domains / families / security / offensive-wifi-recon

offensive-wifi-recon

separate

Wi-Fi reconnaissance methodology — adapter selection, monitor mode and packet injection setup, regulatory domain handling, multi-band airspace mapping, hidden SSID discovery, BSSID/ESSID/channel/PMF/encryption fingerprinting, client probe analysis, vendor OUI lookup, war-driving with Kismet/airodump-ng/Wigle, and structured airspace data capture for downstream attacks. Use at the start of any wireless engagement to build the target map before active attacks; covers 2.4 GHz, 5 GHz, and 6 GHz (Wi-Fi 6E) bands and adapter compatibility for each.

When to use

• adapter selection
• monitor mode and packet injection setup
• regulatory domain handling
• multi-band airspace mapping
• hidden SSID discovery
• BSSID/ESSID/channel/PMF/encryption fingerprinting
• client probe analysis
• war-driving with Kismet/airodump-ng/Wigle

When not to use

• active attacks
• deauth
• evil-twin
• handshake capture

Skill page

Source