Skip to content
Get packs

Bluetooth Classic Attack Methodology

Guides an agent through Bluetooth Classic (BR/EDR) offensive testing methodology against in-scope legacy devices.

Source Download skill
Repository
SnailSploit/Claude-Red
Stars
10,230
Licence
MIT
Files
1 file

What it does

This skill gives an AI agent a structured playbook for security testing of older Bluetooth Classic devices, such as legacy car kits, industrial sensors, and audio accessories. Once installed, the agent knows the typical steps: discovering nearby devices, listing their Bluetooth services, checking for unauthenticated access, and testing known historic weaknesses like KNOB and BlueBorne. It is written as an attack methodology, so its main effect is to make the agent a capable guide for offensive Bluetooth work.

Great for

  • Authorized penetration testers assessing legacy Bluetooth Classic hardware within a defined scope
  • Security students learning how Bluetooth Classic weaknesses are categorised and tested in a lab
  • Red teams documenting exposed profiles and CVE applicability on in-scope industrial or automotive devices

Skip it if

  • Testing devices you do not own or have written permission to assess, since the content is written for attacking live targets and unauthorised use may be illegal
  • Consumer security questions that only need defensive advice, because the skill is oriented toward offence rather than hardening
  • Modern Bluetooth Low Energy (BLE) devices, which the skill explicitly does not cover

Try asking

  • “Walk me through an authorized Bluetooth Classic assessment of the legacy sensors in our lab, starting with discovery and SDP enumeration.”
  • “Check whether this older car kit in our test scope is vulnerable to KNOB, and list the steps and tools.”
  • “Build a per-device report template covering profiles, auth state, and CVE applicability for our Bluetooth audit.”
Step-by-step guide: how to use Bluetooth Classic Attack MethodologyInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    offensive-bluetooth-classic.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip offensive-bluetooth-classic.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip offensive-bluetooth-classic.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only use it with explicit written authorization and a defined scope, and have the agent record the scope before any active testing.
  • Expect the agent to produce commands that interact with real radios and devices; review each command before running it, especially the SPP connection and HID steps.
  • Ask for defensive framing too (mitigations, firmware updates, disabling discoverable mode) to get a report usable by the device owner.

What's inside

  • SKILL.md

Redistributed unmodified from SnailSploit/Claude-Red under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.