---

name: wifi-wireless description: "Authorized wireless security assessment: Wi-Fi capture, WPA handshake analysis, rogue AP detection research, and lab-only deauthentication testing." risk: offensive source: "https://github.com/zhaoxuya520/reverse-skill" source_repo: "zhaoxuya520/reverse-skill" source_type: community date_added: "2026-08-25" license: "MIT" license_source: "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"

⚠️ AUTHORIZED USE ONLY This skill is for educational purposes or authorized security assessments only. You must have explicit, written permission from the system owner before using this tool. Misuse of this tool is illegal and strictly prohibited.

Mandatory confirmation gate Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:

1. Ask the user to state the exact target URL, IP, account, or resource.
2. Ask the user to confirm written authorization and the permitted scope.
3. Show the exact command(s) and explain their expected effect.
4. Wait for explicit confirmation in the current conversation.

Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.

Wi-Fi / Wireless Security

When to Use

• Assessing wireless posture of networks you own or are cleared to test.
• Studying handshake material captured on your own lab network.

适用场景

• 授权 Wi-Fi 安全评估
• WPA/WPA2 握手采集与离线评估
• 流氓 AP / 钓鱼热点检测研究
• 企业无线隔离与门户安全

工作流

□ iwconfig / airmon-ng 进入 monitor（合法环境）
□ airodump-ng 锁定目标 BSSID 频道
□ 握手或 PMKID 采集（仅目标）
□ hashcat/aircrack 离线评估口令策略
□ 报告：加密类型、隔离、门户绕过、建议

工具链

工具	用途
aircrack-ng suite	采集/评估
hcxdumptool / hcxtools	PMKID
hashcat	口令评估
Wireshark	管理帧分析

参考

• references/wireless-lab-rules.md
• ../pentest-tools/ ../attack-chain/（近源章节）

路由上下文

上游: MASTER R29
MUST NOT: 未授权 deauth、对非目标客户网络操作

任务完成自检

• 是否严格锁定目标 BSSID？
• 是否在报告中给出加固建议？
• Checklist？

Limitations

• Deauthentication attacks are disruptive and illegal off-lab; lab use only.
• WPA3 changes several attack surfaces documented here for WPA2.

Adapted from zhaoxuya520/reverse-skill (MIT).