Skip to main content

Bad-BT

Bad-BT is a powerful Bluetooth-based payload injector built into the BLEShark Nano. It works like a wireless Rubber Ducky for Bluetooth devices - letting you:

  • Emulate a Bluetooth keyboard
  • Inject DuckyScript-style payloads
  • Prank, test, or demonstrate real-world vulnerabilities
  • Automate keystrokes

Once connected, you can control the target device remotely with a single tap.

How to Use It

Follow these steps to use the Bad-BT feature:

  1. Navigate to the Bad-BT menu on your BLEShark Nano.
  2. Select a script type (e.g. prank or custom).
  3. Choose the specific script you want to run.
  4. Connect to your target device via Bluetooth.
  5. Once paired, press [S] to instantly execute the payload.
Important!

If you previously paired your BLEShark Nano using the TikTok Scroller app, un-pair it first.
That mode registers the device as a mouse - not a keyboard - and prevents Bad-BT from functioning.

Uploading Your Own Scripts

You can write and upload your own DuckyScript files using the on-device Transfer portal:

  1. Create your script using .txt format with DuckyScript commands.
  2. Turn on the BLEShark Nano and open Config -> Transfer.
  3. Connect to the BLEShark Wi-Fi network, enter the credentials shown on-screen.
  4. Under the Upload Files section, click BadUSB Script and select your file.
  5. Once the upload completes, the script is ready to run from the Bad-BT menu.

To run your uploaded script, just select the custom option from the Bad-BT menu.

Editing DuckyScript On-Device

You can also write and edit DuckyScript files directly on the BLEShark Nano, no computer needed.

  • Open Bad-BT -> Edit on your device.
  • You'll see every line of the current script, plus + Add Line, Save, and Back at the bottom of the list.
  • Selecting an existing line opens an actions menu with Edit, Insert After, Delete, and Back. Pick one to apply it.
  • + Add Line appends a new empty line at the bottom for you to fill in.
  • When you have unsaved changes, the Save label shows a trailing asterisk (Save *). Select it to commit your changes.
Limits

Scripts edited on-device can hold up to 1024 lines, and each line can be up to 64 characters long. The on-device editor and the Transfer portal edit the same script file, so changes you make on the device will show up in later exports, and the other way around.

Legal Warning

Bad-BT is intended for educational, testing, and ethical security use only.
Unauthorized access or injection of payloads without consent is illegal and strictly prohibited.