Skip to content
Get packs

LoRaWAN & Sub-GHz Attacks

Guides an agent through offensive testing of LoRaWAN and 433/868/915 MHz wireless devices

Source Download skill
Repository
SnailSploit/Claude-Red
Stars
10,230
Licence
MIT
Files
1 file

What it does

This skill gives an AI agent a detailed offensive-security playbook for wireless IoT radios. It covers LoRaWAN key and frame-counter weaknesses, capture and replay of simple garage-door, doorbell and smart-plug radio signals, TPMS spoofing, and reverse engineering unknown radio packet formats using tools like HackRF, RTL-SDR, Flipper Zero, Inspectrum and Universal Radio Hacker. It is written for attackers and penetration testers, so it tells the agent how to break these systems rather than how to protect them.

Great for

  • Authorized wireless penetration testers assessing LoRaWAN or sub-GHz devices under contract
  • Security researchers studying weak fixed-code and rolling-code remote systems in their own lab
  • Red teams evaluating smart-city or industrial telemetry deployments they are permitted to test

Skip it if

  • Attacking garage doors, cars, TPMS or IoT devices you do not own or lack written permission to test, since replaying or spoofing them can be illegal and dangerous
  • Beginners wanting general wireless learning; the skill assumes existing RF and security knowledge and gives terse commands
  • Defensive hardening work, because the file focuses on exploitation rather than mitigation

Try asking

  • “Map the 868 MHz traffic of a LoRaWAN sensor in my test lab and check whether its ABP keys are reused across devices”
  • “Analyze a saved 433 MHz garage remote capture and document whether it uses a fixed code”
  • “Reconstruct the packet format of an unknown sub-GHz smart plug from an IQ capture using URH”
  • “Write a report template noting modulation, frequency and crypto state for each wireless device in scope”
Step-by-step guide: how to use LoRaWAN & Sub-GHz AttacksInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    offensive-lorawan-sub-ghz.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip offensive-lorawan-sub-ghz.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip offensive-lorawan-sub-ghz.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only use it against devices you own or have written authorization to test, and keep the scope documented
  • Verify each cloned repository and tool version yourself, since the skill names GitHub sources without pinning versions
  • Expect the agent to supply commands and reasoning; you still need the RF hardware and legal scope in place

What's inside

  • SKILL.md

Redistributed unmodified from SnailSploit/Claude-Red under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.