DH.J
🗺️

💻 Research

How to Ubertooth BR/EDR Sniff

How to Ubertooth BR/EDR Sniff

Donghyeon Jeong··23 min read

Overview

I recently tried sniffing bluetooth packets via ubertooth.

As far as we know, ubertooth has provided sniffing capabilities for Bluetooth low energy (BLE), but in a recent update, firmware was developed to allow sniffing of Bluetooth packets for the Bluetooth Classic (BR/EDR) specification.

This is included in the release firmware (2020-12-R1), but it is not the default application, so you can build your own firmware and use the and flash it to your ubertooth device.

Build Firmware

Before building the firmware, download the official git repository and follow the steps below.

This step may require some essential packages to build the ubertooth firmware, which can be found in the documentation below.

https://ubertooth.readthedocs.io/en/latest/building_from_git.html


apt install gcc-arm-none-eabi libnewlib-arm-none-eabi 

Flash Firmware

If the #Build Firmware step completed compilation for your firmware, you should have a btbr.dfu file in your current working location.

[Figure 1] btbr.dfu (ubertooth/firmware/btbr/btbr.dfu)

Sniffing BR/EDR

If the firmware was flashed successfully, ubertooth-dfu will exit the detach log for the last time. Afterwards, the ubertooth device with the new firmware flashed will automatically connect.

Now that my ubertooth device is configured to sniff BR/EDR Bluetooth packets, I can run the tool with the following command.

bash

ubertooth-btbr
[Figure 2] ubertooth-btbr