spooftooph
Spooftooph automates spoofing or cloning of Bluetooth device Name, Class, and Address. This allows a Bluetooth device to hide in plain sight by matching information of another device.
Description
Spooftooph is designed to automate spoofing or cloning Bluetooth device Name, Class, and Address. Cloning this information effectively allows a Bluetooth device to hide in plain sight. Bluetooth scanning software will only list one of the devices if more than one device in range shares the same device information when the devices are in Discoverable Mode (specifically the same Address).
Use cases include evading Bluetooth detection by mimicking another device's identifiers. It is useful in scenarios requiring Bluetooth device anonymity or testing Bluetooth discovery mechanisms.
The tool supports specifying interfaces and is noted as useful in virtualized environments where USB must be passed through.
How It Works
Spooftooph modifies the Bluetooth device's BD_ADDR (address), Class, and Name on a specified interface. It operates on Bluetooth protocols to clone these identifiers, enabling the device to appear identical to a target during discovery scans. When multiple devices share the same information in discoverable mode, scanners typically list only one.
Installation
sudo apt install spooftoophFlags
Examples
spooftooph -i hci1 -a 00803789EE76spooftooph -hspooftooph -i hci0 -a 00:11:22:33:44:55spooftooph -i hci1 -n 'Test Device'spooftooph -i hci1 -c 0x240404spooftooph -i hci1 -a 00:19:0E:0E:EA:4B -n 'Cloned Device' -c 0x240404spooftooph -m