Skip to content
Get packs

Offensive Bluetooth LE Testing

Guides an agent through security testing of Bluetooth Low Energy devices: GATT enumeration, pairing analysis, and sniffing.

Source Download skill
Repository
SnailSploit/Claude-Red
Stars
10,230
Licence
MIT
Files
1 file

What it does

This skill gives an AI agent a structured offensive-security playbook for Bluetooth Low Energy (BLE) devices such as smart locks, fitness trackers, beacons, and medical or car key systems. Once installed, the agent knows how to map a device's GATT services and characteristics, test whether they accept reads or writes without authentication, identify the pairing method, and explain how sniffing or relay tools could be used against weak pairing. It is a methodology and command reference, not a standalone product, and it assumes the user has security knowledge and tools installed.

Great for

  • Security professionals performing authorized BLE penetration tests on devices they own or are contracted to assess
  • Students learning BLE security concepts in a lab with their own hardware
  • Researchers doing coordinated vulnerability disclosure on IoT devices

Skip it if

  • Testing devices you do not own or have written permission to test, because unauthorized access to locks, cars or medical devices can be illegal and dangerous
  • Medical implants such as insulin pumps or pacemakers, where the skill itself warns that disclosure must be carefully coordinated and live testing can harm patients
  • Non-technical users wanting a simple BLE tool, since the skill assumes familiarity with bettercap, gatttool, Sniffle and similar tools

Try asking

  • “Walk me through enumerating the GATT services of my own smart lock and testing its characteristics for unauthenticated writes.”
  • “Check whether the pairing method on my fitness tracker is Just Works and explain what that means for risk.”
  • “Help me set up Sniffle with a CC1352 dongle to capture a pairing exchange from my own test devices.”
  • “Review the companion app for my BLE beacon to find where the vendor command formats are defined.”
Step-by-step guide: how to use Offensive Bluetooth LE TestingInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    offensive-bluetooth-ble.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip offensive-bluetooth-ble.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip offensive-bluetooth-ble.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only run it against hardware you own or have written authorization to test, and state that scope in your request.
  • Ask the agent to explain each command before running it, since many commands use sudo and actively transmit radio traffic.
  • Keep findings and any vendor-facing disclosure separate from exploit code, and follow coordinated disclosure norms for devices with safety impact.

What's inside

  • SKILL.md

Redistributed unmodified from SnailSploit/Claude-Red under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.