# btle

Published articles for btle.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## This Is Not a Post About BLE, Introducing BLEAH

DevFeed: [This Is Not a Post About BLE, Introducing BLEAH](<https://devfeed.tech/articles/this-is-not-a-post-about-ble-introducing-bleah-41255.md>)

Original publisher: [Read original article](<https://www.evilsocket.net/2017/09/23/This-is-not-a-post-about-BLE-introducing-BLEAH/>)

Author: Simone Margaritelli

Published: 2017-09-23T15:06:56Z

Content type: tutorial

Language: en

Sources: [evilsocket](<https://devfeed.tech/sources/evilsocket.md>)

Topics: [Bluetooth](<https://devfeed.tech/topics/bluetooth.md>), [Security](<https://devfeed.tech/topics/security.md>), [Fuzzing/Fuzz testing](<https://devfeed.tech/topics/fuzzing.md>), [Internet of things](<https://devfeed.tech/topics/iot.md>), [Tool](<https://devfeed.tech/topics/tool.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [ble](<https://devfeed.tech/tags/ble.md>), [bleah](<https://devfeed.tech/tags/bleah.md>), [bluetooth](<https://devfeed.tech/tags/bluetooth.md>), [bluetooth-low-energy](<https://devfeed.tech/tags/bluetooth-low-energy.md>), [btle](<https://devfeed.tech/tags/btle.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [fuzzing](<https://devfeed.tech/tags/fuzzing.md>), [hack](<https://devfeed.tech/tags/hack.md>), [iot](<https://devfeed.tech/tags/iot.md>), [iot-security](<https://devfeed.tech/tags/iot-security.md>), [offensive-tools](<https://devfeed.tech/tags/offensive-tools.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [security](<https://devfeed.tech/tags/security.md>), [tools](<https://devfeed.tech/tags/tools.md>), [wireless-security](<https://devfeed.tech/tags/wireless-security.md>)

### AI overview

An introduction to hacking Bluetooth Low Energy devices that also presents BLEAH, an open-source tool. The article discusses BLE's discoverability, connection behavior, data access, and lack of built-in protocol security, while noting that automatic fuzzing features were kept in a private fork.

### Source excerpt

This is not a post about BLE, but rather on how to hack it ... well, to be honest, BLE devices are usually very easy to hack, so it's just a quick intro to it, I'll also take the chance to open source one of the last tools I've made and that I kept private so far. I moved the features I thought to be dangerous ( aka: auto fuzzing all the BLE things and bring chaos ) in a private fork which will stay private, however it's not that complicated to chain bleah with other tools ( cough ... radamsa ... cough ) and have lots of fun. Oh and this is also because someone asked me some intro on BLE, so yeah, his fault.

## Hacking a Herb Vaporizer to Set Its Temperature Limit From 190C to 6553.5C Remotely

DevFeed: [Hacking a Herb Vaporizer to Set Its Temperature Limit From 190C to 6553.5C Remotely](<https://devfeed.tech/articles/hacking-a-herb-vaporizer-to-set-its-temperature-limit-from-190c-to-6553-5c-remotely-41254.md>)

Original publisher: [Read original article](<https://www.evilsocket.net/2017/08/25/Mini-Post-Hacking-a-Herb-Vaporizer-using-GNU-Linux-and-BLE-raw-commands/>)

Author: Simone Margaritelli

Published: 2017-08-25T01:10:53Z

Content type: opinion

Language: en

Sources: [evilsocket](<https://devfeed.tech/sources/evilsocket.md>)

Topics: [Hacking](<https://devfeed.tech/topics/hacking.md>), [Bluetooth](<https://devfeed.tech/topics/bluetooth.md>), [Security](<https://devfeed.tech/topics/security.md>), [Hardware](<https://devfeed.tech/topics/hardware.md>)

Tags: [ble](<https://devfeed.tech/tags/ble.md>), [bluetooth](<https://devfeed.tech/tags/bluetooth.md>), [bluetooth-low-energy](<https://devfeed.tech/tags/bluetooth-low-energy.md>), [btle](<https://devfeed.tech/tags/btle.md>), [crafty](<https://devfeed.tech/tags/crafty.md>), [crafty-vaporizer](<https://devfeed.tech/tags/crafty-vaporizer.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [embedded-devices](<https://devfeed.tech/tags/embedded-devices.md>), [firmware](<https://devfeed.tech/tags/firmware.md>), [hacking](<https://devfeed.tech/tags/hacking.md>), [iot-security](<https://devfeed.tech/tags/iot-security.md>), [linux](<https://devfeed.tech/tags/linux.md>), [low-energy](<https://devfeed.tech/tags/low-energy.md>), [no-authentication](<https://devfeed.tech/tags/no-authentication.md>), [protocol-reversing](<https://devfeed.tech/tags/protocol-reversing.md>), [responsible-disclosure](<https://devfeed.tech/tags/responsible-disclosure.md>), [security](<https://devfeed.tech/tags/security.md>), [terminal](<https://devfeed.tech/tags/terminal.md>), [vaporizer](<https://devfeed.tech/tags/vaporizer.md>)

### AI overview

The article describes reverse engineering the Crafty vaporizer's mobile application and Bluetooth Low Energy interface. It reports that device descriptors could be read and written without authentication and that the temperature value was stored as two bytes, allowing a remote attempt to change the limit from 190°C to 6553.5°C. The author did not test the modified setting.

### Source excerpt

Tonight my brain decided, instead of sleeping (why even bother trying, right?), to start a new short adventure in the Bluetooth Low Energy world. I'm a happy Crafty vaporizer owner and as I discovered by chance, I can access it using my laptop.