$npx -y skills add 0dayInc/pwn --skill bluetooth --agent claude-code
Installs into .claude/skills of the current project.
Are you the author of Bluetooth?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/0dayinc-bluetooth)
---
name: pwn-sdr-decoder-bluetooth
description: Drive PWN::SDR::Decoder::Bluetooth from pwn_eval.
license: MIT
allowed-tools: [pwn, pwn_eval]
metadata:
bundled: true
generated: true
module: PWN::SDR::Decoder::Bluetooth
source: pwn/sdr/decoder/bluetooth.rb
---
# PWN::SDR::Decoder::Bluetooth
Bluetooth LE 1M single-channel advertising/connected PDU decoder. I/Q → continuous Ruby FM/NRZ fallback at 1 Mbit/s → hunt LSB-first Access Address (adv = 0x8E89BED6) → dewhiten (7-bit LFSR seeded ch|0x40) → PDU header (type/len) → AdvA (6 bytes) → CRC-24 (poly 0x65B, init 0x555555). Emits per-PDU {access_addr:, pdu_type:, adv_addr:, crc_ok:}. CRC failures are rejected. Connected packets require explicit AA, CRCInit and encryption state. CTE header is parsed; no direction finding, hopping, L2CAP assembly, 2M/coded PHY or decryption.
## When to use
Call `PWN::SDR::Decoder::Bluetooth` from `pwn_eval` when the task needs this module.
Do not reimplement it in shell.
## Methodologies
Generated from `pwn/sdr/decoder/bluetooth.rb`. Prefer the public class methods below.
Class methods take `(opts = {})` and read `opts`.
## How to call
```ruby
PWN::SDR::Decoder::Bluetooth.help
PWN::SDR::Decoder::Bluetooth.parse(opts)
```
## Public methods
- `parse`
- `ble_crc24`
- `decode`
- `detect`
- `parse_line`
- `authors`
- `help`
## Source
`pwn/sdr/decoder/bluetooth.rb`
## Verification
`PWN::SDR::Decoder::Bluetooth.respond_to?(:parse)` after the
module is loaded. Read the source for parameter names.
