BlueEyes - Simplified Bluetooth Reconnaissance

Author: ExME168

About BlueEyes

Long story short, I had a college group project for an "Advanced and Offensive Security" course where the task was (in particular to my group) to create a wireless hacking tool. But due to my lacking a Kali-compatible WiFi adapter and also thanks to a random suggestion by a group mate (shout out to jm55DLSU), I decided to write a tool centered around Bluetooth as it is still a "wireless" protocol. BlueEyes is a tool that simplifies the reconnaissance of BT devices by providing one streamlined interface for gathering useful information about nearby BT devices such as, but not limited to: MAC address, device class, clock offset, and running services. The tool also places emphasis on education about Bluetooth technology by providing brief descriptions of the scan results as well as a dedicated section for knowing about the basics of the protocol. I hastily made this tool in less than a week to comply with the deadline but I really wished I started this earlier. Making this tool was an eye-opener to the complex world of Bluetooth and it got me thinking if I could maybe come back to this tool someday for a Bluetooth-related thesis topic. More importantly, this is the first tool I've made in my cybersecurity journey. I think I'd rather choose this career than game development. This is fun.

Basics of Bluetooth Technology

• To view more information about Bluetooth Technology, select '0' on BlueEyes’ main menu.

Check Bluetooth Service Status

• To determine whether the BT service on Linux has been launched, you may enter '1' to check Bluetooth service status.

Start Bluetooth Service

• In case you find yourself with an inactive BT service, select '2' for BlueEyes to attempt to enable the service on your behalf.

Check My Bluetooth Device

• To check for your device’s BT interface details, select '3' on the main menu. It will contain details such as the BT interface logicalname and MAC address.

Check All Bluetooth Devices

• To determine if a specific BT interface is up and running, select '4' on the main menu to check for it.

Start BlueEyes

• To begin using the main BlueEyes features, select '5' in the main menu. Afterwards, a new menu will appear with a new set of commands as well as a target list. Each scanned BT device is assigned an ID number which should be used for target selection. Note that every command is not case-sensitive but the syntax must still be followed (the words must be in order).

  

  • set target
    • To select a target, enter this command but replace the '' substring with the assigned ID of the target based on the target list.

  

  • unset target
    • To deselect a target, enter this command.

  

  • show ALL
    • To redisplay the target list, enter this command. This can be useful when the terminal becomes too congested.

  

  • show TARGET
    • To show the currently selected target, enter this command. It is recommended to run this command before starting a ping or scan.

  

  • ping
    • To ping the selected target, enter this command. You may need to enter your Kali profile password if you are not a root user.

  

  • scan

    • To begin scanning the target, enter this command. This command outputs the clock offset, device class, and a list of running services of the target.

  • scan -o

    • To scan the target and save the results in a text file, enter this command but replace the '' substring with any filename of your choice. You do not need to append ‘.txt’ as the tool will do that for you. The text file will be saved in the same directory as airhound.py.

  • exit

    • To stop using the BlueEyes feature and go back to the main menu, enter this command.

Exit

• To return to Airhound’s main menu, type in '6' to exit BlueEyes