Bluetooth Ops
The complete reference for AirLeak Pro's authorized Bluetooth-LE assessment tools — purpose, options, all 11 spam modes, and results, for sanctioned engagements only.
These are the active Bluetooth-LE tools in the Ops Suite, run one at a time from the main processor's radio. Each is described by what it is for in a sanctioned assessment, the options you set, and the result it gives the tester.
iBeacon broadcast
Broadcasts a standard iBeacon signal. In an assessment this is used to test how apps and systems that react to beacons behave, and to confirm beacon detection and coverage in the space under test.
The beacon's UUID, major, and minor values.
A controlled, running beacon for testing beacon-aware systems.
BLE spoofer
Broadcasts a chosen device profile to test whether nearby systems can tell a genuine device from an imitation. In an authorized engagement this measures whether a pairing flow, an access system, or a companion app validates the devices it trusts before acting on their presence.
The device profile to broadcast.
Evidence of whether a device's identity can be impersonated — a device-authentication finding.
BLE advertisement spam
Broadcasts a high volume of advertisement messages in one of eleven ecosystem-specific modes, used to test how phones and accessories cope with — and whether they detect — a flood of pairing-style prompts.
Cycles through the full range of Apple pairing-prompt types (AirPods, other accessories) to exercise every prompt style an iOS device recognizes.
Repeats a single chosen Apple prompt type, for a focused test against one specific prompt style.
Sends Apple prompts at a high rate, testing how an iOS device and its owner cope with a rapid-fire flood rather than occasional prompts.
Imitates an AirTag's advertisement, testing tracker-detection features (such as unwanted-tracker alerts) and whether nearby phones flag it appropriately.
Sends Swift Pair prompts, testing how Windows devices handle repeated accessory-pairing notifications.
Sends general Samsung accessory pairing prompts.
Sends the specific pairing prompt Galaxy Buds use, for a focused test against that prompt style.
Sends Fast Pair prompts, testing how Android devices handle repeated accessory-pairing notifications.
Sends Quick Share discovery prompts, testing Android's nearby-share notification handling.
Broadcasts Remote ID over Bluetooth (as opposed to the Wi-Fi version in Wi-Fi ops), for testing Bluetooth-side Remote ID detection.
Mixes prompt types from every ecosystem at once, for a worst-case, mixed-fleet stress test.
Options: the mode (above), and the broadcast rate.
Result: a measure of how target devices respond to each ecosystem's prompts, and whether the flood is detected and surfaced to the user — evidence for a notification-abuse or user-awareness finding.
GATT clone and relay
Bluetooth devices expose their features through a structure called GATT. AirLeak Pro can present a clone of a target device's GATT profile, and can act as a relay (man-in-the-middle) between a device and the thing it talks to, so the tester can observe the exchange. In an authorized engagement this tests whether a device and its app properly authenticate each other and protect their communication.
The target device to clone or relay against.
A record of the exchange, and whether the pairing could be imitated or observed — the basis of a device-communication finding.