How to Use Ubertooth One for Bluetooth Sniffing and Wireless Security Testing

Key takeaways

• Ubertooth One is a research tool. It listens to radio traffic and does not "break into" devices by itself.
• It is strongest at Bluetooth Low Energy (BLE) sniffing and at spectrum analysis. Capturing Bluetooth Classic is much more limited.
• Modern pairing with encryption, especially LE Secure Connections, protects traffic from a passive sniffer. Old pairing modes are the weak point.
• Capturing other people's Bluetooth traffic without permission can break Indian law. Test your own devices in your own lab.
• For defenders, the lesson is practical: update firmware, use modern pairing, and switch off Bluetooth and discoverability when unused.

What is Ubertooth One?

Ubertooth One is a small USB device with a 2.4 GHz radio, built so researchers can look at Bluetooth in ways ordinary adapters do not allow. A normal Bluetooth adapter shows you only what the operating system lets you see. Ubertooth gives raw access to the radio, so you can observe packets, timing and channel use.

It was created by Michael Ossmann and is released by Great Scott Gadgets. The hardware designs, firmware and host software are open source, and are kept at the project's GitHub repository. It is a cheap alternative to expensive commercial sniffers, but check current prices and availability from the maker.

What can it do, and what can it not do?

The earlier article said Ubertooth can track frequency hopping in general. The accurate version is that it can follow BLE and parts of Classic, with real limits.

Why does this matter for security?

Many Bluetooth devices send identifiers and data over the air. Learning what a sniffer sees teaches you which designs leak. Typical lessons from this work are that unencrypted BLE characteristics expose data to anyone nearby, that fixed device addresses allow tracking, and that old "Just Works" pairing gives weak protection against an active attacker. These are design problems for developers and administrators to fix, not tricks to use on strangers.

What do you need for a lab?

• An Ubertooth One, bought from a reputable seller.
• A Linux machine. Kali Linux is common, and the Kali documentation explains installation. Kali includes Ubertooth packages.
• One or two Bluetooth devices that belong to you, such as a BLE fitness band, a sensor or a development board.
• Wireshark to read captures. See the Wireshark documentation.

How do you set it up on Kali Linux?

1. Update your system and install the tools:

   sudo apt update
   sudo apt install ubertooth

2. Plug in the Ubertooth and confirm Linux sees it:

   lsusb
   ubertooth-util -v

   The second command prints the firmware version. If it fails, check cables and permissions, and read the project's documentation.
3. If the firmware is old, update it using the instructions in the project repository. Do not flash firmware you downloaded from an unknown source.

A first exercise: look at the spectrum

This is the safest start because it only displays radio energy. The package includes a spectrum analyser tool, ubertooth-specan-ui. Run it with the device plugged in, switch your own Bluetooth device on and off, and watch the display change. You will see Wi-Fi occupying parts of the 2.4 GHz band and Bluetooth hopping across the rest.

A second exercise: capture BLE from your own device

Use a BLE device you own, such as a fitness band, and keep other people's devices out of the test area where you can. Run the BLE tool, which can follow connections:

ubertooth-btle -f

To save packets for Wireshark, the tool can write a capture file. Check ubertooth-btle -h for the exact option names in your installed version, then open the capture in Wireshark. You should see advertising packets from your device and, if you start a connection while the sniffer is running, connection events. Look at what is readable and what is not. That difference is the lesson.

What did you learn, and how does a defender use it?

• Advertising data is public. Do not put names, health data or tokens in advertising packets.
• Use modern pairing. Prefer LE Secure Connections where the device supports it. Treat "Just Works" as a low-security option.
• Protect the application layer. Do not rely on link encryption alone for sensitive data in a custom BLE service. Authenticate and encrypt at the application level.
• Randomise addresses. Devices using resolvable private addresses are harder to track than devices with a fixed address.
• Reduce exposure. Turn off Bluetooth when you do not need it, remove old paired devices, and keep firmware updated.

Integrating with other tools

Ubertooth can write PCAP captures that Wireshark reads. For wider wireless monitoring, Kismet can use compatible capture sources. Our article on Kismet explains how it works for Wi-Fi, and the guide to Alfa network cards covers the Wi-Fi hardware side. To understand the general concept, read what network sniffing is and how to protect yourself.

Is it legal to use Ubertooth in India?

Owning the device is not the problem. What you capture and how you use it is. Intercepting other people's communications, or accessing their devices without permission, can be an offence under India's Information Technology Act, 2000, and other laws on interception. Keep to your own equipment, or to a written agreement that names the devices, the place and the dates. If you are unsure, ask a lawyer before you test.

Common mistakes

• Expecting to capture a full Bluetooth Classic call or audio stream. The hardware does not do that.
• Testing in a crowded place, where you may capture strangers' packets. Stay in a controlled space.
• Flashing firmware without reading the project's instructions.
• Forgetting to record what you did. Keep notes of the device, versions and results.

Next steps

To go from wireless experiments to a full testing skill set, see WebAsha's OSWP | PEN-210 wireless course, and start with Cyber Security if you are new to the field.

Related reading

• What Is Flipper Zero Device Used For in Hacking? How It Works, Real Examples, and FAQs for Beginners
• What are the most common wireless network issues and how can you fix them?
• What is Raspberry Pi Used For, How to Use It, and Real-Time Examples for Programming and Ethical Hacking | Raspberry Pi Explained