https://github.com/grdashark/bleshark
An ESP-32 based multi-tool for pentesting.
https://github.com/grdashark/bleshark
badbt badusb bluetooth bluetooth-low-energy captive-portal esp32 handshake multi-tool pentesting portal wi-fi
Last synced: 9 months ago
JSON representation
An ESP-32 based multi-tool for pentesting.
- Host: GitHub
- URL: https://github.com/grdashark/bleshark
- Owner: grdashark
- License: other
- Created: 2024-05-17T15:30:42.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2025-03-14T18:57:35.000Z (9 months ago)
- Last Synced: 2025-03-31T08:12:02.658Z (9 months ago)
- Topics: badbt, badusb, bluetooth, bluetooth-low-energy, captive-portal, esp32, handshake, multi-tool, pentesting, portal, wi-fi
- Homepage: https://infishark.com
- Size: 9.61 MB
- Stars: 103
- Watchers: 3
- Forks: 7
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
BLEShark Nano Firmware 📶
The official BLEShark Nano firmware!
## Updating 🛠️
⚙️ To update your BLEShark Nano, follow these steps:
- Open the settings menu on your BLEShark
- Select "Update"
- Everything will be completed for you!
*If you are not near your Wi-Fi network, the update will not work.*
## Features 🚀
💻 Pentesting
-
Bluetooth Low Energy (BLE) Spamming: Floods devices with spoofed BLE advertisements. - Android spam,
- Windows spam,
- iOS spam,
- Samsung spam,
- and Spam All.
-
Wi-Fi Network Spamming: Spams hundreds of Wi-Fi networks with beacon packets, including: - Rickrolls
- Random networks
- Funny networks
- Duplicate networks
-
Targeted Wi-Fi Network Spamming: Spams hundreds of the same Wi-Fi networks with beacon packets. -
Wi-Fi Deauth Attack: Deauthenticates (kicks out) devices off a 2.4Ghz Wi-Fi network. -
Wi-Fi Deauth Checker: Check for deauth attacks. -
Wi-Fi Captive Portals: Create any captive portal of any HTML code. By default, it is a fake Gogl. login. This takes user-submitted passwords and saves them onto the device. -
Bad-BT: Inject custom scripts to devices with Bluetooth. The BLEShark Nano comes pre-loaded with many scripts: pranks, mobile, general, and dangerous scripts. Of course, use this only on your own hardware!! We can not stress this enough.
🚨 Infrared
-
Receiver: Receive any Infrared signal, and save it onto the BLEShark Nano. -
Transmitter: Transmit individual commands saved on the BLEShark Nano. -
TV-B-Gone: Turn on/off any TV! -
Remote: Think of it as the "shortcut" version of the transmitter app.
📝 Apps
-
Keypad: A mini keypad. Assign up to 8 different commands! -
TxtViewer: View and scroll through custom text files for notes, presentations, and documentation. Supports smooth scrolling, word wrapping, and a built-in scroll bar for easy navigation. -
TikTok Scroller: Connects to your phone and will execute various functions for TikTok depending on what button you press. -
Stopwatch: A simple stopwatch. Press [L] to reset, [S] to pause/unpause. -
Timers: A simple timer.
🎮 Games
-
Flappy Bird: Fly through the pipes! -
Space Invaders: Shoot down your enemies! -
Pong w/AI: Try to defeat the pong AI! (unlimited ATM) -
Breakout: Try to destroy all the blocks! -
T-Rex: It's the classic "no internet" game! -
Racer: Race around through traffic!
⚙️ Settings
-
Brightness: Customize your BLEShark's brightness -
Manual Update: Manually update your device through the air. -
Extra Settings Mode: Features include: -
Change Wi-Fi Network: Change the Wi-Fi network needed for OTA updates -
Enable/Disable Emergency Mode: Hold L+R together for 500 ms to open flappy bird anywhere in the device, just in case. -
BLESpam Delay: Change the delay per packet in BLESpam. -
Max Targeted Networks: Change how much targeted networks you want to create (the more, the slower they create). -
Deauth Delay: Change the delay per packet in the deauth attack. -
Captive Portal SSID Name: Change the Captive Portal SSID Name. -
Get Captive Portal Creds: Get the saved credentials you recieved with Captive Portal. -
Clear Captive Portal Creds: Clear the saved credentials you recieved with Captive Portal. -
Check and Update: Check for updates, and update with BLEShark. -
Enable/Disable Automatic Updates: Enable or disable auto updates. Will decrease boot time by a tiny bit. -
Change BadBT Name: Change the BadBT device name. -
BadBT File: Upload your duckyscript file here. -
TxtViewer File: Upload your .txt file here. -
Captive Portal HTML File: Upload your .html file here. -
Keypad Settings: Edit your keypad commands here. -
Amazing UI: An amazing, modern UI with transitions and an extra dark mode on the settings page.
😎 Other Features
-
Emergency Mode: Hold L+R together for 500 ms to open flappy bird anywhere in the device, just in case. -
Automatic Updates: Auto OTA updates. -
SPIFFS System: Saves and stores almost every little configuration on the device to SPIFFS. -
Screensaver: A small but cool feature; a DVD-Style screensaver.
## Upcoming Features 🎉
-
Handshake Capture: Save handshakes onto a PCAP file to crack Wi-Fi passwords. -
PC Monitor: Connect via BLE to monitor your CPU, GPU, Memory and more—perfect for keeping an eye on your hardware while gaming or working. -
BadUSB: Add BadUSB on top of of Bad-BT. -
Captive Portal Credential Detector: When you connect your BLEShark Nano to a hotspot or a Wi-Fi network, The Captive Portal will check if the creds are valid as the user is typing it in. We will provide different services (FB, Google, X, ect). -
Extreme Emergency Mode: Sets gaming menu as default menu. To unlock the real menu, open a game and press a combo of buttons (or pin). This is if people ask "what is this device?" you are able to say "a mini gaming device". -
Custom Apps: Create custom applications for BLEShark Nano. -
Customize Infrared Remote/Command Names: Customize the IR remote/command names through the extra settings mode. -
Fix BLESpam Functionality: Make the BLESpam functionality work better (a new bug) -
Battery Monitor: Monitor the BLEShark Nano's battery level.
WARNING‼️
Warning: This device is intended solely for security purposes. It is designed to help identify and fix vulnerabilities in BLE and Wi-Fi networks. Unauthorized use for hacking or any other malicious activity is illegal and strictly prohibited. We, InfiShark Tech, are not responsible for any misuse of this device.