Bluesnarfing

Tracking a cell phone: more than bluesnarfing

2011-04-19T06:33:00.000-07:00

Bluesnarfing is a really technical way to gain access to a phone. Not surprisingly, some people have made it much easier for people to use softwares to gain acess to it.

Watch TV for free on mobile and iphone

2011-04-03T03:45:00.000-07:00

This is one of the most wonderful finds I have since I started using my iphone. With mobile tv elite,I could watch literally thousands of worldwide TV channels for free. Sadly I don't understand all the languages. Here's a list why I like this program.

Easy to install
No errors
Good quality video
Works on all mobile phone including iphone and ipad

There is a 70% discount promotion currently ongoing.

Watch Satellite TV on mobile
Watch Satellite TV on Computer

Cell Phone Spy

2010-07-20T22:37:00.000-07:00

In majority of the people who contacted me, the reason why the wanted to bluesnarfing is to monitor their spouses/ children cell phone so as to know what is going on. The problem is, bluesnarfing is a pretty dedicated skill. Most of the people who tried to learn bluesnarfing eventually drops out due to the technical difficulties.

There are actually much easier ways to monitor a cell phone. One of the is a software call spy buddy. It's a easy to use, undetectable software that allows you to do the following things.

SMS Tracking
Call Tracking
GPS tracking
Phone access

How to bluesnarf a bluetooth headset

2010-06-30T23:51:00.000-07:00

How to Bluesnarf

2009-10-07T23:32:00.000-07:00

Ok,

Today I shall attempt to answer the most commonly asked question>
how do I Bluesnarf?
Usually, I start by asking back:
1) have you used bluetooth?
2) Have you Bluejacked?
3) Do you know the rules of bluesnarfing?
And if you know all three, I might sometimes show them how to bluesnarf.

Today, I shall jump start the module by showing you guys a relatively more advance software.
Bluediving --> This is esentially a penetration test software.
It contains very basic functions and tests if the phone you are going to bluesnarf can be bluesnarfed.

So for beginners who wants to try bluesnarfing, this is step 1.
If you can get past this, you'll be able to go on to use the more advance bluesnarf wares.

Here's the link to bluediving bluesnarf software

Bluebugging and Bluesnarfing

2009-09-19T07:35:00.000-07:00

Every week or so, I get a request asking me to show them how to bluesnarf.
My policy has never changed. I'm open to showing anyone who is keen how to bluesnarf.
But I have several ground rules

1) Bluesnarfing is not to be used for malicious purposes.
2) It is not meant to be used for bluebugging.
3) IT shall be done at your own risk.
4) You must be keen/ able/ willing to learn simple programming languages.

It it point number 4 which most people never pass. Most people want a simple solution to bluensarfing. But you don't need me to teach you how to bluesnarf if all you want is a simple program to bluesnarf for you.
Just pay a programmer to do it for you.

Now that this is in the open, I think it'll make life easier for everone.

The Role of Bluesnarfing

2009-04-28T03:48:00.001-07:00

There are people who have predicted the doom of bluetooth tooth attacks like bluesnarfing. Their reasoning is that WiFi will eventually replace the need for bluetooth devices and without bluetooth, it make sense there will be no bluetooth attacks.

While convincing and logical, bluetooth have yet to be phased out long after WiFi is in use. In face, there are more and more devices using bluetooth technology. The main reason: It's free. Unlike wifi which is a overall network and you are just a "user" in the network, you "own the network". You can switch in on and off anytime you like, and you don't have to pay a cent. There is no logic for example to use wifi for connecting with your headset, but bluetooth fits that function perfectly.

In fact, this neglect on the importance of bluetooth has led to an added advantage to bluesnarfers. Because every is concern about their wifi security, they neglect the fact that their short ranged network which is their bluetooth can easier be hacked into for someone who is nearby or even far away but with the right equipment.

The reason why there is little news about bluesnarfing is that there is no good solution to the problem at the moment, save for switching off your bluetooth device.

So my advice is, be careful if you keep confidential information on your bluetooth devices.

The second hurdle - encryption

2009-03-31T02:01:00.000-07:00

In my previous entry, I talked about the difficulties in getting paired. Essentially, that is the most difficult part. That doesn't mean that there will be no challenges after that.

If you purpose of bluesnarfing is merely for fun like "oh I got paired with the phone" then it ends there. But if you intent to do anything with the phone, then you have to navigate around the the phone with phone controls.

The reason why bluesnarfing is though is because there is no idiot proof software to allow people to bluesnarf. This is also because each phone company/ model and each phone software update uses a different encryption for their software.

This means that unless you already intrinsically understand how phone command work, most simple software don't work.

Is there an easy way out? Yes and no. If you plan to professionally bluesnarf, then you will have to learn the right skills.
But if you only want to bluesnarf a particular model of mobile phone, you could source around for a ready made software meant for those models, or get someone to program it for you.

