Bluetooth Lab
Scan and pair YOUR lab device — GATT read literacy; no third-party exploit PoCs.
Visual · t15_bluetooth_lab
Lab: bluetoothctl/nRF on YOUR device. Original Cyberlium.
Prove you can name your device — not that you can hijack a stranger's speaker.
With RoE device list: enable adapter, scan filtered to YOUR lab peripheral or paired phone, record name/MAC/services at literacy level (bluetoothctl show/info, nRF Connect GATT table screenshot redacted). Test pairing only on YOUR disposable lab speaker. Document Just Works vs Secure if visible. No Bluesnarf scripts, no pairing bombs, no fuzzing unknown retail tags.
1. Authorized scan
Scan with target BD_ADDR or known name filter.
Stop scan after device found — no hoarding neighbor lists.
Command guide
Try these commands — Authorized scan
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
bluetoothctl — https://www.bluez.org/ (Linux Bluetooth stack) Bluetooth security — https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install bluez
macOS: Use System Settings > Bluetooth
Windows: Use Windows Bluetooth settings / WSL limited
═══ LINUX / macOS ═══
Command — copy this
bluetoothctl scan on 2>/dev/null & sleep 5; bluetoothctl devices 2>/dev/null | head -10; bluetoothctl scan off 2>/dev/null || echo 'Scan YOUR test devices only' hcitool dev 2>/dev/null || bluetoothctl list 2>/dev/null
Primary tools to practice this lesson: bluetoothctl, hcitool. Reference sites: bluetoothctl (https://www.bluez.org/); Bluetooth security (https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. GATT literacy
Record service UUIDs and characteristic names at high level.
Do not write rogue values to unknown devices.
3. Teardown
Remove lab pairing if temporary.
Adapter off or non-discoverable; secure notes.
4. What you ship: Bluetooth lab notes
Scan of YOUR device + GATT summary + teardown.
5. What you record before the next lesson
Redacted Bluetooth lab path.
6. Wrong vs right: stranger SSIDs vs YOUR lab AP
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Run Bluesnarf PoC against a classmate phone.
- Right: YOUR device scan only. Next: quiz.
Mission: Bluetooth lab
1) RoE device check. 2) Scan/info YOUR lab peripheral. 3) Redacted GATT summary; teardown pairings.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Safe GATT read vs write?”
APPLY: Lab proves:
APPLY: True or False: Pairing bombs are homework.
APPLY: Teardown includes: