https://github.com/seemoo-lab/internalblue
https://arxiv.org/abs/1905.00631
https://drive.google.com/file/d/1Ze3s7_1n0mIl5odiUvbkPk-vywVZMtKq/view
Several Broadcom/Cypress Bluetooth firmwares and their firmware update mechanism have been reverse engineered. Based on that we developed a Bluetooth experimentation framework which is able to patch the firmware and therefore implement monitoring and injection tools for the lower layers of the Bluetooth protocol stack.