Is this skill compatible with Windows and macOS?

The Python-based scanning using the 'bleak' library is cross-platform. However, many specialized security tools like Ubertooth and crackle are best supported on Linux environments.

How does the skill detect BLE replay attacks?

The skill provides patterns to capture characteristic write operations and test if the target device accepts identical, stale commands without freshness validation, sequence numbers, or timestamps.

Can this skill crack all types of Bluetooth encryption?

No, this skill primarily targets BLE Legacy Pairing (versions 4.0 and 4.1) using the crackle tool. LE Secure Connections (version 4.2+) utilize ECDH key exchange and are resistant to the passive eavesdropping methods described here.

What hardware is required to use this BLE security skill?

For active scanning and GATT enumeration, a standard Bluetooth 4.0+ adapter is sufficient. For passive sniffing and encryption analysis, you will need an Ubertooth One or a Nordic nRF52840 USB Dongle with sniffer firmware.

BLE Security & Attack Detection

Name: BLE Security & Attack Detection
Author: micsapp

bymicsapp

0•

Security & Testing

Analyzes and detects Bluetooth Low Energy security vulnerabilities, including sniffing, replay attacks, and encryption weaknesses.

This skill provides a specialized toolkit for assessing Bluetooth Low Energy (BLE) security in IoT and wireless environments. It facilitates device discovery, GATT service enumeration using the bleak library, and packet capture integration with hardware like Ubertooth One and nRF52840. Designed for security researchers and authorized penetration testers, it offers structured workflows to identify insecure GATT permissions, evaluate pairing strength with crackle, and detect sophisticated Man-in-the-Middle or replay attacks through automated analysis patterns.

Key Features

01Passive BLE packet capture integration with Ubertooth One and nRF52840

02BLE Legacy Pairing encryption analysis and cracking with crackle

03Automated replay attack detection and vulnerability testing workflows

04GATT service and characteristic enumeration using the bleak library

05Man-in-the-Middle and spoofing detection for wireless monitoring

060 GitHub stars

Use Cases

01Analyzing BLE packet captures to identify insecure communication protocols

02Authorized security assessments of IoT devices, medical equipment, and smart locks

03Monitoring wireless infrastructure for unauthorized BLE interactions or signal spoofing

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills detecting-bluetooth-low-energy-attacks

For use in Claude.ai and ChatGPT

Key Features

01Passive BLE packet capture integration with Ubertooth One and nRF52840

02BLE Legacy Pairing encryption analysis and cracking with crackle

03Automated replay attack detection and vulnerability testing workflows

04GATT service and characteristic enumeration using the bleak library

05Man-in-the-Middle and spoofing detection for wireless monitoring

060 GitHub stars

Use Cases

01Analyzing BLE packet captures to identify insecure communication protocols

02Authorized security assessments of IoT devices, medical equipment, and smart locks

03Monitoring wireless infrastructure for unauthorized BLE interactions or signal spoofing

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills detecting-bluetooth-low-energy-attacks

For use in Claude.ai and ChatGPT