So now Blue2thprinting github.com/darkmentorll..., and other tools that use CLUES, like WHAD github.com/whad-team/wh..., can more easily identify Polara BLE-enabled crosswalks.
GitHub - darkmentorllc/Blue2thprinting: Code associated with the talk "Blue2thprinting (blue-[tooth)-printing]: answering the question of 'WTF am I even looking at?!'"
Code associated with the talk "Blue2thprinting (blue-[tooth)-printing]: answering the question of 'WTF am I even looking at?!'" - darkmentorllc/Blue2thprinting
github.com
April 21, 2025 at 12:34 AM
So now Blue2thprinting github.com/darkmentorll..., and other tools that use CLUES, like WHAD github.com/whad-team/wh..., can more easily identify Polara BLE-enabled crosswalks.
Discover Blue2thprinting, a research-focused toolset that reveals what Bluetooth devices are really broadcasting. Ideal for cybersecurity professionals and researchers.
#SecurityLand #SkillsLab #BluetoothSecurity #InfoSec #Blue2thprinting #Bluetooth
Read More: www.security.land/decoding-blu...
#SecurityLand #SkillsLab #BluetoothSecurity #InfoSec #Blue2thprinting #Bluetooth
Read More: www.security.land/decoding-blu...
Decoding Blue2thprinting: A Deep Dive into Bluetooth Reconnaissance Research | Security Land
Breakthrough research tool Blue2thprinting reveals how Bluetooth data can be analyzed for reconnaissance with precision.
www.security.land
September 12, 2025 at 9:14 AM
Discover Blue2thprinting, a research-focused toolset that reveals what Bluetooth devices are really broadcasting. Ideal for cybersecurity professionals and researchers.
#SecurityLand #SkillsLab #BluetoothSecurity #InfoSec #Blue2thprinting #Bluetooth
Read More: www.security.land/decoding-blu...
#SecurityLand #SkillsLab #BluetoothSecurity #InfoSec #Blue2thprinting #Bluetooth
Read More: www.security.land/decoding-blu...
Sniff the airwaves! Learn BT recon with Blue2thprinting; identify devices, detect known vulns & crowdsource data via BTIDALPOOL. Bluetooth 2222: Bluetooth Reconnaissance with Blue2thprinting by @xenokovah.bsky.social
ost2.fyi/BT2222 (~8.5 hrs)
ost2.fyi/BT2222 (~8.5 hrs)
Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting
Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting
ost2.fyi
July 27, 2026 at 12:38 PM
Sniff the airwaves! Learn BT recon with Blue2thprinting; identify devices, detect known vulns & crowdsource data via BTIDALPOOL. Bluetooth 2222: Bluetooth Reconnaissance with Blue2thprinting by @xenokovah.bsky.social
ost2.fyi/BT2222 (~8.5 hrs)
ost2.fyi/BT2222 (~8.5 hrs)
📣"Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" is now released!📣
ost2.fyi/BT2222
This class teaches you about the 30+ data types that the Blue2thprinting software can collect for when you're trying to determine what a device is, and whether it has any known vulnerabilities.
ost2.fyi/BT2222
This class teaches you about the 30+ data types that the Blue2thprinting software can collect for when you're trying to determine what a device is, and whether it has any known vulnerabilities.
September 8, 2025 at 9:23 AM
📣"Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" is now released!📣
ost2.fyi/BT2222
This class teaches you about the 30+ data types that the Blue2thprinting software can collect for when you're trying to determine what a device is, and whether it has any known vulnerabilities.
ost2.fyi/BT2222
This class teaches you about the 30+ data types that the Blue2thprinting software can collect for when you're trying to determine what a device is, and whether it has any known vulnerabilities.
🥳 #OST2_5th_Anniversary🎉
ost2.fyi/BT2222
On Sept 8th Xeno Kovah @xenokovah.bsky.social released "Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" (9h5m avg, 7h28m median, 3h50m to 25h16m range)
ost2.fyi/BT2222
On Sept 8th Xeno Kovah @xenokovah.bsky.social released "Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" (9h5m avg, 7h28m median, 3h50m to 25h16m range)
Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting
Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting
ost2.fyi
July 17, 2026 at 2:18 PM
🥳 #OST2_5th_Anniversary🎉
ost2.fyi/BT2222
On Sept 8th Xeno Kovah @xenokovah.bsky.social released "Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" (9h5m avg, 7h28m median, 3h50m to 25h16m range)
ost2.fyi/BT2222
On Sept 8th Xeno Kovah @xenokovah.bsky.social released "Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" (9h5m avg, 7h28m median, 3h50m to 25h16m range)
* Xeno Kovah - Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting - ost2.fyi/BT2222
If you've got an idea for a class that you want to share with 33k friends, reach out at teach 🌀 ost2.fyi!
