Bluetooth Low Energy Attacks GAWN Practice Questions (Page 12)

Questions 56–56

1. 56application · medium

   A security researcher is fuzzing a BLE device's GATT server. The researcher wants to identify which GATT characteristics are most likely to be vulnerable to malformed input. Which approach is most effective?

   • AEnumerate all GATT characteristics and send malformed write requests to each one, monitoring for crashes or unexpected responses.
   • BFocus only on characteristics that are readable, because writable characteristics are less likely to be vulnerable.
   • CReplay previously captured GATT write requests with modified values to the same characteristic.
   • DSend malformed data to the device's advertising packets instead of GATT characteristics.
   Reveal Solution Discussion Select an answer first