Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/masasron/chameleondump
Dump RFID tag IDs from ChameleonUltra devices
https://github.com/masasron/chameleondump
ble chameleonultra exploit
Last synced: 2 months ago
JSON representation
Dump RFID tag IDs from ChameleonUltra devices
- Host: GitHub
- URL: https://github.com/masasron/chameleondump
- Owner: masasron
- License: gpl-3.0
- Created: 2023-09-18T05:50:56.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2023-09-19T08:26:58.000Z (over 1 year ago)
- Last Synced: 2024-11-13T21:12:01.469Z (3 months ago)
- Topics: ble, chameleonultra, exploit
- Language: Python
- Homepage:
- Size: 112 KB
- Stars: 2
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
![](./illustration.png)
# ChameleonDump
## Overview
ChameleonDump is a user-friendly command-line tool for macOS.
Its primary function is to show the security vulnerability that
arises from using hardcoded, default BLE (Bluetooth Low Energy) PIN codes.The tool attempts to connect to ChameleonUltra devices using their
default BLE PIN code. Once connected, ChameleonDump extracts all stored RFID tag IDs from the device.
As of now, the tool supports only the ChameleonUltra device.**⚠️ Note: This tool is designed for educational purposes only. Please use it
responsibly and only on devices you own or have explicit permission to test.**## What Can You Do?
### For Developers
Multiple solutions exist for mitigating this security risk. The most
straightforward approach would be to require users to change the default PIN
when they first set up the device.### For Users
Change the default PIN code of your ChameleonUltra device.
## Installation
### Prerequisites
- macOS (The tool is not supported on other operating systems)
- Python 3.6 or higher
- pip package manager### Installing from PyPI
```bash
pip install chameleondump
```## Usage
```bash
usage: chameleondump [-h] [--device {ChameleonUltra}] [--pin PIN] [--mask MASK]ChameleonDump
optional arguments:
-h, --help show this help message and exit
--device {ChameleonUltra}
The target device
--pin PIN The PIN to use for pairing, leave empty to use the default PIN
--mask MASK Mask the RFID tag IDs
```### Building & Installing from Source
1. Clone the repository:
```bash
git clone https://github.com/masasron/chameleondump
```2. Navigate to the project directory:
```bash
cd chameleondump
```3. Build & Install
```bash
python3 setup.py sdist bdist_wheel
pip3 install dist/chameleondump-0.1.5-py3-none-any.whl
```
**Note:** The name of the wheel file may vary depending on the version of the
tool.### Supported Devices
- ChameleonUltra