With the release of Blue Hydra™, Pwnie Express has provided the open source community with a new, easy to use tool to discover Bluetooth-enabled devices and automatically identify threats associated with those systems. Bluetooth is the leading machine-to-machine (M2M) communication protocol fueling the rapid expansion of devices, including IoT. Bluetooth detection is critical for effective device threat detection and must cover both Low Energy (LE) and Classic Bluetooth standards. Blue Hydra™ has also been integrated into Pwnie's monitoring platform, Pulse, to provide continuous Bluetooth visibility and threat detection for security teams and will be the topic of a talk at the DEF CON conference in Las Vegas.
The Android Open Pwn Project (AOPP) is the first Android ROM purpose built for penetration testing. This fully open sourced project gives users the ability to build their own mobile penetration testing platforms, based on the industry-leading Pwn Phone and Pwn Pad, on almost any Android-based device from Kindles to mobile phones.
Key Benefits of these community-driven projects:
Blue Hydra™
- Discover and track Bluetooth and Bluetooth Low Energy devices in the area, regardless of discoverability mode
- Airodump-ng like display for nearby Bluetooth and Bluetooth Low Energy devices
- Continuous assessment and threat characterization of Bluetooth devices through the Pulse platform
- Enrichment of device personas in wired, wireless asset correlations (Pulse platform)
AOPP
- Based on the Android Open Source Project (AOSP) and various community-developed ROMS, including CyanogenMod and others
- Simplified functionality and installation for users new to InfoSec
- Community developers can contribute to the project and port the platform to new devices
"Pwnie Express' roots are in the open source community," said Rick Farina, Pwnie Express Director of R&D, and co-inventor of Blue Hydra™. "Developing and releasing open source tools reinforces our commitment to give back to the security community and make it easier for security teams to address the growing device threat landscape. These tools will help security professionals with Bluetooth visibility, which is key to effective device threat detection in our increasingly connected and IoT world."
"Bluetooth, both LE and Classic, is a rapidly expanding protocol and detection capabilities are an absolute necessity in the enterprise to ensure security is not being compromised via the Internet of Things," said Paul Asadoorian, CEO, Security Weekly. "These two projects reflect Pwnie's ongoing commitment to open source, helping the security community and their continued investment in security research."
Pwnie Express will be attending Black Hat USA 2016, August 2-4 at Mandalay Bay and will be exhibiting at DEF CON, August 4-7 at Bally's, both in Las Vegas, NV. Pwnie will also be speaking at DEF CON about how the open source community can use Blue Hydra™ and the Android build system software to its advantage. To schedule a time to meet with Pwnie Express during either show, please email pwnie@scratchmm.com.
Supporting Content Resources:
About Pwnie Express
Pwnie Express provides the industry's only solution for continuous detection, identification and classification of wireless, wired and Bluetooth devices putting organizations at risk. Connected devices in the enterprise represent one of the fastest growing threats, unaddressed by existing security solutions. The Pwnie Express SaaS platform, Pulse, provides complete device coverage, including employee owned (BYOx), rogue and company-owned devices across the entire enterprise, including remote sites. To learn more, visit www.PwnieExpress.com or @PwnieExpress.