A curated list of Bluetooth security resources covering vulnerabilities, tools, research, and conference talks for BR/EDR, LE, and Mesh.
Awesome Bluetooth Security is a curated GitHub repository that aggregates essential resources for understanding and testing the security of Bluetooth technologies, including Classic (BR/EDR), Low Energy (LE), and Mesh. It provides a structured collection of documented vulnerabilities, security tools, conference presentations, and reference materials to aid security professionals and researchers.
Security researchers, penetration testers, IoT security analysts, and developers who need to assess, audit, or harden Bluetooth implementations in devices and systems.
It saves significant time by centralizing scattered Bluetooth security knowledge—from historical vulnerabilities to modern attack tools—into a single, community-maintained list, making it an invaluable starting point for both newcomers and experienced practitioners.
List of Bluetooth BR/EDR/LE security resources
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Provides a detailed table of notable vulnerabilities like BlueBorne and SweynTooth with CVE IDs, paper links, and conference videos, making it easy to reference historical flaws.
Aggregates a wide range of open-source and commercial tools for scanning, sniffing, fuzzing, and firmware analysis, categorized by function with direct links.
Includes a chronological list of security talks from major conferences like DEF CON and Black Hat since 2003, offering valuable insights from experts over time.
Directly links to authoritative sources such as Bluetooth Core Specifications and NIST SP 800-121, ensuring access to official guidelines and specs.
The README's 'To Do' section admits missing lists of research papers, articles, and books, limiting its usefulness for academic or deep-dive research.
Lists tools like bleah that are marked as deprecated or replaced, which could waste time or mislead users seeking current solutions.
Only aggregates resources without providing setup instructions, tutorials, or usage examples, leaving users to figure out tool integration on their own.