Files
T

1.0 KiB

Standards — Wireless Penetration Testing

Standards

  • IEEE 802.11: Wireless LAN standard
  • WPA3 (WiFi Protected Access 3): Latest security protocol using SAE
  • NIST SP 800-153: Guidelines for Securing Wireless Local Area Networks
  • PCI DSS v4.0 Req 11.2: Wireless access point detection

Wireless Encryption Comparison

Protocol Key Management Crackable Notes
WEP Static IV Trivially Deprecated, never use
WPA-TKIP PSK/Enterprise Possible Legacy, avoid
WPA2-PSK PBKDF2/CCMP Dictionary attacks Requires strong passphrase
WPA2-Enterprise 802.1X/RADIUS Certificate attacks Recommended with cert pinning
WPA3-SAE Dragonfly handshake Resistant Best current option

Tools

Tool Purpose
Aircrack-ng Full wireless testing suite
Kismet Wireless IDS and scanner
Bettercap Network attack framework
Wifite Automated WiFi attack tool
hcxdumptool PMKID capture
Reaver WPS PIN bruteforce