FileCart

DissPair 2.2.0

Audit Bluetooth Classic and BLE devices: RFCOMM, GATT and advertisements

filecart Android Updated Oct 14, 2026
Download 12.27 MB · disspairV2.2.0.apk
38downloads
15this week
FreeFreeware
0reviews

About DissPair

DissPair is an open-source Bluetooth security toolkit for auditing Bluetooth Classic (RFCOMM) and Bluetooth Low Energy (BLE) devices you own or are authorized to test. Instead of trusting what a device advertises, it actively probes how the device really behaves. Two CVEs have been found with it (CVE-2026-31280, CVE-2025-67133).

Discovery

• Scan Classic (BR/EDR) and BLE devices, plus already-paired devices

• Device class tags, RSSI and filters for unnamed and paired devices

Bluetooth Classic (RFCOMM)

• Sweep RFCOMM channels 1-30 and see which accept unpaired (insecure) or paired connections

• Send AT commands and OBEX payloads, with automatic HFP handshake handling

• Flood test to stress a channel's buffer handling

BLE advertisement inspector (GAP)

• Decodes every advertising field: flags, service UUIDs, names, TX power, appearance, service and manufacturer data

• Vendor formats: Apple Continuity (iBeacon, AirDrop, Handoff, Nearby Info, Find My), Eddystone, Google Fast Pair

• Privacy checks: public vs rotating addresses, identifiers in device names, tracker beacons (Find My, SmartTag, Tile)

• Advertising interval estimate, RSSI graph, legacy/extended PDU, PHY and connectable flags

BLE GATT analysis

• Full service and characteristic map with standard and vendor names

• Read and write (with or without response), hex or text

• Subscribe to notifications and indications with a live log

• Automatic maximum MTU negotiation

GATT access audit

• One tap tests what every characteristic allows without pairing: read, subscribe and write

• Results marked OPEN, AUTH, ENC, AUTHZ, KEY or DENY

• Optional write test: echo the value just read, or commit a chosen payload

• Exportable text report for vendor disclosure

Follows the system light or dark theme. A companion Linux CLI is available in the source repository.

Warning: some features (flooding, payload injection, writes) can disrupt or reconfigure the target device. Use only on hardware you own or have explicit permission to test.

License: GPL-3.0-only
Release info Update on Oct 13, 2026
Release notes DissPair v2.2.0

New

Advertisement Inspector (GAP)
Tap ADV on any BLE device to see what it broadcasts, without connecting. Updates live while scanning.
• Decodes every advertising data field: flags, service UUIDs (with names), local name, TX power, appearance, service and manufacturer data, Mesh, URI and more. Malformed advertisements are flagged.
• Vendor formats: Apple Continuity (iBeacon, AirDrop, Proximity Pairing, Handoff, Nearby Info/Action, Find My), Eddystone UID/URL/TLM/EID, Google Fast Pair, company-ID lookup.
• Privacy checks: address type (public / random static / resolvable private / non-resolvable), private addresses that never rotate, serials or MAC fragments in device names, tracker beacons (Find My, SmartTag, Tile).
• Over time: estimated advertising interval, RSSI graph, payload changes, PDU details (legacy/extended, connectable, PHY, TX power).
• Risk flags for exposed firmware-update (DFU) and Nordic UART services.
• COPY / SHARE a full report, or jump straight to GATT analysis.

GATT Access Audit
One tap tests what every characteristic allows without pairing.
• Read, subscribe and write results labelled OPEN / AUTH / ENC / AUTHZ / KEY / DENY.
• Write test: Off, Echo only (safe), or Echo + commit a payload you choose.
• Exportable text report for vendor disclosure.

GATT improvements
• SUB / UNSUB for notifications and indications, with a live notification log.
• Write-without-response support: characteristics that only allow it are now writable.
• Maximum MTU requested automatically on connect; payload limits follow the negotiated MTU.
• Real names for standard and vendor services (ANCS, AMS, Device Information, Nordic UART/DFU, …).
• Readable text shown alongside hex values.
• Error codes shown by name (e.g. INSUFFICIENT_AUTHENTICATION).

Appearance
• Follows the system light/dark theme, with a manual System / Light / Dark toggle.
• New app icon, adapted for all launcher shapes.

Fixed
• Back gesture returns to the main screen instead of…
Listing dataF-Droid

Reviews

No reviews yet. Be the first to review DissPair.

Used DissPair? Tell other visitors what you thought.

Log in to write a review

Other products by this publisher

Most viewed Android Security & Privacy

  1. 1 OTG Master 0.5.0 Mount VeraCrypt and LUKS encrypted USB drives on non-rooted Android 109
  2. 2 Vault Explorer 1.50.0 Encrypted container explorer: VeraCrypt, LUKS, BitLocker, Cryptomator, gocryptfs 92
  3. 3 Pass 0.4.7 Private tools: deterministic passwords, 2FA codes, calculator and clock. 83
  4. 4 PaperCript 1.3.5 Encrypted passwords on printable QR cards. No network, stores nothing. 82
  5. 5 Arcanum 1.7.0 Encrypted container manager compatible with VeraCrypt 81
  6. 6 KeePassVault 2.1.0 Client app for KeePass databases 77
  7. 7 PassVault 2.2.3 A secure, lightweight, and 100% offline password manager. 75
  8. 8 Sidestep 1.2.7 Intercept URLs, remove tracking, and redirect to privacy-friendly frontends. 74
  9. 9 DroidCrypt 1.1 A file and text encryption tool for Android 70
  10. 10 Port Authority 2.4.5 Port scanner 69

Most downloaded Android Security & Privacy

  1. 1 PassPony: Git Password Manager 2.1.0 Password manager for pass and passage stores, synced with git 59
  2. 2 Flauth 1.2.0 Privacy-first, open-source TOTP authenticator for 2FA token management. 57
  3. 3 Pocket2FA 0.11.0 Secure 2FA code client of 2FAuth server that works offline 57
  4. 4 Keyholm 0.1.0 Single-device passkeys on secure hardware 57
  5. 5 Tokn - MFA / 2FA authenticator 1.8.3 Open-source 2FA authenticator. Encrypted on-device. No accounts. 56
  6. 6 HiddenProtectedWorkProfile 94.0 Hidden Profile owner Android security app. 53
  7. 7 PaperCript 1.3.5 Encrypted passwords on printable QR cards. No network, stores nothing. 53
  8. 8 GPG Key Manager 2.0.0 GPG Tool for Android 52
  9. 9 DNS Toggle 3.1.0 Easily toggle and automate Private DNS through the Quick Settings panel. 49
  10. 10 Arcanum 1.7.0 Encrypted container manager compatible with VeraCrypt 48