Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/niziak/go-bluetooth
Golang bluetooth client based on bluez DBus interfaces
See here for reference https://git.kernel.org/cgit/bluetooth/bluez.git/tree/doc
The current API is unstable and may change in the future.
The features implemented are
rfkill
bluetooth.service
unithciconfig
basic APICheck examples/
folder for an overview of the API
The library has been tested with
1.9
(minimum v1.6
)v5.48
(minimum supported v5.43
)Bluez, the linux bluetooth implementation, has introduced GATT support from v5.43
Ensure you are using an up to date version with bluetoothd -v
See in scripts/
how to upgrade bluez
Give access to hciconfig
to any user (may have security implications)
sudo setcap 'cap_net_raw,cap_net_admin+eip' `which hciconfig`
Create a dbus profile
ln -s `pwd`/scripts/dbus-dev.conf /etc/dbus1/system.d/go-bluetooth.config
Monitor activity
sudo dbus-monitor --system "type=error"
View bluetoothd
debug messages
sudo bluetoothd -Edn P hostname
Enable LE advertisement (to use a single pc, you will need 2 bluetooth adapter)
sudo btmgmt -i 0 power off
sudo btmgmt -i 0 name "my go app"
sudo btmgmt -i 0 le on
sudo btmgmt -i 0 connectable on
sudo btmgmt -i 0 advertising on
sudo btmgmt -i 0 power on
github.com/[currentlabs|go-ble]/ble
MIT License
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.