Pwnie Express open sources IoT and Bluetooth security tools

Pwnie Express announced the availability of open sourced versions of its Blue Hydra and Android build system software. The release of these tools enable comprehensive Bluetooth detection and community based development of penetration testing Android devices.

Bluetooth detection is critical for effective device threat detection and must cover both Low energy (LE) and Classic Bluetooth standards. Blue Hydra has also been integrated into Pwnie’s monitoring platform, Pulse, to provide continuous Bluetooth visibility and threat detection for security teams.

The Android Open Pwn Project (AOPP) is the first Android ROM built for the purpose of penetration testing. This fully open sourced project gives users the ability to build their own mobile penetration testing platforms, based on the industry-leading Pwn Phone and Pwn Pad platforms, on almost any Android-based device from Kindles to mobile phones.

Blue Hydra

• Continuous assessment and threat characterization of Bluetooth devices through the Pulse Platform
• Enrichment of device personas in wired, wireless asset correlations (Pulse Platform)
• Airodump-ng like display for nearby Bluetooth and Bluetooth low energy devices
• Discover and track Bluetooth and Bluetooth Low Energy devices in the area, regardless of discoverability mode.

AOPP

• Based on the Android Open Source Project (AOSP) and various community-developed ROMS, including CyanogenMod and others
• Functionality and installation are easier for newer InfoSec users
• Community developers can contribute to the project and port the platform to new devices

“Pwnie Express’ roots are in the open source community,” said Rick Farina, Pwnie Express Director of R&D, and co-inventor of Blue Hydra. “Developing and releasing open source tools reinforces our commitment to give back to the security community and make it easier for security teams to address the growing device threat landscape. These tools will help security professionals with Bluetooth detection which is key to effective mobile device detection in our increasingly connected and IoT world.”