Skip to content
Get packs

Z-Wave Offensive Attack Methodology

Guides an agent through attacking Z-Wave smart home networks: sniffing, key flaws, replay and hub pivots.

Source Download skill
Repository
SnailSploit/Claude-Red
Stars
10,230
Licence
MIT
Files
1 file

What it does

This skill gives an AI agent a penetration-testing playbook for Z-Wave, a wireless protocol used by many smart home devices such as door locks, sensors and garage controllers. Once installed, the agent can walk through steps like choosing the right radio frequency for a region, sniffing pairing traffic, telling legacy S0 security from newer S2, testing devices that accept unauthenticated commands, and attacking the home hub that controls them. It is written as an offensive attack guide, not a defensive one.

Great for

  • Security researchers authorised to test Z-Wave devices in a lab or on their own equipment
  • Students learning IoT wireless attack techniques in a controlled environment
  • Red teams with written permission to assess a smart home or building deployment

Skip it if

  • Accessing or controlling someone else's smart locks, alarms or hubs without written authorisation, because the guidance is aimed at compromising live devices and is illegal to apply to others' property
  • Ordinary smart home troubleshooting or setup, since the skill contains no configuration or defensive hardening steps
  • Relying on it as a complete or accurate reference: many commands and tool names (such as ezwave-sniff and scapy-zwave) are not verified in the file and may not work as written

Try asking

  • “Walk me through sniffing a Z-Wave inclusion on 908.4 MHz in my lab and checking whether it uses S0 or S2”
  • “Help me test my own unauthenticated Z-Wave switches with crafted frames and report the findings”
  • “Create a Z-Wave engagement checklist for an authorised smart home penetration test”
  • “Explain how the S0 network-key weakness works and how to document it in a report”
Step-by-step guide: how to use Z-Wave Offensive Attack MethodologyInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    offensive-z-wave.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip offensive-z-wave.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip offensive-z-wave.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only use it against devices and networks you own or have written authorisation to test, and record that scope before starting
  • Verify every tool name and command against the official project repositories before running it, since the file gives examples rather than tested commands
  • Ask the agent to focus on documentation and defensive findings (such as S0 usage or open inclusion mode) if your goal is remediation

What's inside

  • SKILL.md

Redistributed unmodified from SnailSploit/Claude-Red under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.