out0fstep/unipwn-pineapple-pager- — explained in plain English
Analysis updated 2026-08-08 · repo last pushed 2025-12-31
Carry the pager during a physical security audit to find IoT devices vulnerable to Bluetooth attacks.
Automatically reboot or enable SSH on vulnerable BLE devices during an authorized penetration test.
Scan an office environment for exposed sensors or robots that can be exploited via Bluetooth.
| out0fstep/unipwn-pineapple-pager- | abhayparolkar/zboy | dmaynard51/ultima1-ios | |
|---|---|---|---|
| Stars | 6 | 6 | 6 |
| Language | Shell | Shell | Shell |
| Last pushed | 2025-12-31 | — | — |
| Maintenance | Quiet | — | — |
| Setup difficulty | moderate | hard | moderate |
| Complexity | 4/5 | 4/5 | 3/5 |
| Audience | ops devops | developer | general |
Figures from each repo's GitHub metadata at analysis time.
Requires the specific Hak5 WiFi Pineapple Pager hardware plus standard software packages installed on it, the tool is labeled untested by its creator.
UniPwn Robot Hunter is a tool that adapts an existing Bluetooth exploit so it can run on a specific piece of hardware called the Hak5 WiFi Pineapple Pager. It scans the surrounding area for vulnerable Bluetooth devices and, once it finds one, can automatically run commands on that device without the owner's permission. The creator clearly labels it as intended for authorized security research and penetration testing, and notes that it is untested. The tool sits on the Pineapple Pager and continuously scans for Bluetooth Low Energy devices within roughly 10 meters. When it identifies a viable target, it attempts to exploit it by executing remote commands, rebooting the device, turning on SSH access, or running custom code. The pager itself provides feedback through its LED and a ringtone, and logs details about successful exploits to a folder on the device. It can be configured to scan and attack on specific timers, and it cleans up its own temporary files after running. This would be used by security researchers or penetration testers who want a portable, automated way to find and exploit vulnerable Bluetooth devices in a given area. For example, someone doing a physical security assessment of an office might carry the pager around to identify IoT devices, sensors, or robots on the network that are exposed to this type of Bluetooth attack. The hardware requirement is specific: you need the Hak5 WiFi Pineapple Pager, plus a few standard software packages installed on it. The project is essentially a port, meaning it takes an exploit originally built by someone else (Bin4ry's UniPwn BLE RCE) and packages it to work natively on this particular pager device. The README is sparse on the underlying mechanics, it lists features and installation steps but doesn't explain how the exploit itself works or what specific devices it targets. The "untested" label in the repo description is worth noting for anyone considering it.
A tool that ports a Bluetooth exploit to the Hak5 WiFi Pineapple Pager hardware, automatically scanning for and attacking vulnerable nearby Bluetooth devices without their owner's permission.
Mainly Shell. The stack also includes Shell, Bluetooth Low Energy, Hak5 Pineapple Pager.
Quiet — no commits in 6-12 months (last push 2025-12-31).
No license information is provided, so default copyright restrictions apply and usage rights are unclear.
Setup difficulty is rated moderate, with roughly 30min to a first successful run.
Mainly ops devops.
This repo across BitVibe Labs
Don't trust strangers blindly. Verify against the repo.