Bluetooth MitM Attacks

Excerpt From Bluetooth Vulnerabilities (Part 1) Webinar Check Out This Brief Video on MitM Attacks In this excerpted video, CTO Dr. Brett Walkenhorst dives into Bluetooth MitM (man-in-the-middle) attacks. He covers the background on this attack type before moving into some specific examples. Some of the attacks he touches on include GATTacker, BTLEjuice, InjectaBLE, and BtleJack.

Key Takeaways

• Session hijacking can place an attacker in the middle of a legitimate Bluetooth connection
• From that position the attacker can replay, drop, block, or manipulate packets
• Tools like InjectaBLE and BtleJack establish the man-in-the-middle position
• Tools like GATTacker and BtleJuice then manipulate GATT server data and device behavior from that position of trust

Video Transcript

So this can be more than just hijacking. But hijacking gives you a mechanism for putting yourself in this a position. So the tools we talked about last time, InjectaBLE BTLEJack, those were used for session hijacking. They can also put you in this position to be in the middle of some legitimate network. Once you're in that position, you can replay packets, you can drop or block packets, you can manipulate data. And there's additional tools that are designed to do that exactly.

So Gattacker, BTLEJuice, These are used for conducting replay attacks, for manipulating data in the GATT server. Just basically influencing the devices in ways, because you're in this position of trust, you can manipulate data and manipulate behavior.