crackle

crack Bluetooth Low Energy encryption

TLDR

Crack BLE encryption from pcap file
$ crackle -i [capture.pcap]
Crack with specific LTK
$ crackle -i [capture.pcap] -l [ltk_hex]
Output decrypted traffic
$ crackle -i [capture.pcap] -o [decrypted.pcap]

SYNOPSIS

crackle [options] -i input.pcap

DESCRIPTION

crackle cracks Bluetooth Low Energy (BLE) encryption. It exploits weaknesses in the BLE pairing process to recover encryption keys and decrypt captured traffic.Requires captured BLE packets including the pairing exchange. Works with BLE Legacy Pairing.

PARAMETERS

-i file

Input pcap file with BLE traffic.
-o file
Output file for decrypted traffic.
-l ltk
Long Term Key in hexadecimal.

INSTALL

nix profile install nixpkgs#crackle

CAVEATS

Only effective against BLE Legacy Pairing (Bluetooth 4.0/4.1). LE Secure Connections (4.2+) are not vulnerable. Use only for authorized security testing.

SEE ALSO

wireshark(1)