References

Theory

• https://solstice.sh/2019/10/28/modern-wireless-tradecraft-pt-i-mbasic-rogue-ap-theory-evil-twin-and-karma-attacks/
• https://solstice.sh/2019/11/04/modern-wireless-tradecraft-pt-ii-mana-and-known-beacon-attacks/
• https://solstice.sh/2019/11/12/modern-wireless-tradecraft-pt-iii-management-frame-access-control-lists-mfacls/
• https://solstice.sh/2019/11/22/modern-wireless-tradecraft-pt-iv-tradecraft-and-defensive-strategy/
• https://solstice.sh/2019/09/10/eap-downgrade-attacks/
• https://book.hacktricks.xyz/pentesting/pentesting-network/wifi-attacks
• https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20workshops/DEF%20CON%2025%20-%20Workshop-Gabriel-Ryan-Advanced-Wireless-Attacks-Against-Enterprise-Networks-Course-Guide.pdf
• https://mrncciew.com/2014/08/24/cwsp-eap-basics/
• https://mrncciew.com/2014/08/24/cwsp-eap-leap/
• https://mrncciew.com/2014/08/25/cwsp-eap-peap/
• https://mrncciew.com/2014/08/26/cwsp-eap-fast/
• https://mrncciew.com/2014/08/26/cwsp-eap-tls/
• https://w1f1.net/
• https://pwn.no0.be/exploitation/wifi/wpa_enterprise/
• https://cs.piosky.fr/wifi/rogue_mana/mana/
• https://medium.com/@adam.toscher/wireless-penetration-tips-c0ed0a6665fe
• https://github.com/s0lst1c3/eaphammer/wiki
• https://sensepost.com/blog/2019/peap-relay-attacks-with-wpa_sycophant/
• DEFCON 22 - Dominic White and Ian de Villiers - Manna from Heaven - https://www.youtube.com/watch?v=i2-jReLBSVk
• DEFCON 25 - Gabriel Ryan - The Black Art of Wireless Post Exploitation - https://www.youtube.com/watch?v=Bp2JE-4VinY
• DEFCON 26 - singe - Practical and Improved Wifi MitM with Mana - https://www.youtube.com/watch?v=eYsGyvGxlpI
• Hacking Exposed: Wireless Security

Tools

• https://www.aircrack-ng.org
• https://github.com/kismetwireless/kismet
• https://github.com/daddycocoaman/BeaconGraph
• https://github.com/aircrack-ng/mdk4
• https://github.com/derv82/wifite2
• https://github.com/gabrielrcouto/reaver-wps
• https://github.com/wiire-a/bully
• https://github.com/ZerBea/hcxdumptool
• https://github.com/ZerBea/hcxtools
• https://github.com/joswr1ght/cowpatty
• https://github.com/JPaulMora/Pyrit
• https://github.com/P0cL4bs/wifipumpkin3
• https://github.com/FluxionNetwork/fluxion
• https://github.com/wifiphisher/wifiphisher
• https://github.com/v1s1t0r1sh3r3/airgeddon
• https://github.com/Shellntel/scripts/blob/master/crEAP.py
• https://github.com/s0lst1c3/eaphammer
• https://github.com/joswr1ght/eapmd5pass
• https://github.com/joswr1ght/asleap
• https://github.com/sensepost/hostapd-mana
• https://github.com/sensepost/berate_ap
• https://github.com/sensepost/wpa_sycophant
• https://www.bettercap.org/
• https://github.com/lgandx/PCredz
• https://github.com/DanMcInerney/net-creds
• https://github.com/tecknicaltom/dsniff