) as well:

Code:

hci0:   Type: BR/EDR  Bus: USB
        BD Address: 00:11:22:33:44:55  ACL MTU: 1021:8  SCO MTU: 64:1
        HCI Version: 2.1 (0x4)  Revision: 0x51d3
        LMP Version: 2.1 (0x4)  Subversion: 0x424c
        Manufacturer: Broadcom Corporation (15)

This is also an internal Bluetooth card and is apparently a Broadcom BCM2046 chip

MS3FGX · 06-13-2010, 10:40 PM

To anyone who might be interested, I put an updated version up on the server today. A few small fixes, main additions are:

Added check to see if it is getting built on 64 bit or not, changes -march accordingly (I hope).
Added -x option to obfuscate detected MAC addresses.

MS3FGX · 06-22-2010, 10:06 PM

I have reached a new stable (probably) release of Bluelog, and thought I would bump this up a little bit for those who didn't see it. I have added a lot of options and fixed a lot of things since I posted last, but the main addition has been "Bluelog Live", a web front-end for Bluelog that could be used in a public area to raise awareness of Bluetooth security risks, much like the "Wall of Sheep" seen at DEFCON.

The interface can be skinned with CSS, and I have included two different versions, one based on my website's layout and another for BackTrack (which Bluelog will hopefully be included in someday):

DigiFAIL

BackTrack

I understand the testing setup is kind of difficult for most people, since you need not only a Linux box with Bluetooth hardware but at least a few devices to scan, but I would appreciate anyone who could give the new version a try and see how it works out on different distributions/setups. Even if you can only scan one device with it, it is enough to show it works.

Hangdog42 · 06-24-2010, 07:24 AM

I didn't test the Bluelog Live bit, but the basic program works just fine. It complies on my 64 bit machine and finds all the bluetooth devices in the area.

MS3FGX · 06-24-2010, 08:30 PM

Well, it is good to know it is building properly on other architectures now. The first versions used a makefile that was basically just for testing, now I am using a proper (well, better) makefile that should work right on all systems and has install/uninstall targets (which I needed for Live anyway).

Much thanks for your continued help.