wifi-wireless

Wi-Fi / Wireless Security

ACTION REQUIRED (execute immediately after reading)

1. NOW: Read precedent-pentest;Wireless attacks carry high legal risk, written authorization and physical scope are mandatory
2. NOW: The scope must specify the target SSID/BSSID/site; scanning neighboring networks is prohibited
3. NEXT: Confirm the adapter's monitor mode capability
4. ACT: Reconnaissance → Capture → Analysis (lab first)

Applicable Scenarios

• Authorized Wi-Fi security assessment
• WPA/WPA2 handshake capture and offline assessment
• Rogue AP / phishing hotspot detection research
• Enterprise wireless isolation and portal security

Workflow

□ iwconfig / airmon-ng 进入 monitor（合法环境）
□ airodump-ng 锁定目标 BSSID 频道
□ 握手或 PMKID 采集（仅目标）
□ hashcat/aircrack 离线评估口令策略
□ 报告：加密类型、隔离、门户绕过、建议

Toolchain

Tool	Purpose
aircrack-ng suite	Capture/Assessment
hcxdumptool / hcxtools	PMKID
hashcat	Passphrase assessment
Wireshark	Management frame analysis

References

• references/wireless-lab-rules.md
• ../pentest-tools/ ../attack-chain/(proximity source section)

Routing Context

Upstream: MASTER R29
MUST NOT: Unauthorized deauth, operations against non-target client networks

Task Completion Self-Check

• Is the target BSSID strictly locked on?
• Are hardening recommendations provided in the report?
• Checklist？