:)

The first Hurdle - Pairing

2009-02-24T00:13:00.000-08:00

One of the major hurdle to bluesnarfing is the paring process. Changes in bluetooth software since bluejacking and bluesnarfing appeared has made this process harder.
This means it is harder to gain access to the bluetooth device without actual pairing of the devices

There are several ways which bluesnarfers use to overcome this

1) Actually pair the device. This method is popular as it is the easiest. Just pair the devices once. This means that you have to either convince the person to pair with you once or you have to have access to the phone. Which means you can only do this on someone you already know.
This is sneaky, but most bluetooth software still has the flaw which allows you to gain access to the phone's data without needing to pair with it everything.

2) Hack it. Pairing is a simple 4 of 6 digit code. This is simple to crack. The problem is you cannot crack anything unless the phone already has a paired device. This isn't much of a problem since most bluetooth phones are at least paired with a headset.

3) Bypass it. This was the original way of bluesnafing and cans still be done. Technical skills required to do this are getting higher and higher and i assume (I've not tried personally) that this will be easier in old towns where people mostly use older models of phones.

Just my few cents worth of thoughts :)

Where can you learn bluesnarfing?

2009-02-10T05:41:00.000-08:00

A lot of people have emailed me and asked me to teach them bluesnarfing. The problem is that my close friends don't ask that of me. Most of the people who do I don't know them well enough.

How then do most people learn how to bluesnarf. There are essentially 2 groups of bluesnafer. The 1st are like me, versed in networking and securities and dabble with bluetooth vulnerabilities for fun. The second group are people who started with bluejacking. After enough fun with that they graduate to bluesnarfing.

The similarities between the 2, most are self learned, or learnt via little pointers here and there from forums or from blogs like mine. I guess the effort involved is quite great, that is probably why there are not that many bluesnarfers around. :)

Super Funny

2009-01-26T07:00:00.000-08:00

This Funny man is Offering 500 Euros (Note the Money is on his screen, it's not even a real note) to teach him bluesnarfing.

Bluesnarfing Software for $2

2009-01-25T08:16:00.001-08:00

*** This offer is over****

A fellow bluesnarfer has decided to put up some bluesnarfing software for download

I've briefly look through them, do note the following
1) These are meant for beginners which means it has an advantage of being very easy to use. But this also means software penetration strength is not as good as some other tools.
Do note though I'm not affiliated to his site, so if you're keen click here

Bluesnarfing Software

2009-01-21T06:32:00.001-08:00

There has been many request for bluesnarfing software. Most sites will not offer these for download for obvious reasons. 1) Bluesnarfing is not exactly legal 2) Ethical issues.

Some of you may laugh, what the heck is the bluesnarfer telling us about ethics. This ethics issue must be discussed in another post. But suffice to say, not all hackers are bad and in fact, many hackers work for the police and security agent to enhance the safety of the masses. The same can almost be said of bluesnarfer.

That said, I'm not sure if some of you managed to find bluesnarfing tools around by yourself. Would be interesting to know. Maybe you can let me know by posting a comment here. Let me know if you tried to find but can't or that you've found. :)

Earning From Bluesnarfing

2009-01-12T07:10:00.000-08:00

Is it possible to earn money from bluesnarfing? Of course. I had my friend who deals with internet security asking me this over coffee the other day.
I recounted to him my experiences which I thought I would share here.
I started bluesnarfing for the thrill and fun of it. I had a policy that whatever I did should theoretically do no harm to the "victim" (I know some people would argue with me over this but this is another issue for another day).
This also means I keep out of trouble.

I've had more than 20 offers to help bluesnarf till now. One of the highest amount offered was a good 10k. To bluesnarf the palm device of the of their rival company. And for obvious reasons I rejected the offer.
Majority of them however, came from private incestigations, helping clients look for evidence of spousal betrayal. Again, non of which I took up because I never know what the full story is like.
I don't want to end up snooping on the good guy instead.

So thankfully or not I'm much poorer but also happier and safer without taking up these highly exciting offers. So can you legally earn from bluesnarfing? Of course, because that's part of my job now. I offer consultating services for internet and wireless security to companies. And you bet bluesnarfing is one of my favorite topics. I shall relate how I do bluesnarfing with lots of fun at these events.

Mumbai Attack ( Adv Tech)

2008-12-16T01:22:00.000-08:00

Decided for a post not fully related to bluesnarfing.
Looking back at the Nov 2008 Mumbai attack, it was clear that the attackers were clearly oct-teching the government troops.

The had satellite images of the city, carry handheld GPS sets and communicated via satellite and Internet phone.
It was reported that they were using 4 GPS systems which could double up as a wakie takie. Their cell phone users the Internet protocol for communication and this denied the police from using their conventional phone tracking devices.

The only way to protect ourselves 1) Out tech them 2) Turn off the systems
Linking back to our usual topic: While it is not likely GPS or goggle earth will ever be turned off. You can simply protect yourself from bluesnarfers by turning off your blue tooth.

Just remember, if you keep it on, it's like leaving your house door open. :)

Bluesnarf : The Backdoor Attack

2008-12-02T05:43:00.000-08:00

This is a sneaky one.
This involves establishing a bluetooth paring with another phone.
Once the other phone accepst the paring, a "back door" is establish.
That means a connection remains and the owner of the phone being snarfed doesn't know that his information is being accessed.
That means you can literally transfer all the files, phonebook etc, or use any services of the victims phone.
The catch is, if someone is willing to pair with you in the first place, it is likely to be someone you know.
So be Careful when you pair with your friend in the future.

