Skip to content

BlueTruth v0.2.0 — GATT Discovery & Codec Support

Latest
Latest

Choose a tag to compare

View all tags
@RALaBarge RALaBarge released this 12 Apr 17:15
· 10 commits to main since this release
v0.2.0
4fb36db

bluTruth v0.2.0 Release Notes

Release Date: April 12, 2026
License: Apache 2.0

What's New

bluTruth v0.2.0 adds GATT service discovery, enhanced device fingerprinting, and a complete test suite. This release elevates bluTruth from a Bluetooth event collector to a full diagnostic and security assessment tool for Bluetooth environments.

Key Features

  • GATT service discovery -- Enumerate services, characteristics, and descriptors on connected BLE devices. Map unknown UUIDs to known service profiles.
  • Enhanced device fingerprinting -- Improved OUI-based vendor identification, device class parsing, and Bluetooth version detection.
  • Pattern rule engine -- Define custom detection rules for suspicious Bluetooth behavior (rapid connect/disconnect cycles, RSSI anomalies, encryption downgrades).
  • Correlation engine -- Link related events across time windows. Identify coordinated attacks or device behavior patterns.
  • Event simulation -- Inject mock HCI/D-Bus events for testing. Simulate device lifecycles (connect, pair, encrypt, disconnect) without physical hardware.
  • SQLite event store -- Persistent storage with indexed queries by device address, event source, severity, and time range.
  • REST API -- Query events, devices, correlations, and rule status via HTTP. Integrates with beigebox's tool registry for agent-driven Bluetooth diagnostics.

Breaking Changes

  • Database schema updated. Run blutruth migrate before starting v0.2.0 on an existing database.
  • REST API port changed from 8485 to 8484. Update your client configurations.

Installation / Upgrade

# Fresh install
pip install blutruth

# Upgrade
pip install --upgrade blutruth

# Start the collector
sudo blutruth serve

# Run diagnostics (via beigebox agent)
beigebox operator "scan bluetooth devices and check for security issues"

Acknowledgments

Built by jinx. Bluetooth security research informed by Bluetooth SIG specifications, NIST SP 800-121 (Guide to Bluetooth Security), and real-world IoT pen testing.

Links

Assets 4
Loading