If you've got an idea for a class that you want to share with 33k friends, reach out at teach 🌀 ost2.fyi!
Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting Short URL Redirect
ost2.fyi
December 29, 2025 at 12:29 PM
* Xeno Kovah - Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting - ost2.fyi/BT2222
If you've got an idea for a class that you want to share with 33k friends, reach out at teach 🌀 ost2.fyi!
If you've got an idea for a class that you want to share with 33k friends, reach out at teach 🌀 ost2.fyi!
Crowdsourced data query quickstart:
cd ~
git clone --branch BTIDES https://github.com/darkmentorllc/Blue2thprinting
cd Blue2thprinting
git checkout sharetag
sudo ./setup_analysis_helper_debian-based.sh
cd Analysis
python3 TellMeEverything.py --query-BTIDALPOOL --use-test-db --company-regex "HP"
cd ~
git clone --branch BTIDES https://github.com/darkmentorllc/Blue2thprinting
cd Blue2thprinting
git checkout sharetag
sudo ./setup_analysis_helper_debian-based.sh
cd Analysis
python3 TellMeEverything.py --query-BTIDALPOOL --use-test-db --company-regex "HP"
GitHub - darkmentorllc/Blue2thprinting: Code associated with the talk "Blue2thprinting (blue-[tooth)-printing]: answering the question of 'WTF am I even looking at?!'"
Code associated with the talk "Blue2thprinting (blue-[tooth)-printing]: answering the question of 'WTF am I even looking at?!'" - darkmentorllc/Blue2thprinting
github.com
January 13, 2025 at 12:17 PM
Crowdsourced data query quickstart:
cd ~
git clone --branch BTIDES https://github.com/darkmentorllc/Blue2thprinting
cd Blue2thprinting
git checkout sharetag
sudo ./setup_analysis_helper_debian-based.sh
cd Analysis
python3 TellMeEverything.py --query-BTIDALPOOL --use-test-db --company-regex "HP"
cd ~
git clone --branch BTIDES https://github.com/darkmentorllc/Blue2thprinting
cd Blue2thprinting
git checkout sharetag
sudo ./setup_analysis_helper_debian-based.sh
cd Analysis
python3 TellMeEverything.py --query-BTIDALPOOL --use-test-db --company-regex "HP"
I'm happy to say that my talk on Blue2thprinting v2 (now with ∞% more crowdsourcing!) has been accepted to SEC-T sec-t.org in Stockholm next month. The nice thing is that by the time the talk happens, the Blue2thprinting #OST2 class will be released.
SEC-T
ConferenceSeptember 11-12 The main conference is two days of IT security presentations. Talks are highly technical and research-driven, not sales pitches.
Tickets Community EventSeptember 10 The half-...
sec-t.org
August 15, 2025 at 12:51 AM
@veronicakovah.bsky.social and I have too much material for our 4-day BLE training at RingZer0. So I made a separate free workshop. If you’re in attendance you’ll get to go deep into BLE device identification and 2thprinting! https://ringzer0.training/bootstrap25-workshop-blue2thprinting/
Workshop: Blue2thprinting: identifying the form and function of the Bluetooth devices // Xeno Kovah
Right now you are enveloped in the warming glow of dozens to hundreds of Bluetooth devices. Aren’t you curious what all those little critters are?! In this workshop we’ll use the Blue2thprinting tools to poke at these apparitions and get a sense of what they are and what they want from us!
ringzer0.training
February 21, 2025 at 12:57 PM
@veronicakovah.bsky.social and I have too much material for our 4-day BLE training at RingZer0. So I made a separate free workshop. If you’re in attendance you’ll get to go deep into BLE device identification and 2thprinting! https://ringzer0.training/bootstrap25-workshop-blue2thprinting/
📢Call for beta testers!📢
The beta for "Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" by @xenokovah.bsky.social will start Aug. 4th and run for 1 month.
forms.gle/KytM2Sxaez1x...
The beta for "Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" by @xenokovah.bsky.social will start Aug. 4th and run for 1 month.
forms.gle/KytM2Sxaez1x...
Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting
Enter the email you have used / will use when registering for beta.ost2.fyi. This will be used to enroll you in the beta class if you are selected. If your account does not exist at the time enrollmen...
forms.gle
July 21, 2025 at 12:15 PM
📢Call for beta testers!📢
The beta for "Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" by @xenokovah.bsky.social will start Aug. 4th and run for 1 month.
forms.gle/KytM2Sxaez1x...
