Open-source alternatives to Scat

Bettercap is a modular framework designed for network reconnaissance, security testing, and the execution of man-in-the-middle attacks. It functions as a comprehensive utility for surveying wired and wireless network segments, identifying connected devices, and analyzing communication protocols through real-time traffic interception and manipulation. The platform distinguishes itself through an event-driven architecture that coordinates network state changes and packet-level data through a centralized message pipeline. It provides a programmable scripting engine and an API for orchestrating s

A ZigBee hacking toolkit by Bishop Fox

This project is a mobile network security auditor and IMSI catcher detector designed to identify fake base stations and surveillance hardware attempting to intercept mobile traffic. It functions as a radio interface analyzer and cellular tower mapping tool, monitoring connections to detect unauthorized network infrastructure. The system distinguishes itself by combining real-time threat level monitoring with the ability to identify silent SMS and stealth communications used for device tracking. It analyzes ciphering status to detect forced network downgrades to weaker encryption standards and

Man in the Middle analysis tool for Bluetooth.

BtleJuice Bluetooth Smart (LE) Man-in-the-Middle framework

List of Bluetooth BR/EDR/LE security resources

LTE SDR cell scanner optimized to work with very low performance RF front ends (8bit A/D, 20dB noise figure)

FALCON - Fast Analysis of LTE Control channels

An intelligence gathering tool for hacking Bluetooth

Bluetooth Forward and Future Secrecy Attacks and Defenses (BLUFFS) CVE 2023-24023

Software, firmware, and hardware designs for Ubertooth

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol. http://www.enisa.europa.eu/activities/cert/support/incident-handling-automation

This project intends to provide a series of tools to craft, parse, send, analyze and crack a set of LoRaWAN packets in order to audit or pentest the security of a LoraWAN infrastructure.

Penetration testing framework for ZigBee security research.

Crack and decrypt BLE encryption

Wireshark-compatible all-channel BLE sniffer for bladeRF, with wideband Bluetooth sniffing for HackRF and USRP

Open5GS is a C-language Open Source implementation for 5G Core and EPC, i.e. the core network of LTE/NR network (Release-17)

🐝 Zigbee security research toolkit for the RaspBee, nRF52840 and CC2531 radio modules.

IEEE 802.15.4/ZigBee Security Research Toolkit

kalibrate for hackrf

A Node.js package for BLE (Bluetooth Low Energy) security assessment using Man-in-the-Middle and other attacks

A LoRaWAN Security Evaluation Framework

Bluetooth experimentation framework for Broadcom and Cypress chips.