0xreversed/with.ai
By target

Reverse engineer Bluetooth devices with AI

Many Bluetooth devices only work with the maker's phone app. If the app is abandoned or the cloud service closes, the device stops being useful. The projects on this page used a language model to work out the Bluetooth Low Energy or Bluetooth mesh protocol behind a device, so it could be controlled locally, often from Home Assistant. The usual inputs are a decompiled Android companion app, which shows exactly how each command is built, and a log of real traffic from tools such as btmon or Apple's PacketLogger. The model reads both, proposes a message format, and writes a small client. The person then sends each command to the device and reports what happened. This loop works well for lights, batteries and sensors, because each command has a visible effect. Each entry links the author's writeup or repo and lists the model, tools and outcome.

Projects
6
Outcomes
Works5Partial1
Models used
Claude5GPT1
6 projects

The projects

Works
Blog · APIs and protocols
Pick

Controlled Amaran studio lights over Bluetooth mesh without the vendor app

$91.34 and 3.5 hours of /goal later, the lights work without the app.

Time About 3.5 hoursCost $91.34
Works
GitHub · Firmware and hardware

Decoded the Fire TV Alexa remote's Bluetooth voice audio and buttons with Claude Code

Voice audio over Bluetooth HID, decoded so the remote records straight to WAV.

Model Claude
Partial
Blog · Firmware and hardware

Reverse engineered a Bluetooth cat-shaped thermal printer with ChatGPT's help

No Bluetooth background, a cat-shaped printer, and dithered images printing.

Model ChatGPT
Works
Blog · Firmware and hardware

Revived a cloud-dependent BLE energy monitor by reverse engineering it with Claude Code

The vendor went bankrupt; the meter now talks to Home Assistant locally.

Time A couple of evenings for the live-hardware phase
Works
Blog · APIs and protocols

Reverse engineered a home battery's Bluetooth and cloud protocols in one day

A home battery's Bluetooth and cloud protocols, documented in one day.

Time About 8 hours, in one day
Works
Blog · APIs and protocols

Bluetti inverter cloud API and BLE protocol, bridged to Home Assistant

A home battery's cloud and Bluetooth protocols, into Home Assistant in an evening.

Time One evening for the cloud gateway, a weekend for BLE
Did something like this?

Share the writeup or repo, and what the AI got right and wrong.

Submit a project
Learn

Related guides

Tools

Tools these projects used

All tools
FAQ

Common questions

Decompile the companion app with JADX, capture real traffic with btmon or PacketLogger, and give both to an agent such as Claude Code. Ask it for the message format and a small test client, then check each command on the device.

Explore

Other topics