The beta for "Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" by @xenokovah.bsky.social will start Aug. 4th and run for 1 month.
forms.gle/KytM2Sxaez1x...
New OpenSecurityTraining2 class: "Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" (~8 hours)
New OpenSecurityTraining2 class: "Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" (~8 hours)
ost2.fyi
September 7, 2025 at 2:54 PM
New OpenSecurityTraining2 class: "Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" (~8 hours)
Thanks to everyone who attended my hardwear.io workshop about Blue2thprinting! The ~8.5h free class where you can learn more is at ost2.fyi/bt2222 . Once you finish that, you'll be eligible to join the 🏴☠️🔵BlueCrew🔵🏴☠️!
November 23, 2025 at 11:50 PM
Thanks to everyone who attended my hardwear.io workshop about Blue2thprinting! The ~8.5h free class where you can learn more is at ost2.fyi/bt2222 . Once you finish that, you'll be eligible to join the 🏴☠️🔵BlueCrew🔵🏴☠️!
🧵I originally started working on Blue2thprinting to try and figure out where @veronicakovah.bsky.social's over-the-air exploits against Texas Instruments & Silicon Labs (darkmentor.com/publication/...) applied...
September 8, 2025 at 10:05 AM
🧵I originally started working on Blue2thprinting to try and figure out where @veronicakovah.bsky.social's over-the-air exploits against Texas Instruments & Silicon Labs (darkmentor.com/publication/...) applied...
The "Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" beta class was originally slated to start Aug 4th but it opened a little early. However the class registration will close Aug 4th as planned, and the class will run till Sept 1st.
If you, like me, are curious about the thousands of BT devices that are secretly making noise around us every day (and whether they’re vulnerable to exploitation), then this is the class for you. You can register here: forms.gle/MncQkVAL8Laq...
August 2, 2025 at 1:46 PM
The "Bluetooth 2222: Bluetooth reconnaissance with Blue2thprinting" beta class was originally slated to start Aug 4th but it opened a little early. However the class registration will close Aug 4th as planned, and the class will run till Sept 1st.
I finally got the BT data sniffed at @districtcon.bsky.social and @hardwear-io.bsky.social uploaded to the BTIDALPOOL crowdsourcing server. Now folks who take ost2.fyi/BT2222 "Bluetooth reconnaissance with Blue2thprinting" will have more data (from hacker conferences!) to poke around in!
March 28, 2026 at 12:05 PM
I finally got the BT data sniffed at @districtcon.bsky.social and @hardwear-io.bsky.social uploaded to the BTIDALPOOL crowdsourcing server. Now folks who take ost2.fyi/BT2222 "Bluetooth reconnaissance with Blue2thprinting" will have more data (from hacker conferences!) to poke around in!
I'm still hoping they'll accept my workshop on Blue2thprinting as well, in which case I'll pull of a hat trick of talk, workshop, training!
September 22, 2025 at 11:00 AM
I'm still hoping they'll accept my workshop on Blue2thprinting as well, in which case I'll pull of a hat trick of talk, workshop, training!
Now that I’ve got the timeline updates off my plate (and once my taxes are done 👀), I can get back to working on the #OST2 Blue2thprinting class!
April 14, 2025 at 1:09 AM
Now that I’ve got the timeline updates off my plate (and once my taxes are done 👀), I can get back to working on the #OST2 Blue2thprinting class!
I’ve been accepted to speak at #DistrictConYear0 about what’s new with my Blue2thprinting tool, including the new crowdsourcing capability. I’m looking forward to meeting new DC security folks there.
December 2, 2024 at 11:52 AM
I’ve been accepted to speak at #DistrictConYear0 about what’s new with my Blue2thprinting tool, including the new crowdsourcing capability. I’m looking forward to meeting new DC security folks there.
While I’m working on the Blue2thprinting class, I just checked in an update to attempt lookup of UUID16s as a possible Standards Development Organization, and this adds some interesting additional signal when trying to figure out what something might be
June 12, 2025 at 12:43 PM
While I’m working on the Blue2thprinting class, I just checked in an update to attempt lookup of UUID16s as a possible Standards Development Organization, and this adds some interesting additional signal when trying to figure out what something might be
🧵I made a structural update to the Blue2thprinting #OST2 class today: The previous class was structured like "A:B:[C:D:E]:F:G" where F & G were collecting your own data, and [C-E] were understanding what Tell_Me_Everything.py was trying to tell you about the analyzed data…
September 29, 2025 at 12:11 AM
🧵I made a structural update to the Blue2thprinting #OST2 class today: The previous class was structured like "A:B:[C:D:E]:F:G" where F & G were collecting your own data, and [C-E] were understanding what Tell_Me_Everything.py was trying to tell you about the analyzed data…
I’ve uploaded a good chunk of my Blue2thprinting data collected in Sweden at SEC-T to BTIDALPOOL.
