HackIndex

en

Language

Platform

Wireless

Wireless pentesting covering monitor mode setup, passive recon, AP and client enumeration, PMKID capture, WEP/WPA cracking, rogue APs, and post-auth traffic decryption

35 guides 6 phases

Setup and Hardware

Monitor mode setup, adapter selection, drivers, and chipsets

Identifying Wireless Chipsets and Drivers in Kali

Mar 17, 2026 • 2 min read

Setting Up Monitor Mode in Kali

Setting Up Monitor Mode in Kali

Mar 17, 2026 • 3 min read

Wireless Adapter Pentesting: Chipsets and Hardware

Wireless Adapter Pentesting: Chipsets and Hardware

Covers selecting compatible wireless adapters for pentesting, focusing on chipset support, monitor mode, packet injection capabilities, and driver compatibility.

Mar 17, 2026 • 3 min read

Wireless Driver Management in Kali

Mar 17, 2026 • 4 min read

Reconnaissance

Guides on passive scanning, WPS discovery, and frame analysis

802.11 Frame Analysis with Wireshark and tshark

Mar 17, 2026 • 3 min read

Passive Wireless Scanning with airodump-ng

Mar 17, 2026 • 3 min read

Passive Wireless Scanning with Kismet

Discover and fingerprint wireless networks passively using Kismet to capture beacon frames, probe requests, and device metadata without transmitting packets.

Mar 17, 2026 • 3 min read

WPS Network Discovery with wash

Mar 17, 2026 • 2 min read

Enumeration

AP clients, auth types, PMKID capture, and remote sniffing

Enumerating AP Capabilities and Clients

Mar 17, 2026 • 4 min read

Identifying Enterprise vs Personal Authentication

Mar 17, 2026 • 3 min read

PMKID Capture with hcxdumptool and hcxtools

PMKID Capture with hcxdumptool and hcxtools

Capture PMKID hashes from WPA/WPA2 networks without de-authentication using hcxdumptool, then convert and crack with hcxtools and hashcat.

Mar 17, 2026 • 3 min read

Remote Wireless Packet Capture over SSH

Mar 17, 2026 • 3 min read

Vulnerability Discovery

Guides for finding weak wireless configs and attack surfaces

Detecting Captive Portal Bypass Opportunities

Mar 17, 2026 • 3 min read

Detecting Open Wireless Networks

Mar 17, 2026 • 2 min read

Detecting WEP Networks

Mar 17, 2026 • 3 min read

Detecting WPA Enterprise PEAP Without Certificate Validation

Detecting WPA Enterprise PEAP Without Certificate Validation

Mar 17, 2026 • 2 min read

Detecting WPA2 Networks Without MFP

Mar 17, 2026 • 3 min read

Detecting WPS Vulnerable Networks

Mar 17, 2026 • 3 min read

Exploitation

WEP/WPA cracking, evil twins, EAP harvest, rogue APs, WPS attacks

ARP Spoofing and Traffic Interception with Bettercap

Mar 17, 2026 • 2 min read

Captive Portal Credential Harvesting

Mar 17, 2026 • 2 min read

Capturing Plaintext Traffic on Open Networks

Mar 17, 2026 • 3 min read

Cracking MSCHAPv2 with Asleap and Hashcat

Mar 17, 2026 • 2 min read

Evil Twin AP with hostapd-mana and Aireplay-ng

Evil Twin AP with hostapd-mana and Aireplay-ng

Creates a rogue AP cloning a legitimate SSID using hostapd-mana, forcing client deauthentication via Aireplay-ng to capture credentials or handshakes.

Mar 17, 2026 • 2 min read

Harvesting EAP Credentials with hostapd-mana

Mar 17, 2026 • 3 min read

Post-Exploitation

Decrypt traffic, recon networks, and map AP relationships post-auth

Decrypting WPA Traffic with Airdecap-ng and Wireshark

Decrypting WPA Traffic with Airdecap-ng and Wireshark

Decrypt captured WPA/WPA2 wireless traffic using Airdecap-ng and Wireshark after obtaining the PSK or PMKID during post-exploitation analysis.

Mar 17, 2026 • 3 min read

Manual Network Connection with wpa_supplicant

Mar 17, 2026 • 2 min read

Network Reconnaissance After Wireless Access

Mar 17, 2026 • 3 min read

Visualising AP and Client Relationships with airgraph-ng

Mar 17, 2026 • 3 min read