Bad-BT
Bad-BT is a powerful Bluetooth-based payload injector built into the BLEShark Nano. It works like a wireless Rubber Ducky for Bluetooth devices - letting you:
- Emulate a Bluetooth keyboard
- Inject DuckyScript-style payloads
- Prank, test, or demonstrate real-world vulnerabilities
- Automate keystrokes
Once connected, you can control the target device remotely with a single tap.
How to Use It
Follow these steps to use the Bad-BT feature:
- Navigate to the Bad-BT menu on your BLEShark Nano.
- Select a script type (e.g.
prankorcustom). - Choose the specific script you want to run.
- Connect to your target device via Bluetooth.
- Once paired, press [S] to instantly execute the payload.
If you previously paired your BLEShark Nano using the TikTok Scroller app, un-pair it first.
That mode registers the device as a mouse - not a keyboard - and prevents Bad-BT from functioning.
Uploading Your Own Scripts
You can write and upload your own DuckyScript files using the on-device Transfer portal:
- Create your script using
.txtformat with DuckyScript commands. - Turn on the BLEShark Nano and open Config -> Transfer.
- Connect to the BLEShark Wi-Fi network, enter the credentials shown on-screen.
- Under the Upload Files section, click BadUSB Script and select your file.
- Once the upload completes, the script is ready to run from the Bad-BT menu.
To run your uploaded script, just select the custom option from the Bad-BT menu.
Editing DuckyScript On-Device
You can also write and edit DuckyScript files directly on the BLEShark Nano, no computer needed.
- Open Bad-BT -> Edit on your device.
- You'll see every line of the current script, plus + Add Line, Save, and Back at the bottom of the list.
- Selecting an existing line opens an actions menu with Edit, Insert After, Delete, and Back. Pick one to apply it.
- + Add Line appends a new empty line at the bottom for you to fill in.
- When you have unsaved changes, the Save label shows a trailing asterisk (
Save *). Select it to commit your changes.
Scripts edited on-device can hold up to 1024 lines, and each line can be up to 64 characters long. The on-device editor and the Transfer portal edit the same script file, so changes you make on the device will show up in later exports, and the other way around.
Bad-BT is intended for educational, testing, and ethical security use only.
Unauthorized access or injection of payloads without consent is illegal and strictly prohibited.