-
Notifications
You must be signed in to change notification settings - Fork 30
/
install.sh
executable file
·196 lines (127 loc) · 7.95 KB
/
install.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
#!/bin/bash
sudo apt-get install -y python3 python3-dev python3-pip build-essential python3.11-venv python3-venv
sudo apt-get install -y bluez bluetooth libbluetooth-dev
sudo apt-get install -y pulseaudio-module-bluetooth
sudo apt-get install -y zstd unzip
sudo apt install -y python3-pip python3-dev libcairo2-dev libgirepository1.0-dev \
libbluetooth-dev libdbus-1-dev bluez-tools python3-cairo-dev \
rfkill meson patchelf bluez ubertooth adb python-is-python3
sudo apt-get install -y git
sudo apt-get install -y libncursesw5-dev libssl-dev libsqlite3-dev tk-dev libgdbm-dev libc6-dev libbz2-dev
sudo apt install -y build-essential zlib1g-dev libncurses5-dev libgdbm-dev libnss3-dev libssl-dev libreadline-dev libffi-dev wget
sudo apt-get install binutils-arm-linux-gnueabi
# Setting up bluetooth assistant
sudo apt install -y openjdk-17-jdk openjdk-17-jre
sudo apt-get install -y android-sdk-platform-tools
# Configure Bluetooth adapter
sudo killall pulseaudio
sudo -u vagrant pulseaudio --start
sudo systemctl restart bluetooth
# Creating a base directory and assigning to a current user
mkdir /usr/share/BlueToolkit
sudo chown $USER:$USER /usr/share/BlueToolkit
# cloning bluekit
git clone https://github.com/sgxgsx/bluekit.git /usr/share/BlueToolkit/bluekit
mkdir /usr/share/BlueToolkit/bluekit/.logs
mkdir /usr/share/BlueToolkit/modules
mkdir /usr/share/BlueToolkit/modules/tools -p
python3 -m venv /usr/share/BlueToolkit/.venv
source /usr/share/BlueToolkit/.venv/bin/activate
#python3 -m pip install -r requirements.txt
python3 -m pip install pwntools cmd2 pure-python-adb pyelftools==0.29 2to3 scapy psutil tqdm pyyaml #--break-system-packages
python3 -m pip install tabulate colorama
# Install pybluez
python3 -m pip install git+https://github.com/pybluez/pybluez.git#egg=pybluez #--break-system-packages
# installing bluekit
cd /usr/share/BlueToolkit/bluekit/
pip install .
cd /usr/share/BlueToolkit/modules
## Installing tools in modules
#### BluetoothAssistant
##### Needs access to the phone, it should be plugged in!!
git clone https://github.com/sgxgsx/BluetoothAssistant /usr/share/BlueToolkit/modules/BluetoothAssistant
cd BluetoothAssistant
chmod +x /usr/share/BlueToolkit/modules/install.sh
/usr/share/BlueToolkit/modules/BluetoothAssitant/install.sh
cd ..
#### Bdaddr
git clone https://github.com/thxomas/bdaddr /usr/share/BlueToolkit/modules/bdaddr
cd /usr/share/BlueToolkit/modules/bdaddr
make
cd ..
cd /usr/share/BlueToolkit/modules/tools
## Installing tools in modules/tools
#### Installing braktooth
wget https://github.com/Matheus-Garbelini/braktooth_esp32_bluetooth_classic_attacks/releases/download/v1.0.1/release.zip
mv release.zip braktooth.zip
mkdir /usr/share/BlueToolkit/modules/tools/braktooth
cd /usr/share/BlueToolkit/modules/tools/braktooth
unzip ../braktooth.zip
rm -f ../braktooth.zip
unzip esp32driver.zip
cd ..
#### Cannot install it as there might be no Braktooth connected to the machine
#### Installing bluing
mkdir /usr/share/BlueToolkit/modules/tools/bluing
cd /usr/share/BlueToolkit/modules/tools/bluing
wget https://www.python.org/ftp/python/3.10.0/Python-3.10.0.tgz
tar -xvf Python-3.10.0.tgz
cd Python-3.10.0
./configure --enable-optimizations
make -j 4
sudo make altinstall
cd ..
#wget https://salsa.debian.org/debian/dbus-python/-/archive/upstream/1.3.2/dbus-python-upstream-1.3.2.tar.gz
#tar -xvzf dbus-python-upstream-1.3.2.tar.gz
#cd dbus-python-upstream-1.3.2
#./configure
#make
#sudo make install
#sudo python3.10 setup.py install
#sudo cp -r dbus/ /usr/local/lib/python3.10/site-packages/
#cd ..
mkdir bluing
cd bluing
sudo python3.10 -m pip install --upgrade pip
sudo python3.10 -m pip install venv # would fail, but might be needed
sudo python3.10 -m venv bluing
source bluing/bin/activate
sudo python3.10 -m pip install dbus-python==1.2.18
sudo python3.10 -m pip install --no-dependencies bluing PyGObject docopt btsm btatt bluepy configobj btl2cap pkginfo xpycommon halo pyserial bthci btgatt log_symbols colorama spinners six termcolor
cd ../..
