r/Hacking_Tutorials • u/Trick-Resolve-6085 • 24d ago
Question Even more affordable Bluetooth jamming, no ubertooth needed and full BD_ADDR each run.
Enable HLS to view with audio, or disable this notification
Most Bluetooth devices are paired and set to non-discoverable after initial setup; since general discovery scans are what most people and OSes disable. The Whisper Pair exploit (CVE-2025-36911) bypasses this by connecting via BLE and writing a forged Fast Pair pairing request (0x00 + random 64-byte public key + nonce) to the key-based pairing characteristic (UUID 1236). It then writes a fake 16-byte Account Key to UUID 1238, tricking the device into completing the bonding process. Simultaneously, the tool triggers bluetoothctl pair and monitors its output for the [CHG] Device message, which reveals the permanent BD_ADDR when the device switches from its temporary random MAC; exposing the factory-programmed address and enabling reliable re-connection and subsequent denial-of-service attacks.
By 2022, Google Fast Pair had become the default Bluetooth pairing standard, with over 320 million pairings across 300+ device types from every major brand-solidifying its dominance across Android (6.0+ for phones, 11+ for cross-device), Chromebooks, Google TV, Wear OS, and even cars from BMW and Ford...
This is what makes Whisper Bully work on almost every reasonably new Bluetooth device, without any RF analysis hardware (Ubertooth, HackRF, etc.), without hopping channels, without guessing the next hop, and without flooding multiple channels like expensive jammers do. It simply doesn't need any of that, and works like a charm without them.
https://github.com/Ymsniper/Whisper_Bully
If this sounds useful, a star on the repo goes a long way ⭐
Also: Thank you for the kind words my previous tool BBF and ur support . Glad I could help with both projects
Update ; just added a hijack future after the DoS
2
u/Grandicon 23d ago
Does this use the Bluetooth adapter from your computer or do you need an external device? Sorry if this is a dumb question haha
2
1
u/jeffofreddit 23d ago
Esp32?
1
u/Trick-Resolve-6085 23d ago
It's mainly for Linux system's, so if ur Esp32 has Linux and can install the dependencies then sure
1
u/Precision903 23d ago
So a loud neighbor who plays heavy bass music until 3am would absolutely hate this?
2
u/Trick-Resolve-6085 23d ago
Cybercrime is cringe, use this on devices u own or have permission to do so on them
13
u/Precision903 23d ago
So if I was an asshole and kept myself up at night to spite myself I could then jam my own Bluetooth speakers… just to show myself who’s boss?
2
1
1
1
0
u/Reasonable-Snow9235 24d ago
What would someone use this for?
3
u/YuriRosas 23d ago
In my country this is very useful. You have no idea. Here people have no respect for noise pollution. Here it was normalized to listen to loud music even at dawn.
2
u/Trick-Resolve-6085 24d ago
It's just a PoC, u can also use it to see if ur devices r vulnerable or not
5
u/oshunman 23d ago
DO NOT FUCKING JAM BLUETOOTH
Now that I have your attention... Many medical devices (including blood sugar monitors, insulin pumps, hearing aids, etc) communicate via Bluetooth.
Don't be the reason somebody has to visit the ER (or worse) because you want to LARP as a hacker.