┌──────────────────────────────────────────────────────┐
│ │
│ ██████╗ ██╗ ██╗ ██████╗ ███████╗ │
│ ██╔══██╗██║ ██║ ██╔════╝ ██╔════╝ │
│ ██████╔╝██║ ██║ ██║ ███╗█████╗ │
│ ██╔══██╗██║ ██║ ██║ ██║██╔══╝ │
│ ██████╔╝███████╗██║ ╚██████╔╝███████╗ │
│ ╚═════╝ ╚══════╝╚═╝ ╚═════╝ ╚══════╝ │
│ │
│ ██████╗ ███████╗ ███████╗██║ ██╗ │
│ ██╔══██╗██╔════╝ ██╔════╝██║ ██║ │
│ ██║ ██║█████╗ █████╗ ███████║ │
│ ██║ ██║██╔══╝ ██╔══╝ ██╔══██║ │
│ ██████╔╝███████╗███████╗██║ ██║ │
│ ╚═════╝ ╚══════╝╚══════╝╚═╝ ╚═╝ │
│ │
│ Bluetooth BR/EDR offensive auditor v1.2.0 │
│ bluetoothctl · btmgmt · l2ping · Linux only │
│ by theoffsecgirl │
└──────────────────────────────────────────────────────┘
Tool to audit Bluetooth BR/EDR devices on Linux using the BlueZ stack. Automatically detects whether the available stack is modern (bluetoothctl + btmgmt) or legacy (hcitool + hciconfig) and adapts all operations accordingly.
- BR/EDR scanning via
btmgmt find+bluetoothctl(coproc, non-interactive) - Activity check via
l2ping - Controlled stress test with confirmation prompt
- Modern stack support (
bluetoothctl/btmgmt) and legacy (hcitool/hciconfig) - Configurable
SCAN_TIMEOUTvia environment variable (default: 15s) - Interactive menu and CLI flags
- Logging and result export
- Linux (Debian, Ubuntu, Arch, Kali…)
- Bash 4.x + BlueZ (
bluetoothctl,btmgmt,l2ping) - Compatible Bluetooth adapter (internal or USB with BR/EDR support)
- Root privileges
| Environment | Status |
|---|---|
| Linux (modern BlueZ) | ✅ Preferred |
| Linux (legacy BlueZ) | ✅ Fallback |
| macOS | ❌ No (no BlueZ) |
| Windows / WSL | ❌ No (no real hardware) |
| VPS / cloud | ❌ No (no Bluetooth hardware) |
git clone https://github.com/theoffsecgirl/bluedeath
cd bluedeath
chmod +x bluedeath.sh# Interactive menu
sudo ./bluedeath.sh --menu
# Scan (15s default)
sudo ./bluedeath.sh --scan
# Scan with custom timeout
sudo SCAN_TIMEOUT=30 ./bluedeath.sh --scan
# BR/EDR inquiry scan
sudo ./bluedeath.sh --inquiry
# Check device activity
sudo ./bluedeath.sh --active
# Controlled stress test
sudo ./bluedeath.sh --dos AA:BB:CC:DD:EE:FF
# Specific interface
sudo BT_INTERFACE=hci1 ./bluedeath.sh --scanFor controlled labs and systems with explicit authorization only.
BSD 3-Clause · theoffsecgirl