<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# Performing Bluetooth Security Assessment — API & Tool Reference

> Quick reference for tools, commands, and APIs used in performing-bluetooth-security-assessment.

## Tools


### `hcitool`

Bluetooth HCI tool for device interaction

**Usage:**
```bash
hcitool lescan
```

**Key Flags:**
  - `scan: classic BT discovery`
  - `lescan: BLE discovery`
  - `info: device info`
  - `cc: create connection`

---

### `gatttool`

BLE GATT interaction tool

**Usage:**
```bash
gatttool -b <addr> -I
```

**Key Flags:**
  - `-b: BLE device address`
  - `-I: interactive mode`
  - `-t: address type (public/random)`
  - `--characteristics: list chars`

---

### `btlejack`

BLE sniffer and hijacker

**Usage:**
```bash
btlejack -d <addr>
```

**Key Flags:**
  - `-d: target device address`
  - `-o: output pcap file`
  - `-c: existing connection sniff`

---

### `sdptool`

Bluetooth SDP service discovery

**Usage:**
```bash
sdptool browse <addr>
```

**Key Flags:**
  - `browse: discover services`
  - `search: search specific service`
  - `records: raw service records`

---


## Integration Notes

- All tools should be run with least-privilege access appropriate to the task
- Log all tool invocations for audit trail
- Validate tool output before acting on results
- Cross-reference findings with multiple tools where possible

## See Also

- Parent skill: [Wireless Security](../../../SKILL.md)
- Technique SKILL.md: [../SKILL.md](../SKILL.md)
