{
  "added_at": "2026-11-03",
  "additional_evidence_urls": [
    "https://github.com/RCayre/mirage/blob/b6cd39eb779a94a11ebf9f7cba4e77435d885434/setup.py",
    "https://github.com/RCayre/mirage/blob/b6cd39eb779a94a11ebf9f7cba4e77435d885434/CHANGELOG.md",
    "https://github.com/RCayre/mirage/blob/b6cd39eb779a94a11ebf9f7cba4e77435d885434/mirage/__init__.py",
    "https://github.com/RCayre/mirage/tree/b6cd39eb779a94a11ebf9f7cba4e77435d885434/mirage/modules",
    "https://github.com/RCayre/mirage/blob/b6cd39eb779a94a11ebf9f7cba4e77435d885434/mirage/modules/ble_discover.py",
    "https://github.com/RCayre/mirage/blob/b6cd39eb779a94a11ebf9f7cba4e77435d885434/mirage/libs/ble_utils/adb.py",
    "https://github.com/RCayre/mirage/blob/b6cd39eb779a94a11ebf9f7cba4e77435d885434/mirage/libs/wireless_utils/pcapDevice.py",
    "https://github.com/RCayre/mirage/blob/b6cd39eb779a94a11ebf9f7cba4e77435d885434/mirage/libs/ble_utils/pcap.py",
    "https://github.com/RCayre/mirage/blob/b6cd39eb779a94a11ebf9f7cba4e77435d885434/LICENSE.txt",
    "https://hal.science/hal-02346074"
  ],
  "category": "protocol-analysis",
  "description_en": "Python framework from IoT-security research at LAAS-CNRS for analysing wireless communications, with lightweight protocol stacks for Bluetooth Low Energy, Bluetooth, Enhanced ShockBurst, Mosart, Zigbee, Wi-Fi and infrared that a command-line interpreter drives through chainable modules. For protocol analysis it offers per-protocol scan, information and sniffing modules, BLE ATT/GATT discovery that saves the discovered attribute table, HCI monitoring of an Android phone through its btsnoop log over ADB, PCAP reading and writing, and an experimental HackRF software-radio receive path with FSK demodulators and BLE and Zigbee decoders. Its author has deprecated it in favour of the WHAD tool suite.",
  "description_zh": "源自 LAAS-CNRS 物联网安全研究的 Python 无线通信分析框架，内置低功耗蓝牙（BLE）、经典蓝牙、Enhanced ShockBurst、Mosart、Zigbee、Wi-Fi 和红外等轻量协议栈，由命令行解释器调用可串联的模块。用于协议分析时，它为各协议提供扫描、信息查询和嗅探模块，可发现 BLE 的 ATT/GATT 层并保存所得属性表，可通过 ADB 读取 Android 手机的 btsnoop 日志来监视 HCI 通信，支持读写 PCAP，并提供基于 HackRF 的实验性软件无线电接收路径，包含 FSK 解调器以及 BLE 和 Zigbee 解码器。作者已宣布弃用该项目，转而开发 WHAD 工具集。",
  "entry_url": "https://awesomerea.org/resources/mirage-wireless-framework/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/mirage-wireless-framework/",
  "evidence_url": "https://github.com/RCayre/mirage/blob/b6cd39eb779a94a11ebf9f7cba4e77435d885434/readme.md",
  "group": "tools",
  "id": "mirage-wireless-framework",
  "json_url": "https://awesomerea.org/resources/mirage-wireless-framework/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/mirage-wireless-framework/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/mirage-wireless-framework/index.md",
  "name": "Mirage",
  "name_zh": "Mirage 无线通信分析框架",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "Version 1.2 according to mirage/__init__.py; the repository has no tags or GitHub releases. The README, last edited 2025-04-13 at the reviewed commit, declares the project officially deprecated and no longer maintained and points to its successor WHAD (whad-team/whad-client); the last code change is from 2022-11-24. It installs from this source tree with setup.py, since the PyPI package named mirage is an unrelated JWST data simulator.",
    "setup.py depends on scapy, pyusb, pyserial, pycryptodomex, keyboard, psutil, terminaltables and matplotlib, and its classifiers list Python 3.6 and Linux. Live capture needs supported radio hardware: Bluetooth HCI adapters, a BBC micro:bit running BTLEJack firmware, Nordic and Sniffle sniffers, Ubertooth, a Crazyradio PA for Enhanced ShockBurst and Mosart, an RZUSBStick for Zigbee, a Wi-Fi interface, the IRma infrared device, a ButteRFly nRF52840 dongle or a HackRF One for the experimental SDR path. Their firmware lives in separate repositories; this repository holds only Python sources and no firmware images.",
    "Without radio hardware, PCAP files serve as input interfaces (BLE link-layer PCAPs use DLT 256), and the ADB and hcidump interfaces read HCI traffic recorded on an Android phone or Linux host. The documentation site linked from the README returned HTTP 404 at review; its Sphinx sources are on the LAAS Redmine.",
    "The README and setup.py describe Mirage as an offensive framework whose modules and example scenarios also cover man-in-the-middle, jamming, hijacking, cloning and injection, including experimental InjectaBLE attacks. Capture only devices and networks you are authorised to observe.",
    "MIT (LICENSE.txt, copyright 2019 Romain Cayre). The README cites SSTIC 2019 and IEEE ISSRE 2019 papers describing the framework."
  ],
  "requirements_zh": [
    "据 mirage/__init__.py，版本为 1.2；仓库没有标签或 GitHub 发布版本。README 于所审提交（2025-04-13）最后修改，宣布项目正式弃用、不再维护，并指向后继项目 WHAD（whad-team/whad-client）；最后一次代码改动在 2022-11-24。需从本源码树用 setup.py 安装，因为 PyPI 上名为 mirage 的包是无关的 JWST 数据模拟器。",
    "setup.py 依赖 scapy、pyusb、pyserial、pycryptodomex、keyboard、psutil、terminaltables 和 matplotlib，分类信息列出 Python 3.6 与 Linux。实时采集需要受支持的无线电硬件：蓝牙 HCI 适配器、运行 BTLEJack 固件的 BBC micro:bit、Nordic 与 Sniffle 嗅探器、Ubertooth、用于 Enhanced ShockBurst 和 Mosart 的 Crazyradio PA、用于 Zigbee 的 RZUSBStick、Wi-Fi 网卡、IRma 红外设备、ButteRFly nRF52840 加密狗，或用于实验性软件无线电路径的 HackRF One。这些设备的固件在其他仓库中；本仓库只有 Python 源码，不含固件镜像。",
    "没有无线电硬件时，可把 PCAP 文件当作输入接口（BLE 链路层 PCAP 使用 DLT 256），ADB 与 hcidump 接口则读取 Android 手机或 Linux 主机记录的 HCI 通信。README 链接的文档网站在审阅时返回 HTTP 404；其 Sphinx 源文件位于 LAAS 的 Redmine。",
    "README 和 setup.py 称 Mirage 为攻击性框架，其模块和示例场景还涉及中间人、干扰、劫持、克隆和注入，包括实验性的 InjectaBLE 攻击。只应采集自己有权观察的设备和网络。",
    "MIT 许可（LICENSE.txt，版权 2019 Romain Cayre）。README 引用了介绍该框架的 SSTIC 2019 和 IEEE ISSRE 2019 论文。"
  ],
  "targets": [
    "protocol"
  ],
  "url": "https://github.com/RCayre/mirage",
  "verification": "source-reviewed",
  "verified_at": "2026-10-27"
}