wifi-wireless

> ⚠️ AUTHORIZED USE ONLY

> This skill is for educational purposes or authorized security assessments only.

> You must have explicit, written permission from the system owner before using this tool.

> Misuse of this tool is illegal and strictly prohibited.

> Mandatory confirmation gate

> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:

> 1. Ask the user to state the exact target URL, IP, account, or resource.

> 2. Ask the user to confirm written authorization and the permitted scope.

> 3. Show the exact command(s) and explain their expected effect.

> 4. Wait for explicit confirmation in the current conversation.

>

> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.

Wi-Fi / Wireless Security

When to Use

• Assessing wireless posture of networks you own or are cleared to test.
• Studying handshake material captured on your own lab network.

适用场景

• 授权 Wi-Fi 安全评估
• WPA/WPA2 握手采集与离线评估
• 流氓 AP / 钓鱼热点检测研究
• 企业无线隔离与门户安全

工作流

□ iwconfig / airmon-ng 进入 monitor（合法环境）
□ airodump-ng 锁定目标 BSSID 频道
□ 握手或 PMKID 采集（仅目标）
□ hashcat/aircrack 离线评估口令策略
□ 报告：加密类型、隔离、门户绕过、建议

工具链

| 工具 | 用途 |

|------|------|

| aircrack-ng suite | 采集/评估 |

| hcxdumptool / hcxtools | PMKID |

| hashcat | 口令评估 |

| Wireshark | 管理帧分析 |

参考

• references/wireless-lab-rules.md
• ../pentest-tools/ ../attack-chain/（近源章节）

路由上下文

上游: MASTER R29

MUST NOT: 未授权 deauth、对非目标客户网络操作

任务完成自检

• [ ] 是否严格锁定目标 BSSID？
• [ ] 是否在报告中给出加固建议？
• [ ] Checklist？

Limitations

• Deauthentication attacks are disruptive and illegal off-lab; lab use only.
• WPA3 changes several attack surfaces documented here for WPA2.

> Adapted from zhaoxuya520/reverse-skill (MIT).