skills.rest
SnailSploit
SnailSploitCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

offensive-krack-fragattacks

Tests WPA2 supplicants for KRACK and FragAttacks vulnerabilities using Vanhoef's test scripts.

3.0k|491|Updated Mar 4, 2026
Search Tags:#penetration testing#wireless security#wpa2#krack#fragattacks#iot testing#key reinstallation
One-click install
npx skills add https://github.com/SnailSploit/Claude-Red --skill offensive-krack-fragattacks
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: offensive-krack-fragattacks
Source: https://github.com/SnailSploit/Claude-Red/tree/main/Skills/wireless/offensive-krack-fragattacks
Command: npx skills add https://github.com/SnailSploit/Claude-Red --skill offensive-krack-fragattacks

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security testers need a structured methodology to assess whether Wi-Fi clients—especially legacy embedded and IoT devices—remain vulnerable to KRACK key reinstallation and FragAttacks frame fragmentation attacks, despite these CVEs being largely patched on modern operating systems.

Core Features & Use Cases

  • KRACK Testing: Runs Vanhoef's krack-test-client.py against supplicants to identify which CVE-2017-13077..082 variants remain exploitable in the 4-way handshake.
  • FragAttacks Testing: Executes the ~12-test FragAttacks suite covering A-MSDU spoofing, mixed-key fragment cache poisoning, and plaintext frame acceptance (CVE-2020-24586..588, 26139-26147).
  • Targeting Workflow: Guides rogue AP setup with hostapd-mana, deauthentication to force client association, and per-CVE reporting with remediation guidance.
  • Use Case: During an authorized engagement against a warehouse full of legacy IoT sensors, use this Skill to stand up a test AP, associate an unpatched embedded client, and document which KRACK/FragAttacks variants succeed for the final report.

Quick Start

Ask Claude to test a connected WPA2 client for KRACK and FragAttacks vulnerabilities using Vanhoef's scripts on interface wlan0.

Frequently Asked Questions about offensive-krack-fragattacks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test a Wi-Fi client for KRACK vulnerabilities?▼

Clone vanhoefm/krackattacks-scripts and run krack-test-client.py against the supplicant from a controlled AP. The script reports which CVE-2017-13077..082 variants the client is vulnerable to based on 4-way handshake retransmission behavior.

How do I run FragAttacks tests against a WPA2 client?▼

Clone vanhoefm/fragattacks and run test-fragattacks.py on your wireless interface. The suite executes roughly 12 tests covering A-MSDU spoofing, mixed-key fragment cache poisoning, and plaintext frame acceptance variants.

Are KRACK and FragAttacks still viable against modern devices?▼

Mostly no—Windows 11, iOS 16+, Android 13+, and hostapd 2.10 are mitigated. Success is likely only against embedded OEM devices, pre-Android-8 phones, industrial clients, and no-name IoT products with poor patch cadence.

Does KRACK recover the Wi-Fi password?▼

No, KRACK does not recover the PSK. It forces PTK reinstallation with reset nonces, enabling decryption of frames during the affected key cycle and, with TKIP, packet injection.

What are the limitations of KRACK and FragAttacks testing?▼

Testing requires a rogue AP and forcing the client to associate, often via deauthentication, which WIPS may detect. Modern patched clients yield no results, and Vanhoef's tooling produces distinctive frame patterns recognized by current WIPS products.

Related Skills

Explore More Software Engineering Skills→
trilwutrilwu
109

attacking-wireless-networks

Guide wireless network pentesting with structured workflows and tooling integration.

Community
Advanced
limit5limit5

SKILL_HD_CVE_IMPACT

Map CVE entries to affected components in a Software Bill of Materials.

Community
Intermediate
AcczdyAcczdy
2

conducting-wireless-network-penetration-test

Scan access points, detect rogue devices, and capture WPA handshakes.

Community
Advanced
blacklanternsecurityblacklanternsecurity
253

credential-cracking

Crack password hashes and encrypted files using hashcat and john.

Official
Advanced