Sniffing & Spoofingbluetoothspoofingcloningwireless

spooftooph

Spooftooph automates spoofing or cloning of Bluetooth device Name, Class, and Address. This allows a Bluetooth device to hide in plain sight by matching information of another device.

Description

Spooftooph is designed to automate spoofing or cloning Bluetooth device Name, Class, and Address. Cloning this information effectively allows a Bluetooth device to hide in plain sight. Bluetooth scanning software will only list one of the devices if more than one device in range shares the same device information when the devices are in Discoverable Mode (specifically the same Address).

Use cases include evading Bluetooth detection by mimicking another device's identifiers. It is useful in scenarios requiring Bluetooth device anonymity or testing Bluetooth discovery mechanisms.

The tool supports specifying interfaces and is noted as useful in virtualized environments where USB must be passed through.

How It Works

Spooftooph modifies the Bluetooth device's BD_ADDR (address), Class, and Name on a specified interface. It operates on Bluetooth protocols to clone these identifiers, enabling the device to appear identical to a target during discovery scans. When multiple devices share the same information in discoverable mode, scanners typically list only one.

Installation

bash
sudo apt install spooftooph

Flags

-a <address>Specify new BD_ADDR
-b <num_lines>Number of Bluetooth profiles to display per page
-BDisable banner for smaller screens (like phones)
-c <class>Specify new CLASS
-hHelp
-i <dev>Specify interface
-mSpecify multiple interfaces during selection
-n <name>Specify new NAME

Examples

Use the Bluetooth interface (hci1) to spoof itself as the given address (00803789EE76)
spooftooph -i hci1 -a 00803789EE76
Display help information for spooftooph
spooftooph -h
Spoof Bluetooth address on interface hci0 to 00:11:22:33:44:55
spooftooph -i hci0 -a 00:11:22:33:44:55
Set Bluetooth device name to 'Test Device' on interface hci1
spooftooph -i hci1 -n 'Test Device'
Set Bluetooth class to 0x240404 on interface hci1
spooftooph -i hci1 -c 0x240404
Spoof address, name, and class on interface hci1 to clone a target device
spooftooph -i hci1 -a 00:19:0E:0E:EA:4B -n 'Cloned Device' -c 0x240404
Select and spoof on multiple interfaces
spooftooph -m
Updated 2026-04-16kali.org ↗