offensive-tools/wireless/bluez/SKILL.md
Auth/lab ref: BlueZ Bluetooth stack and CLI workflow: Linux, covering bluetoothctl-driven discovery, pairing, BLE inspection, and low-level troubleshooting utilities.
npx skillsauth add aeondave/malskill bluezInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Linux Bluetooth stack and operator toolkit for Bluetooth Classic and BLE discovery, connection, and debugging.
Use BlueZ as the baseline Bluetooth skill when you need:
# verify controller state
bluetoothctl list
bluetoothctl show
# interactive discovery
bluetoothctl
[bluetooth]# power on
[bluetooth]# agent on
[bluetooth]# default-agent
[bluetooth]# scan on
bluetoothctl scan on
bluetoothctl
[bluetooth]# pair AA:BB:CC:DD:EE:FF
[bluetooth]# trust AA:BB:CC:DD:EE:FF
[bluetooth]# connect AA:BB:CC:DD:EE:FF
btmon
Use btmon when pairing, advertising visibility, or GATT behavior is unclear.
BlueZ is the foundation. Prefer it before niche scanners because:
Older tooling such as gatttool or some deprecated tools may still appear in guides, but modern workflows should prefer current BlueZ client tooling where possible.
| Skill | Best use |
|---|---|
| bluez | Core Linux Bluetooth discovery, pairing, monitoring |
| kismet | Passive multi-RF visibility including Bluetooth with supported hardware |
| sparrow-wifi | GUI/agent Bluetooth awareness plus Wi‑Fi/HackRF/Ubertooth workflows |
| File | When to load |
|---|---|
| references/scan-read-debug-workflow.md | For bluetoothctl, BLE scanning, service inspection, and monitor-first debugging workflows |
development
Auth/lab ref: Unicorn Engine CPU-only emulation for shellcode, decryptors, custom VM handlers, instruction tracing, memory hooks, and register-level experiments.
development
Auth/lab ref: Renode board and SoC simulation for MCU/RTOS firmware, UART/GPIO/peripheral modeling, GDB remote debugging, REPL platforms, and RESC scripts.
development
Auth/lab ref: Qiling OS-layer binary emulation for PE/ELF/Mach-O/UEFI/shellcode with rootfs, syscall/API hooks, filesystem mapping, and runtime patching.
databases
Auth/lab ref: QEMU user-mode and full-system emulation for cross-arch binaries, firmware, kernels, disks, serial consoles, networking, and GDB stubs.