正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

Demo of using #BlueDucky to exploit 0-click Bluetooth vulnerability of targeted Android smartphone (CVE-2023-45866) Executed by Raspberry Pi 4 and Android running #NetHunter

Mobile Hacker

59,908 subscribers

129,652 次观看 • 2 年前 •via X (Twitter)

科学技术 #BlueDucky #NetHunter

Anya Rossi• Live Now

Private livecam show

10 条评论

Mobile Hacker 的头像

Mobile Hacker2 年前

Video is also on my YouTube channel

Mobile Hacker 的头像

Mobile Hacker2 年前

Prevention tips: 1) Install security patches for Android 11 and above 2) For Android 10 and below, the security patch is not available 3) Attacker in the vicinity can receive the Bluetooth MAC address only if the device is in discoverable mode. Turn off Bluetooth if not used

1511 的头像

15112 年前

👍

Jason Staples 的头像

Jason Staples2 年前

extra points for proper style

Dev 的头像

Dev2 年前

Yup I tried it, loving this tool so far!!

@chloevz in the blueish sky website 的头像

@chloevz in the blueish sky website2 年前

I'm gonna rickroll so many people thank you

Leonard Saens 的头像

Leonard Saens2 年前

So the Bluetooth is unsafe?

Mobile Hacker 的头像

Mobile Hacker2 年前

No. Having outdated device is unsafe.

P-196 的头像

P-1962 年前

I hope, Google will fix this. My phone needs Bluetooth to communicate with my watch

Mobile Hacker 的头像

Mobile Hacker2 年前

Patches for Android 11 and above are out. However, for Android 10 and below, the security patch is not available.

相关视频

PoC to takeover Android using another Android by exploiting critical Bluetooth vulnerability to install #Metasploit payload without proper Bluetooth pairing (CVE-2023-45866) It still affects Android 10 and bellow #NetHunter

PoC to takeover Android using another Android by exploiting critical Bluetooth vulnerability to install #Metasploit payload without proper Bluetooth pairing (CVE-2023-45866) It still affects Android 10 and bellow #NetHunter

Mobile Hacker

108,971 次观看 • 2 年前

#BlueDucky is still a relevant tool to scan and identify vulnerable #Bluetooth devices (CVE-2023-45866). Don't postpone updates of your devices in 2025 #NetHunter

#BlueDucky is still a relevant tool to scan and identify vulnerable #Bluetooth devices (CVE-2023-45866). Don't postpone updates of your devices in 2025 #NetHunter

Mobile Hacker

53,734 次观看 • 1 年前

Exfiltrate #WhatsApp chat, or internal data of any Android app, running on Android 12 or 13 by exploiting CVE-2024-0044 vulnerability

Exfiltrate #WhatsApp chat, or internal data of any Android app, running on Android 12 or 13 by exploiting CVE-2024-0044 vulnerability

Mobile Hacker

143,647 次观看 • 2 年前

How hackers can exploit Wi-Fi Captive Portals to distribute Android malware all from a smartphone using Wifi-Pumpkin on NetHunter

How hackers can exploit Wi-Fi Captive Portals to distribute Android malware all from a smartphone using Wifi-Pumpkin on NetHunter

Mobile Hacker

36,025 次观看 • 1 年前

Android 17 root Full chain browser-to-kernel exploit with two 0-day vulnerabilities affecting Firefox before v151.0.2 (CVE-2026-10702) Click on the link -> root Android Discovered by Nebula Security PoC not available. Info:

Android 17 root Full chain browser-to-kernel exploit with two 0-day vulnerabilities affecting Firefox before v151.0.2 (CVE-2026-10702) Click on the link -> root Android Discovered by Nebula Security PoC not available. Info:

Mobile Hacker

51,168 次观看 • 18 天前

Raspberry Pi 24/7 Network Monitoring #Sponsored #Linux #raspberrypi #pi #raspberry #wifi #iphone #android #network #router #switch Fing

Raspberry Pi 24/7 Network Monitoring #Sponsored #Linux #raspberrypi #pi #raspberry #wifi #iphone #android #network #router #switch Fing

David Bombal

58,732 次观看 • 1 年前

CVE-2023-23397 Simple and dirty PoC of the CVE-2023-23397 vulnerability impacting the Outlook thick client. #CVE #cybersecurity #infosec

CVE-2023-23397 Simple and dirty PoC of the CVE-2023-23397 vulnerability impacting the Outlook thick client. #CVE #cybersecurity #infosec

HackGit

76,809 次观看 • 3 年前

How about compatible with PC, MiSTer, Android, Raspberry Pi, Nintendo Switch, PS3 and PS4 (legacy controller support).

