u/Trick-Resolve-6085

Bluetooth jammers are a joke. The cheap ones ($150+) barely work, and the "professional" ones ($2,000+) just blast noise blindly across 79 channels 1,600 times a second. They're unreliable, often illegal to even own, and a complete waste of money.

I built BBF, a free and open source tool that doesn't jam at all. It discovers the hidden part of a Bluetooth device's address, then continuously floods that address with pings until the target disconnects or shuts down. Even after a reset, the script keeps running, so the device gets hit again immediately. And the whole time, the tool never hops a single channel. It doesn't need to.

The catch: to sniff unknown addresses out of the air, you need an Ubertooth One ($120, one time). That's it. No $500 SDR rig, no lab gear. Find the LAP and UAP once, and you have the key to keep DOSing that device forever, without touching the Ubertooth again.

Why it's better than any jammer:

Jammers: blind noise, expensive, unreliable, legally questionable just to own.

BBF: finds the address (Ubertooth + a 256 ping sweep), then a standard l2ping pages the device on its own hopping pattern. You never touch a channel. Deterministic, cheap, effective.

If this sounds useful, a star on the repo goes a long way ⭐

Channel Switch Announcement beacon spoofing. Beacons are never PMF-protected, ever. Even on WPA3/MFP Required. Reasearch shows that CSA is working across all major OSes including Android+12, but does it still work in 2026, any patches have been made on WPA3 or thier clients.

Channel Switch Announcement beacon spoofing. Beacons are never PMF-protected, ever. Even on WPA3/MFP Required. Reasearch shows that CSA is working across all major OSes including Android+12, but does it still work in 2026, any patches have been made on WPA3 or thier clients.

Enabled PMF on my AP to test it. Expected my tool to get stomped. Every spoofed frame gets rejected by the crypto. But I left aggressive mode running, flooding invalid deauth frames at three fully updated Android phones. All three disconnected after ~9 seconds on average. No crypto bypass, just brute force, the client's driver chokes processing the garbage flood.

Anyone knows how to protect against this other than  WIPS/WIDS?

A lot of routers especially ISP-supplied ones have zero MAC filtering capabilities. No whitelist, no deny list. Combine that with the lack of 802.11w (Protected Management Frames), and you have a scenario where an attacker can surgically deauth every device on a network while keeping their own devices connected.

I wrote a small Linux tool (KTO) to demonstrate this. It whitelists your MAC addresses and continuously deauths everyone else. Aggressive mode runs scanning and deauthing in parallel so clients get no reconnect window.

Why this matters:

- Consumer routers rarely enable PMF by default.

- ISP gateways often lack even basic MAC access control.

- End users have no client-side way to ignore spoofed deauth frames.

- Without PMF, selective deauth is trivial.

The takeaway isn't "use this tool" it's "enable PMF on your APs and push vendors to make it default."

Repo in comments if anyone wants to see the implementation. Happy to discuss.

KTO - Kick Them Out

KTO is a tool that deauths (kicks) every device connected to a target WiFi network; except the ones you whitelist by MAC address. It continuously scans for any non‑whitelisted MAC and deauths them the moment they try to connect or reconnect.

In aggressive mode, scanning and deauthing happen in parallel, making the tool far more effective: clients get hammered with deauth frames during the scan itself, leaving them zero window to reconnect. The script never stops until you tell it to, so once it's running, your whitelisted devices get the full WiFi bandwidth while everyone else is locked out.

A practical setup if you're limited to a single laptop and a phone (no external wifi adapter) : whitelist your phone's MAC, connect the phone to the target WiFi, then USB‑tether your laptop to the phone. Your phone stays connected (whitelisted), your laptop gets internet via tethering, and the script; running on the laptop; keeps everyone else off the network

the only requirments r

• scapy
• aircrack-ng suite

If you find it useful, drop a ⭐ it helps a lot!

KTO - Kick Them Out

KTO is a tool that deauths (kicks) every device connected to a target WiFi network; except the ones you whitelist by MAC address. It continuously scans for any non‑whitelisted MAC and deauths them the moment they try to connect or reconnect.

In aggressive mode, scanning and deauthing happen in parallel, making the tool far more effective: clients get hammered with deauth frames during the scan itself, leaving them zero window to reconnect. The script never stops until you tell it to, so once it's running, your whitelisted devices get the full WiFi bandwidth while everyone else is locked out.

A practical setup if you're limited to a single laptop and a phone (no external wifi adapter) : whitelist your phone's MAC, connect the phone to the target WiFi, then USB‑tether your laptop to the phone. Your phone stays connected (whitelisted), your laptop gets internet via tethering, and the script; running on the laptop; keeps everyone else off the network

the only requirments r

• scapy
• aircrack-ng suite

GitHub: https://github.com/Ymsniper/KTO

If you find it useful, drop a ⭐ it helps a lot!

I've been working on a live warping effect on any image in terminal, Konsole worked but still a bit glithcy , Kitty on the other hand was not glutchy but was super slow, all the same code.