DEF CON 20 - Ryan Holeman - Passive Bluetooth Monitoring in Scapy

542 views · Published 30 October 2013 · 25:01 · Indexed 22 September 2026

Channel: DEFCONConference · 2013 · Science & Technology

Watch on YouTube

Copy of the slides for this talk are here:https://media.defcon.org/dc-20/presentations/Holeman/DEFCON-20-Holeman-Scapy.pdf 
Extras: https://media.defcon.org/dc-20/presentations/Holeman/Extras.zip

Passive Bluetooth Monitoring in Scapy
Ryan Holeman

Recognizing a need to support passive bluetooth monitoring in Scapy, Python's interactive monitoring framework, a project was launched to produce this functionality. Through this functionality, a new means for interactively observing bluetooth was created along with Python APIs to assist in the development of bluetooth auditing, pentesting and exploitation tools.

The project supplements the work of Michael Ossman et al by providing Python extensions and Scapy modules which interact with an Ubertooth dongle. The project also provides support for other passive bluetooth techniques not present in the current Ubertooth core software such as NAP identification, vendor lookup, extended logging and more.

In conjunction with this presentation, the source for this project will be released along with distribution packages for easy installation.


Ryan Holeman resides in Austin Texas where he works as a software developer specializing in backend services. He has a Masters of Science in Software Engineering and has published papers though ICSM and ICPC. His spare time is mostly spent digging into various network protocols and shredding local skateparks.

More from this channel