How about compatible with PC, MiSTer, Android, Raspberry Pi, Nintendo Switch, PS3 and PS4 (legacy controller support).

Robert Dale Smith

134,628 次观看 • 3 年前

How to spoof #iOS devices with Bluetooth pairing messages using Android #DoS

How to spoof #iOS devices with Bluetooth pairing messages using Android #DoS

Mobile Hacker

433,907 次观看 • 2 年前

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)

NullSecurityX

94,139 次观看 • 3 个月前

CVE-2023-23397 Exploiting CVE-2023-23397: Microsoft Outlook Elevation of Privilege Vulnerability. Details: #infosec #CyberSecurity #Pentesting #redteam

CVE-2023-23397 Exploiting CVE-2023-23397: Microsoft Outlook Elevation of Privilege Vulnerability. Details: #infosec #CyberSecurity #Pentesting #redteam

HackGit

39,726 次观看 • 3 年前

I made an app this past weekend using a $30 android smartphone to send me notifications when my dryer was done drying. They sell these phones at a loss thinking you’re gonna buy a data plan, don’t do that. Instead use for DIY projects in place of a raspberry pi or esp32.

I made an app this past weekend using a $30 android smartphone to send me notifications when my dryer was done drying. They sell these phones at a loss thinking you’re gonna buy a data plan, don’t do that. Instead use for DIY projects in place of a raspberry pi or esp32.

Marshall Richards

867,733 次观看 • 1 年前

Bluetooth LE spam attack is now ported to dedicated Android app to push notifications for Android and Windows For Android, is can advertise over 170 devices

Bluetooth LE spam attack is now ported to dedicated Android app to push notifications for Android and Windows For Android, is can advertise over 170 devices

Mobile Hacker

169,796 次观看 • 2 年前

Exploiting the #EvilVideo vulnerability on Telegram We discovered a 0-day Telegram for Android exploit that allows sending malicious apps disguised as videos ESET Research ESET

Exploiting the #EvilVideo vulnerability on Telegram We discovered a 0-day Telegram for Android exploit that allows sending malicious apps disguised as videos ESET Research ESET

Lukas Stefanko

55,818 次观看 • 2 年前

❗️Chronomaly: Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable Linux kernels v5.10.x. GitHub:

❗️Chronomaly: Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable Linux kernels v5.10.x. GitHub:

Dark Web Informer

12,642 次观看 • 6 个月前

NHLaucher: a customizable component of NetHunter that provides feeling of desktop Kali running on Android with over 250 tools NHLauncher is an open-source app that makes it easier and faster to launch pentesting tools. It uses #NetHunter bridge for launching tools in terminal. All the commands are editable #KaliLinux

NHLaucher: a customizable component of NetHunter that provides feeling of desktop Kali running on Android with over 250 tools NHLauncher is an open-source app that makes it easier and faster to launch pentesting tools. It uses #NetHunter bridge for launching tools in terminal. All the commands are editable #KaliLinux

Mobile Hacker

89,669 次观看 • 2 年前

Yesterday’s #ZeroDayRAT demo showed a 1‑click Android 15 exploit Real or fake? I don't know. If it is real, cleanup could be a problem.

Yesterday’s #ZeroDayRAT demo showed a 1‑click Android 15 exploit Real or fake? I don't know. If it is real, cleanup could be a problem.

Mobile Hacker

12,000 次观看 • 5 个月前

Demo of recent NFC Android malware called #NGate

Demo of recent NFC Android malware called #NGate

Mobile Hacker

55,382 次观看 • 1 年前

🚨CVE-2025-31161: Authentication Bypass Vulnerability in CrushFTP Credit: Exploit:

🚨CVE-2025-31161: Authentication Bypass Vulnerability in CrushFTP Credit: Exploit:

Dark Web Informer

36,563 次观看 • 1 年前

[New Blog] BLE Spam allows now to send unwanted notifications to iOS, Android and Windows at once using Flipper Zero If you don't have Flipper Zero, in the blog I explained how to trigger popups using any Android smartphone even with custom messages

[New Blog] BLE Spam allows now to send unwanted notifications to iOS, Android and Windows at once using Flipper Zero If you don't have Flipper Zero, in the blog I explained how to trigger popups using any Android smartphone even with custom messages

Mobile Hacker

135,755 次观看 • 2 年前