Skip to content

v2.1.1 with DoS test suite and improved reporting

Choose a tag to compare

@Indspl0it Indspl0it released this 31 Mar 13:17
· 160 commits to main since this release

[2.1.1] - 2026-03-31

Added

  • 10 protocol-level DoS attacks targeting L2CAP, SDP, RFCOMM, OBEX, and HFP
  • Link key harvest and persistent access (keys command group)
  • SSP downgrade attack (ssp-downgrade command group)
  • KNOB attack execution (knob command group, CVE-2019-9506)
  • Fleet-wide assessment (fleet command group)
  • Full 9-phase automated pentest (auto command): discovery, fingerprinting, recon, vuln assessment, pairing attacks, exploitation, coverage-guided fuzzing (1hr default), DoS testing, report generation
  • Comprehensive CLI logging across all 100+ commands: every operation now logs start, progress, result, and errors with context
  • Changelog file (docs/CHANGELOG.md)

Changed

  • Report overhaul: modern UI with Inter/JetBrains Mono fonts, Tailwind-inspired color palette, rounded cards, soft severity badges, pentest narrative text in every section, support for v2.1.1 findings (key harvest, SSP downgrade, KNOB, fleet, protocol DoS)
  • Auto command rewritten from 4-phase (discover, vulnscan, hijack, report) to 9-phase pentest methodology with coverage-guided fuzzing and DoS testing. New options: --fuzz-duration, --skip-fuzz, --skip-dos, --skip-exploit

Fixed

  • L2CAP DoS attacks use valid socket operations (not raw signaling)
  • DoS result dict key mismatch with CLI
  • KNOB probe missing internalblue_available field
  • Fleet assess crash on invalid MAC address
  • Report collector namespaces new attack types (key_harvest, ssp_downgrade, knob_attack)
  • DoS grouping keywords cover all protocol-level attacks