SuperAPI AI Directory
Partner中文AI newsFavorites
Skillswifi-wireless

wifi-wireless

Security & auditing

View repository

Updated 10-16 08:49

About this skill

⚠️ AUTHORIZED USE ONLY This skill is for educational purposes or authorized security assessments only. You must have explicit, written permission from the system owner before using this tool. Misuse of this tool is illegal and strictly prohibited.

Mandatory confirmation gate Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:

  1. Ask the user to state the exact target URL, IP, account, or resource.
  2. Ask the user to confirm written authorization and the permitted scope.
  3. Show the exact command(s) and explain their expected effect.
  4. Wait for explicit confirmation in the current conversation.

Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.

Wi-Fi / Wireless Security

When to Use

  • Assessing wireless posture of networks you own or are cleared to test.
  • Studying handshake material captured on your own lab network.

Use Cases

  • Authorized Wi-Fi Security Assessment
  • WPA/WPA2 Handshake Capture and Offline Assessment
  • Rogue AP / Evil Twin Detection Research
  • Enterprise Wireless Isolation and Portal Security

Workflow

□ iwconfig / airmon-ng 进入 monitor（合法环境）
□ airodump-ng 锁定目标 BSSID 频道
□ 握手或 PMKID 采集（仅目标）
□ hashcat/aircrack 离线评估口令策略
□ 报告：加密类型、隔离、门户绕过、建议

Toolchain

Tool Purpose
aircrack-ng suite Capture/Assessment
hcxdumptool / hcxtools PMKID
hashcat Passphrase Assessment
Wireshark Management Frame Analysis

Reference

  • references/wireless-lab-rules.md
  • ../pentest-tools/ ../attack-chain/(Near-Source Section)

Routing Context

Upstream: MASTER R29
MUST NOT: Unauthorized deauth, operations against non-target client networks

Task Completion Self-Check

  • Is the target BSSID strictly locked?
  • Are hardening recommendations provided in the report?
  • Checklist？

Limitations

  • Deauthentication attacks are disruptive and illegal off-lab; lab use only.
  • WPA3 changes several attack surfaces documented here for WPA2.

Adapted from zhaoxuya520/reverse-skill (MIT).