And in honor of the Meshtastic workshops, I also added some Meshtastic UUIDs to CLUES which takes one from image 1 -> 2/3 (if you pass —verbose-print)
And in honor of the Meshtastic workshops, I also added some Meshtastic UUIDs to CLUES which takes one from image 1 -> 2/3 (if you pass —verbose-print)
September 15, 2025 at 4:02 PM
I’ve uploaded a good chunk of my Blue2thprinting data collected in Sweden at SEC-T to BTIDALPOOL.
And in honor of the Meshtastic workshops, I also added some Meshtastic UUIDs to CLUES which takes one from image 1 -> 2/3 (if you pass —verbose-print)
And in honor of the Meshtastic workshops, I also added some Meshtastic UUIDs to CLUES which takes one from image 1 -> 2/3 (if you pass —verbose-print)
Time is flying and I’m having fun :) I didn’t release any OST2 classes last year, because @veronicakovah.bsky.social and I have been working on a big (easily 5+ days) Bluetooth Low Energy class for the last year & I also have a separate 1 day Blue2thprinting class that’s opening for beta now
July 21, 2025 at 2:09 PM
Time is flying and I’m having fun :) I didn’t release any OST2 classes last year, because @veronicakovah.bsky.social and I have been working on a big (easily 5+ days) Bluetooth Low Energy class for the last year & I also have a separate 1 day Blue2thprinting class that’s opening for beta now
My SEC-T talk on Blue2thprinting v2 will be tomorrow at 3:30pm Stockholm time, and will also be streamed. Just go to sec-t.org and click the “stream” button at the top of the page.
SEC-T
ConferenceSeptember 11-12 The main conference is two days of IT security presentations. Talks are highly technical and research-driven, not sales pitches.
Tickets Community EventSeptember 10 The half-day Community Event is free to attend even without a ticket, no registration of any kind needed. Come and watch talks and mingle with the community!
About the Community Event » Club SEC-TSeptember 11 The official SEC-T party, free and open for everyone!
sec-t.org
September 11, 2025 at 11:44 AM
My SEC-T talk on Blue2thprinting v2 will be tomorrow at 3:30pm Stockholm time, and will also be streamed. Just go to sec-t.org and click the “stream” button at the top of the page.
The SEC-T organizers posted the video from my talk "Crowdsourcing Bluetooth identity, to understand Bluetooth vulnerability" in what seems like record time. You can find the video & slides (and previous truncated-for-time version) here: darkmentor.com/publication/...
Crowdsourcing Bluetooth identity, to understand Bluetooth vulnerability
| Dark Mentor LLC
Bluetooth vulnerability assessment is still in the dark ages. We still don't have a good handle on all the devices that are affected by the exploitable-over-the-air vulnerabilities that we disclosed in Texas Instruments and Silicon Labs firmware back in 2020. But we've been chipping away at the problem!<p>We released "Blue2thprinting" in 2023 as our starting point towards something akin to nmap OS fingerprinting, but with a focus on learning what we could about the specific Bluetooth chip or firmware versions, to identify known-vulnerable versions. We delved into the thousands of pages of Bluetooth specs to extract bits and pieces, packets and profiles, that had interesting information to share about what a device is.<p>But even as we continue to add new types of data to enrich our understanding of what devices are, and whether they're vulnerable to known CVEs, there's just *so much* that's still unknown! In this talk we'll discuss the updates to Blue2thprinting to allow for P2P researcher data sharing and crowdsourcing, and how that can help broaden the global knowledge of Bluetooth vulnerability applicability. And we'll also highlight the ridiculous number of tantalizing known unknowns; and encourage you to join the BlueCrew on our Journey Into Mystery!
darkmentor.com
September 15, 2025 at 4:02 PM
The SEC-T organizers posted the video from my talk "Crowdsourcing Bluetooth identity, to understand Bluetooth vulnerability" in what seems like record time. You can find the video & slides (and previous truncated-for-time version) here: darkmentor.com/publication/...
This class teaches you about the 30+ data types that the Blue2thprinting software can collect and surface for when you're trying to determine what a device is, and whether it has any known vulnerabilities. New in v2.0+ is the BTIDALPOOL crowdsourcing server to push/pull data about devices.
July 17, 2026 at 2:18 PM
This class teaches you about the 30+ data types that the Blue2thprinting software can collect and surface for when you're trying to determine what a device is, and whether it has any known vulnerabilities. New in v2.0+ is the BTIDALPOOL crowdsourcing server to push/pull data about devices.