wifi-pentest

Orchestrate WiFi reconnaissance, handshake capture, and offline cracking workflows.

60|14|Updated Apr 27, 2026
One-click install
npx skills add https://github.com/brucesongs/kali-claw --skill wifi-pentest
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: wifi-pentest
Source: https://github.com/brucesongs/kali-claw/tree/main/skills/wifi-pentest
Command: npx skills add https://github.com/brucesongs/kali-claw --skill wifi-pentest

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

WiFi security testing has often been fragmented across multiple tools and manuals. This Skill consolidates reconnaissance, handshake capture, and offline cracking workflows for WPA2/WPA3, WPS, Evil Twin, and Enterprise testing into a self-contained unit with structured guidance and reusable resources.

Core Features & Use Cases

  • Comprehensive workflows for wireless network discovery, handshake capture, dictionary attacks, and post-exploitation testing.
  • Supplementary files include payloads.md and test-cases.md to standardize test scenarios and evaluation.
  • Covers a range of scenarios from home/SMB networks to Enterprise deployments (802.11i/WPA2/WPA3, WPS, and enterprise EAP testing).

Quick Start

Initiate a targeted WiFi security assessment in a lab environment using the provided payloads.md and test-cases.md to guide reconnaissance, cracking workflows, and defense evaluation.

Frequently Asked Questions about wifi-pentest

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I capture a WPA2 handshake for offline password cracking?

To capture a WPA2 handshake for offline cracking, you orchestrate network reconnaissance followed by targeted deauthentication to force the handshake, then run dictionary attacks against the captured hash.

What is the best way to test WPA3 and Enterprise 802.1X WiFi security?

Testing WPA3 and Enterprise 802.1X security involves orchestrating reconnaissance and specialized attack workflows against these protocols to evaluate authentication mechanisms in enterprise or lab environments.

Can I use this workflow for Evil Twin and WPS testing scenarios?

Yes, the workflow supports Evil Twin and WPS testing scenarios, providing structured guidance to standardize test cases and evaluate network defense mechanisms across these specific vectors.

Do I need specific lab environments to run WiFi pentest workflows?

WiFi pentest workflows apply to both enterprise and lab environments, utilizing supplementary files like payloads.md and test-cases.md to standardize test scenarios and guide the assessment process.

Why standardize WiFi security assessments using supplementary files?

Standardizing WiFi security assessments with supplementary files ensures consistent test scenarios and evaluation criteria, consolidating fragmented wireless testing workflows into a single, reusable unit.

What is a deauthentication attack in WiFi pentesting?

A deauthentication attack in WiFi pentesting is a technique used during reconnaissance to forcefully disconnect clients, prompting them to reconnect and allowing the capture of the WPA2 handshake for offline cracking.