Pairing Securities for thought

2008-06-23T00:06:00.001-07:00

When bluetooth devices pair, they cahnge idenfication information to ensure they are exchanging infomation with the right device.
Bluetooth pins can be 8 to 128 bits long. However, most phone makers use a standard 4 digit pin.
4 digit pin means that there can be a maximum of 9999 combinations of number.
Given they speed of computers that bluetooth attackers use, a pentium 4 can crack the paring code in less than 0.1 secs.
This simply means that any bluetooth attack can occur by "forcing" of "cheating" your device to pair with it as though it was a device your own bluetooth device previously paired with.
Then with a simple program, the attacker can crack the code and pair with your device to steal any information he wants.

So it you think you bluetooth device is safe because of the paring process, think twice.

Long Distance Bluesnarfing

2008-04-03T00:43:00.000-07:00

Just a little tip off here. Most people thinking that bluejaking/ bluesnarfing can only be done by people/ devices close by. But this is not absolutely true. For most people, usuing normal bluetooth devices/laptops, this rule stands. But all you need is a simple antenna and a class 1 toggle and you can bluesnarf anyone's phone up to a mile away, depending on terrain.

THis means that anyone can eseentially use your phone to make long distance calls, from up to a mile away, without any of your knowledge. Austrian researcher and Bluetooth expert Martin Herfurt did just that in an experiment in 2004

Try This Poll

2008-01-17T05:48:00.000-08:00

Found this Poll Quite interesting
See how many of us are bluesnafer vs bluejackers

Updated Jan 2009 : The poll has been completed.
visit http://bluejackingtools.com/forum for details.

Another Prime Example of Bluesnarfing

2007-12-16T05:25:00.000-08:00

Siemen Vs Palm
This is how powerful Bluesnafing can be :) Enjoy

Tools to Protect yourself

2007-12-09T22:49:00.000-08:00

It takes a snarfer to catch a snarfer. Or almost so. If your bluetooth cannot be switched off most of the time, then your device is prone to a bluesnarfing attack.

The best way around this is to know when you're being bluesnarfed. There are several softwares which you can use for this. Most of these are simple tools that helps detect any bluetooth connection between your phone and other phones.

While bluejackers and bluesnafers use these tools to find devices to attack, you can also use these tools to see if there are any unauthorised pairing of your device by other devices.

These tools include "bluesnifff" "easyjack" "bloover" amongst many others, most of which can be found in bluejackingtools.com

Hope this helps

Bluesnarfer Tool

2007-11-29T03:26:00.000-08:00

As I've promised, I will be talking about the wares used for bluesnarfing.

Today's lets talk aboutr bluesnarfer. This is one of the earliest tool used for bluesnarfing and and stayed true to the original description of bluesnarfing: which is to download the phonebook of susceptible mobile phones.

This is esentially a UNIX tool....like many of the bluetooth tools, which means you can't run it on usual java phones.
What is does is simple, search for bluetooth devices around and download the phonebooks of the devices that can be attacked.

This tools has been around for more than 4 years, so it's no surprising that some if not many of the new phone models has already had the bug exploited by the original bluesnafer fixed.

Hope this helps :)

A Video on Blueblugging

2007-11-23T23:31:00.000-08:00

As you can tell, even the producers of this video thinks bluebugging is bluejaking. But bluebuggging which this video shows is really a lot more malicious than benign bluebugging.
Like before, all words and no video makes it dull.

So here's a video of bluebugging

Quick Bluebug

2007-11-19T05:12:00.000-08:00

Just a quick post today.
Let me introduce bluebugging.
While some people consider bluebugging a kind of bluesnarfing, it is esentially different.
In fact, it is technically more difficult to bluebug than to bluesnarf.
While bluesnarfing is stealing of files from a person's mobile, bluebugging gains access to the bluetooth device and esentially takes controls of it.

This means that a bluebugger can take control of your phone, use it to access the internet, or to make phone calls, or send a text message.

As I promised, a quick post today. I'll leave the uses of bluebugging to your imagination for now.
Will talk more about it in my next few posts.

Val

The Technicalities that allowed Bluesnarfing

2007-11-17T06:55:00.000-08:00

Adam Laurie From A.L. Digital Ltd found 2 flaws in bluetooth data transfer in 2003 .
The 2 flaws are the beginning of Bluesnarfing.

Blue Nov 2003, when Adam described the flaws, bluejacking is already known and spreading. What Adam discovered was new even to the blue jacking community

1) That data from a victims phone can be obtained without any knowledge of the owner. When it was first described, he was essentially talking about the phonebook. But in essence, any data stored in the bluetooth device can be obtained.

2) Any previously paired device, can access the data and files of a person's mobile device. This is so even after the pairing has been removed.

This started the era of bluesnarfing. Adam quickly alerted phonemakers, which resulted in upgrades which fixed these security bugs. But Bluesnarfing didn't end there. With these bugs fixed, bluesnarfers identified new flaws and started a new generation of bluesnarfing which is still happening today.