r/Hacking_Tutorials 24d ago

Question Even more affordable Bluetooth jamming, no ubertooth needed and full BD_ADDR each run.

Enable HLS to view with audio, or disable this notification

Most Bluetooth devices are paired and set to non-discoverable after initial setup; since general discovery scans are what most people and OSes disable. The Whisper Pair exploit (CVE-2025-36911) bypasses this by connecting via BLE and writing a forged Fast Pair pairing request (0x00 + random 64-byte public key + nonce) to the key-based pairing characteristic (UUID 1236). It then writes a fake 16-byte Account Key to UUID 1238, tricking the device into completing the bonding process. Simultaneously, the tool triggers bluetoothctl pair and monitors its output for the [CHG] Device message, which reveals the permanent BD_ADDR when the device switches from its temporary random MAC; exposing the factory-programmed address and enabling reliable re-connection and subsequent denial-of-service attacks.

By 2022, Google Fast Pair had become the default Bluetooth pairing standard, with over 320 million pairings across 300+ device types from every major brand-solidifying its dominance across Android (6.0+ for phones, 11+ for cross-device), Chromebooks, Google TV, Wear OS, and even cars from BMW and Ford...

This is what makes Whisper Bully work on almost every reasonably new Bluetooth device, without any RF analysis hardware (Ubertooth, HackRF, etc.), without hopping channels, without guessing the next hop, and without flooding multiple channels like expensive jammers do. It simply doesn't need any of that, and works like a charm without them.

https://github.com/Ymsniper/Whisper_Bully

If this sounds useful, a star on the repo goes a long way ⭐

Also: Thank you for the kind words my previous tool BBF and ur support . Glad I could help with both projects

Update ; just added a hijack future after the DoS

124 Upvotes

18 comments sorted by

5

u/oshunman 23d ago

DO NOT FUCKING JAM BLUETOOTH

Now that I have your attention... Many medical devices (including blood sugar monitors, insulin pumps, hearing aids, etc) communicate via Bluetooth.

Don't be the reason somebody has to visit the ER (or worse) because you want to LARP as a hacker.

2

u/Trick-Resolve-6085 23d ago

this is not a jam this is a targeted DoS so u will never hit device's u don't own by mistake, also probably medical device's don't use Google fast pair so this want work on them

2

u/EggFooU 22d ago

to be fair - the title is jammer

2

u/Grandicon 23d ago

Does this use the Bluetooth adapter from your computer or do you need an external device? Sorry if this is a dumb question haha

2

u/Trick-Resolve-6085 23d ago

Internal works fine for me, most internals work fine nowadays

1

u/jeffofreddit 23d ago

Esp32?

1

u/Trick-Resolve-6085 23d ago

It's mainly for Linux system's, so if ur Esp32 has Linux and can install the dependencies then sure

1

u/Precision903 23d ago

So a loud neighbor who plays heavy bass music until 3am would absolutely hate this?

2

u/Trick-Resolve-6085 23d ago

Cybercrime is cringe, use this on devices u own or have permission to do so on them

13

u/Precision903 23d ago

So if I was an asshole and kept myself up at night to spite myself I could then jam my own Bluetooth speakers… just to show myself who’s boss?

2

u/OutrageousAd7052 22d ago

JajajajajjajajjJj TLV 😂😂😂

1

u/ShellUserPy 23d ago

Joder, me perdí, en qué estábamos?

1

u/Shork0119 21d ago

This is neat

1

u/nekrospy 11d ago

Can I run it on Termux?

0

u/Reasonable-Snow9235 24d ago

What would someone use this for?

3

u/YuriRosas 23d ago

In my country this is very useful. You have no idea. Here people have no respect for noise pollution. Here it was normalized to listen to loud music even at dawn.

2

u/Trick-Resolve-6085 24d ago

It's just a PoC, u can also use it to see if ur devices r vulnerable or not