路由器逆向技能路由器WiFi无线

NetVar13372026-10-27查看 1347复制 674

用于经授权的无线安全评估,包括 Wi-Fi 抓包、WPA 握手分析、流氓 AP 检测研究以及仅限实验室的 deauth 测试。

Download (.md)

📘如何使用这个技能

  1. 1
    复制技能内容·点击上方「Copy SKILL.md」复制全部内容,或 Download 下载到本地
  2. 2
    打开你的 AI 客户端·支持 Claude Code、Trae、Cursor、ChatGPT、DeepSeek、Kimi 等任意 AI 助手
  3. 3
    粘贴为系统提示/知识文件·Claude Code:放入 .claude/skills/ 目录;普通对话:作为首条消息发送并说「请严格按这份技能文档执行」
  4. 4
    直接提出你的需求·AI 会按技能定义的工作流、格式和约束来处理,无需再解释背景

💡 提示:技能生效后,每次对话只需一句需求,AI 会按 SKILL.md 的流程执行。

SKILL.md1787 chars
---
name: router-reverse-skill-router-wifi-wireless
description: Use for authorized wireless security assessment including Wi-Fi capture, WPA handshake analysis, rogue AP detection research, and lab-only deauth testing.
---

# Wi-Fi / Wireless Security

## ACTION REQUIRED (execute immediately after reading)

1. `NOW`: read precedent-pentest; **wireless attacks carry high legal risk** — written authorization and a physical boundary are mandatory
2. `NOW`: scope states target SSID/BSSID/site; scanning neighbors' networks is forbidden
3. `NEXT`: confirm the adapter's monitor-mode capability
4. `ACT`: reconnaissance → capture → analysis (lab preferred)

## Applicable Scenarios

- Authorized Wi-Fi security assessment
- WPA/WPA2 handshake capture and offline evaluation
- Rogue AP / phishing hotspot detection research
- Enterprise wireless isolation and captive-portal security

## Workflow

```text
□ iwconfig / airmon-ng to enter monitor mode (legal environment)
□ airodump-ng to lock the target BSSID channel
□ Handshake or PMKID capture (target only)
□ hashcat/aircrack offline evaluation of the password policy
□ Report: encryption type, isolation, portal bypass, recommendations
```

## Toolchain

| Tool | Purpose |
|------|------|
| aircrack-ng suite | Capture/evaluation |
| hcxdumptool / hcxtools | PMKID |
| hashcat | Password evaluation |
| Wireshark | Management frame analysis |

## References

- `references/wireless-lab-rules.md`
- `../pentest-tools/` `../attack-chain/` (near-source chapters)

## Routing Context

**Upstream**: MASTER R29  
**MUST NOT**: unauthorized deauth, operations against non-target customer networks

## Task Completion Self-Check

- [ ] Strictly locked onto the target BSSID?
- [ ] Hardening recommendations in the report?
- [ ] Checklist?
来源:skillsdirectory

评论0

登录后参与评论

还没有评论,来抢沙发吧