Quick Start¶

A 60-second tour: scan → pick a module → run it.

1. Launch the console¶

sudo python3 bluesploit.py

You'll see the banner and a bluesploit > prompt.

2. Discover nearby devices¶

bluesploit > use recon/discovery
bluesploit(recon/discovery) > set DURATION 10
bluesploit(recon/discovery) > run

Output lists MAC, name, RSSI, and class-of-device for every responder.

3. Fingerprint a target¶

bluesploit > use recon/version_fingerprint
bluesploit(recon/version_fingerprint) > set TARGET AA:BB:CC:DD:EE:FF
bluesploit(recon/version_fingerprint) > run

This identifies BT version, manufacturer, and likely chipset, useful for matching to known CVEs.

4. Scan for known vulns¶

bluesploit > use scanners/vuln_scanner
bluesploit(scanners/vuln_scanner) > set TARGET AA:BB:CC:DD:EE:FF
bluesploit(scanners/vuln_scanner) > run

The scanner cross-references discovered properties against signatures in data/signatures/.

5. Run an exploit¶

bluesploit > use exploits/knob
bluesploit(exploits/knob) > show options
bluesploit(exploits/knob) > set TARGET AA:BB:CC:DD:EE:FF
bluesploit(exploits/knob) > check     # safe pre-flight
bluesploit(exploits/knob) > run

Use back to leave the module, exit to quit the console.

6. Reuse state across modules¶

Recon, scanners, and post-exploitation modules all write to a small persistent store at ~/.bluesploit/store.db. List what you have at any time:

bluesploit > hosts
bluesploit > creds

The ID column from hosts works as a shortcut on every other module:

bluesploit > use exploits/knob
bluesploit(exploits/knob) > set target 3      # resolves to the stored BD_ADDR
bluesploit(exploits/knob) > run

When a stored host already has credentials (link key, LTK, etc.), set target also pre-fills the matching option on the loaded module.

Run multiple engagements from the same machine without their data mixing:

bluesploit > workspace use clientA
... do work for clientA ...
bluesploit > workspace use clientB
... do work for clientB, clientA data is untouched ...

See Engagement State for the full picture.

CLI mode (no REPL)¶

python3 bluesploit.py --list                # list every module

Next: Console Commands for the full REPL reference, Engagement State for the persistent store, or Module Categories to browse what's available.