This project was originally unveiled at the recently concluded ShmooCon. It shows a lot of promise and the authors two years of study and experimentation. The name is Ubertooth.
Ubertooth is an open source 2.4 GHz wireless development platform suitable for passive bluetooth monitoring. It aims to be the world’s first open source and affordable bluetooth monitoring and development platform. In reality, the commercial equivalents of such tools are available for 10000$ and above!
Since it’s inception from almost two years ago, there are two version (both open source) of the Ubertooth platform (if we may call it!). They are as follows:
- Ubertooth Zero: It was a low power (comparable to a Class 3 bluetooth device) USB dongle, and the first working prototype hardware platform of Project Ubertooth. It has since been superseded by Ubertooth One.
- Ubertooth One: It is a smaller, higher power (comparable to a Class 1 bluetooth device) USB dongle and is the next generation hardware platform of Project Ubertooth. It supersedes Ubertooth Zero and is currently the preferred platform.
Building this device ±3 GHz costs about a 100$! This includes all the cost of the hardware. A typical device looks like the following:
A few of its features are:
- Bluetooth Basic Rate injection
- Bluetooth Low Energy monitoring and injection
- 802.11 FHSS monitoring and injection
- Basic spectrum monitoring
Now, you might think that all this looks good! But, what do I monitor the sniffed bluetooth data on my computer? Worry not – for you have the old favourite and ever faithful tool when it comes to wireless sniffing mumbo-jumbo: Kismet! It already implements passive Basic Rate Bluetooth monitoring! Talking about Ubertooth One, it consists of the following:
- RP-SMA RF connector: connects to test equipment, antenna, or dummy load.
- CC2591 RF front end.
- CC2400 wireless transceiver.
- LPC175x ARM Cortex-M3 microcontroller with Full-Speed USB 2.0.
- USB A plug: Connects to host computer running Kismet or other host code.
Unfortunately, the Ubertooth hardware architecture is not compatible with bluetooth Enhanced Data Rate (EDR) modulations. However, EDR packets begin with a Basic Rate (1 Mbps GFSK) header. So Ubertooth could be used for identification and partial monitoring of EDR transmissions. But, worry not, with time and MONEY, this shortcoming could well be overcome. How? The author has launched a KickStarter project and needs your support. This will end on the 28th of February 2011. You can even get yourselves a completely assembled copy of Ubertooth One!
Download the software part of Ubertooth One here.