Bluetooth Reverse Engineering

How much of our Bluetooth firmware reverse engineering work can now be automated with LLMs?

Last year Xeno manually reverse-engineered Realtek RTL8761B* Bluetooth chips’ ROM & firmware, to inject code into them that …
Cite DEFCON Slides (PDF, ~55MB) BT RE LLM Skills
Reverse engineering Realtek RTL8761B* Bluetooth chips, to make better Bluetooth security tools & classes

We hold this truth to be self-evident: SUFFERING BUILDS STRENGTH! In this talk I will walk you through the trials, tribulations, and …
Cite Hardwear.io Slides (PDF, ~148MB) Hardwear.io Video (46m) DarkFirmware_real_i Code Database of Security-relevant HCI VSCs (Vendor-Specific Commands)