package icon

DissPair

Audit Bluetooth Classic and BLE devices: RFCOMM, GATT and advertisements
New in version 2.2.0
New in 2.2.0:
- Advertisement inspector (ADV): decodes advertising data, Apple Continuity, Eddystone, Fast Pair; privacy and tracker checks, interval and RSSI graph
- GATT: notifications, write-without-response, MTU, named services
- GATT access audit with optional write probes and exportable report
- System light/dark theme, new icon
- Back returns to the main screen
DissPair is an open-source Bluetooth security toolkit for auditing Bluetooth Classic (RFCOMM) and Bluetooth Low Energy (BLE) devices you own or are authorized to test. Instead of trusting what a device advertises, it actively probes how the device really behaves. Two CVEs have been found with it (CVE-2026-31280, CVE-2025-67133).

Discovery

  • Scan Classic (BR/EDR) and BLE devices, plus already-paired devices

  • Device class tags, RSSI and filters for unnamed and paired devices



Bluetooth Classic (RFCOMM)

  • Sweep RFCOMM channels 1-30 and see which accept unpaired (insecure) or paired connections

  • Send AT commands and OBEX payloads, with automatic HFP handshake handling

  • Flood test to stress a channel's buffer handling



BLE advertisement inspector (GAP)

  • Decodes every advertising field: flags, service UUIDs, names, TX power, appearance, service and manufacturer data

  • Vendor formats: Apple Continuity (iBeacon, AirDrop, Handoff, Nearby Info, Find My), Eddystone, Google Fast Pair

  • Privacy checks: public vs rotating addresses, identifiers in device names, tracker beacons (Find My, SmartTag, Tile)

  • Advertising interval estimate, RSSI graph, legacy/extended PDU, PHY and connectable flags



BLE GATT analysis

  • Full service and characteristic map with standard and vendor names

  • Read and write (with or without response), hex or text

  • Subscribe to notifications and indications with a live log

  • Automatic maximum MTU negotiation



GATT access audit

  • One tap tests what every characteristic allows without pairing: read, subscribe and write

  • Results marked OPEN, AUTH, ENC, AUTHZ, KEY or DENY

  • Optional write test: echo the value just read, or commit a chosen payload

  • Exportable text report for vendor disclosure



Follows the system light or dark theme. A companion Linux CLI is available in the source repository.

Warning: some features (flooding, payload injection, writes) can disrupt or reconfigure the target device. Use only on hardware you own or have explicit permission to test.

Versions

Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.

Download F-Droid
  • Version 2.2.0 (4) suggested Added on Oct 15, 2026

    arm64-v8a armeabi-v7a x86 x86_64

    This version requires Android 7.0 or newer.

    It is built and signed by the original developer, and guaranteed to correspond to this source tarball.

    Permissions
    • access approximate location only in the foreground
      This app can get your approximate location from location services while the app is in use. Location services for your device must be turned on for the app to get location.
    • access precise location only in the foreground
      This app can get your precise location from location services while the app is in use. Location services for your device must be turned on for the app to get location. This may increase battery usage.
    • pair with Bluetooth devices
      Allows the app to view the configuration of the Bluetooth on the phone, and to make and accept connections with paired devices.
    • access Bluetooth settings
      Allows the app to configure the local Bluetooth phone, and to discover and pair with remote devices.
    • connect to paired Bluetooth devices
      Allows the app to connect to paired Bluetooth devices
    • discover and pair nearby Bluetooth devices
      Allows the app to discover and pair nearby Bluetooth devices
    • org.disspair.disspair.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 12 MiB PGP Signature | Build Log

  • Version 2.1.2 (3) - Added on Jun 18, 2026

    arm64-v8a armeabi-v7a x86 x86_64

    This version requires Android 7.0 or newer.

    It is built and signed by the original developer, and guaranteed to correspond to this source tarball.

    Permissions
    • access approximate location only in the foreground
      This app can get your approximate location from location services while the app is in use. Location services for your device must be turned on for the app to get location.
    • access precise location only in the foreground
      This app can get your precise location from location services while the app is in use. Location services for your device must be turned on for the app to get location. This may increase battery usage.
    • pair with Bluetooth devices
      Allows the app to view the configuration of the Bluetooth on the phone, and to make and accept connections with paired devices.
    • access Bluetooth settings
      Allows the app to configure the local Bluetooth phone, and to discover and pair with remote devices.
    • connect to paired Bluetooth devices
      Allows the app to connect to paired Bluetooth devices
    • discover and pair nearby Bluetooth devices
      Allows the app to discover and pair nearby Bluetooth devices
    • org.disspair.disspair.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 11 MiB PGP Signature | Build Log

Find Apps