> Bluetooth Spoofing Toolkit: Ethical BLE Lab

> 🧿 BLE Basics (Quick Primer)

Bluetooth Low Energy (BLE) uses advertising channels to announce devices and GATT services for data exchange. Spoofing attempts aim to impersonate identities or services. In this lab, you’ll simulate your own identifiers to understand how to defend against impersonation.

> 🛠️ Lab Gear

• ESP32 dev board (WROOM‑32 / S3)
• USB cable, workstation (macOS/Windows/Linux)
• Phone with nRF Connect (Android/iOS) for discovery/testing

> ⚙️ Software Setup (Arduino)

• Install Arduino IDE.
• Add Board Manager URL:
  https://raw.githubusercontent.com/espressif/arduino-esp32/gh-pages/package_esp32_index.json
• Install the ESP32 platform in Boards Manager.
• Libraries: ESP32 BLE Arduino (or NimBLE‑Arduino for lighter footprint).

> 🧪 Ethical Beacon Simulation (Your Device Only)

Advertise a custom beacon name that you own for lab testing. Do not use names or IDs belonging to others.

#include <BLEDevice.h>
#include <BLEUtils.h>
#include <BLEServer.h>

void setup(){
  Serial.begin(115200);
  BLEDevice::init("CH_Lab_Beacon"); // Your lab name only
  BLEServer *server = BLEDevice::createServer();
  BLEAdvertising *adv = BLEDevice::getAdvertising();
  // Optional: advertise a custom service UUID that you control
  // BLEUUID svc("12345678-1234-1234-1234-1234567890ab");
  // adv->addServiceUUID(svc);
  adv->start();
  Serial.println("Advertising your lab beacon…");
}
void loop(){ delay(2000); }

Why this is safe: You’re broadcasting a unique lab identifier that doesn’t impersonate anyone. Use nRF Connect to confirm you only see your own beacon and expected fields.

> 🔎 Discover Your Devices

Use your ESP32 or phone app to discover your own devices and verify what metadata is exposed. Avoid scanning or storing third‑party data.

#include <BLEDevice.h>

void setup(){
  Serial.begin(115200);
  BLEDevice::init("");
  BLEScan *scan = BLEDevice::getScan();
  scan->setActiveScan(true);
  scan->start(10, false); // Scan window for your lab
  Serial.println("Scanning in lab…");
}
void loop(){ /* review Serial output */ }

Tip: In nRF Connect, filter to your lab service UUIDs or names. Document what’s visible so you can minimize exposure on real devices.

> ❓ FAQ