<p>DissPair is یک Bluetooth security toolkit برای auditing متنباز<b>Bluetooth Classic (RFCOMM)</b> و <b>Bluetooth Low Energy (BLE)</b> devices you own or are authorized to test. Instead of trusting what a device advertises, it actively probes how the device really behaves. Two CVEs have been found با it (CVE-2026-31280, CVE-2025-67133).</p> <p><b>Discovery</b></p> <ul> <li>Scan Classic (BR/EDR) و BLE devices, plus already-paired devices</li> <li>Device class tags, RSSI و filters برای unnamed و paired devices</li> </ul> <p><b>Bluetooth Classic (RFCOMM)</b></p> <ul> <li>Sweep RFCOMM channels 1-30 و see which accept unpaired (insecure) or paired connections</li> <li>Send AT commands و OBEX payloads, با automatic HFP handshake handling</li> <li>Flood test to stress a channel's buffer handling</li> </ul> <p><b>BLE advertisement inspector (GAP)</b></p> <ul> <li>Decodes every advertising field: flags, service UUIDs, names, TX power, appearance, service و manufacturer data</li> <li>Vendor formats: Apple Continuity (iBeacon, AirDrop, Handoff, Nearby Info, Find من), Eddystone, Google سریع Pair</li> <li>Privacy checks: public vs rotating addresses, identifiers in device names, tracker beacons (Find من, SmartTag, Tile)</li> <li>Advertising interval estimate, RSSI graph, legacy/extended PDU, PHY و connectable flags</li> </ul> <p><b>BLE GATT analysis</b></p> <ul> <li>Full service و characteristic نقشه با standard و vendor names</li> <li>Read و write (با or بدون response), hex or text</li> <li>Subscribe to اعلانها و indications با a live log</li> <li>Automatic maximum MTU negotiation</li> </ul> <p><b>GATT access audit</b></p> <ul> <li>One tap tests what every characteristic allows بدون pairing: read, subscribe و write</li> <li>Results marked OPEN, AUTH, ENC, AUTHZ, KEY or DENY</li> <li>Optional write test: echo the value just read, or commit a chosen payload</li> <li>Exportable text report برای vendor disclosure</li> </ul> <p>Follows the سیستم light or dark تم. A companion Linux CLI is available in the source repository.</p> <p><b>Warning:</b> some features (flooding, payload injection, writes) can disrupt or reconfigure the target device. Use only on hardware you own or have explicit permission to test.</p>