source /usr/share/BlueToolkit/.venv/bin/activate
#### Installing BLUR
cd /usr/share/BlueToolkit/modules/tools
git clone https://github.com/francozappa/blur
#### Installing blueborne, bleedingteeth, custom_exploits
git clone https://github.com/sgxgsx/bluetoothexploits /usr/share/BlueToolkit/modules/tools/blueexploits
cp -R /usr/share/BlueToolkit/modules/tools/blueexploits/custom_exploits /usr/share/BlueToolkit/modules/tools/custom_exploits
cp -R /usr/share/BlueToolkit/modules/tools/blueexploits/bleedingtooth /usr/share/BlueToolkit/modules/tools/bleedingtooth
cp -R /usr/share/BlueToolkit/modules/tools/blueexploits/blueborne /usr/share/BlueToolkit/modules/tools/blueborne
cp -R /usr/share/BlueToolkit/modules/tools/blueexploits/hi_my_name_is_keyboard /usr/share/BlueToolkit/modules/tools/hi_my_name_is_keyboard
rm -rf /usr/share/BlueToolkit/modules/tools/blueexploits
gcc -o /usr/share/BlueToolkit/modules/tools/bleedingtooth/poc_badchoice_cve_2020_12352 /usr/share/BlueToolkit/modules/tools/bleedingtooth/poc_badchoice_cve_2020_12352.c -lbluetooth
gcc -o /usr/share/BlueToolkit/modules/tools/bleedingtooth/poc_badkarma_cve_2020_12351 /usr/share/BlueToolkit/modules/tools/bleedingtooth/poc_badkarma_cve_2020_12351.c -lbluetooth
gcc -o /usr/share/BlueToolkit/modules/tools/bleedingtooth/poc_badvibes_cve_2020_24490 /usr/share/BlueToolkit/modules/tools/bleedingtooth/poc_badvibes_cve_2020_24490.c -lbluetooth
gcc -o /usr/share/BlueToolkit/modules/tools/bleedingtooth/exploit /usr/share/BlueToolkit/modules/tools/bleedingtooth/exploit.c -lbluetooth
cd /usr/share/BlueToolkit/modules/tools/
#### internalblue
git clone https://github.com/seemoo-lab/internalblue /usr/share/BlueToolkit/modules/tools/internalblue
cp /usr/share/BlueToolkit/modules/tools/internalblue/examples/nexus5/CVE_2018_19860_Crash_on_Connect.py /usr/share/BlueToolkit/modules/tools/internalblue/examples/nexus5/CVE_2018_19860_Crash_on_Connect_0a_00.py
cp /usr/share/BlueToolkit/modules/tools/internalblue/examples/nexus5/CVE_2018_19860_Crash_on_Connect.py /usr/share/BlueToolkit/modules/tools/internalblue/examples/nexus5/CVE_2018_19860_Crash_on_Connect_16_0b.py
cp /usr/share/BlueToolkit/modules/tools/internalblue/examples/nexus5/CVE_2018_19860_Crash_on_Connect.py /usr/share/BlueToolkit/modules/tools/internalblue/examples/nexus5/CVE_2018_19860_Crash_on_Connect_20_17.py
rm -f /usr/share/BlueToolkit/modules/tools/internalblue/examples/nexus5/CVE_2018_19860_Crash_on_Connect.py
sed -i 's/LMP_VSC_CMD_START = 0x0f/LMP_VSC_CMD_START = 0x0a/' /usr/share/BlueToolkit/modules/tools/internalblue/examples/nexus5/CVE_2018_19860_Crash_on_Connect_0a_00.py
sed -i 's/LMP_VSC_CMD_END = 0x06/LMP_VSC_CMD_END = 0x00/' /usr/share/BlueToolkit/modules/tools/internalblue/examples/nexus5/CVE_2018_19860_Crash_on_Connect_0a_00.py
sed -i 's/LMP_VSC_CMD_START = 0x0f/LMP_VSC_CMD_START = 0x16/' /usr/share/BlueToolkit/modules/tools/internalblue/examples/nexus5/CVE_2018_19860_Crash_on_Connect_16_0b.py
sed -i 's/LMP_VSC_CMD_END = 0x06/LMP_VSC_CMD_END = 0x0b/' /usr/share/BlueToolkit/modules/tools/internalblue/examples/nexus5/CVE_2018_19860_Crash_on_Connect_16_0b.py
sed -i 's/LMP_VSC_CMD_START = 0x0f/LMP_VSC_CMD_START = 0x20/' /usr/share/BlueToolkit/modules/tools/internalblue/examples/nexus5/CVE_2018_19860_Crash_on_Connect_20_17.py
sed -i 's/LMP_VSC_CMD_END = 0x06/LMP_VSC_CMD_END = 0x17/' /usr/share/BlueToolkit/modules/tools/internalblue/examples/nexus5/CVE_2018_19860_Crash_on_Connect_20_17.py
cd /usr/share/BlueToolkit/modules/tools/blueborne
git clone https://github.com/sgxgsx/blueborne-CVE-2017-1000251 /usr/share/BlueToolkit/modules/tools/blueborne/blueborne-CVE-2017-1000251
cd /usr/share/BlueToolkit/modules/tools/blueborne/blueborne-CVE-2017-1000251
gcc -o blueborne_cve_2017_1000251 blueborne.c -lbluetooth
#### installing Internalblue
python3 -m pip install https://github.com/seemoo-lab/internalblue/archive/master.zip # --break-system-packages
export PYTHONPATH=$PYTHONPATH:$(pwd)/tools/blueborne
sudo chown -R $USER:$USER /usr/share/BlueToolkit