Skip to content
Get packs

Evil Twin Wi-Fi Attacks

Guides an agent through rogue Wi-Fi access point attacks: impersonation, KARMA/Mana, captive portal phishing, and traffic interception

Source Download skill
Repository
SnailSploit/Claude-Red
Stars
10,230
Licence
MIT
Files
1 file

What it does

This skill teaches an AI agent a methodology for building a fake Wi-Fi access point that imitates a real network, so nearby devices connect to it instead of the legitimate one. Once connected, the attacker controls the device's traffic, can show fake login pages to harvest credentials, and can attempt to intercept or redirect data. It is written as an offensive security playbook, with commands for tools such as hostapd, wifiphisher, airgeddon, eaphammer, bettercap and aireplay-ng.

Great for

  • Authorized penetration testers preparing a written wireless security assessment
  • Red teams testing whether staff devices auto-connect to rogue networks during an approved engagement
  • Security students working in a lab with their own equipment and networks

Skip it if

  • Anyone targeting public, cafe, hotel or corporate Wi-Fi they do not own or have written permission to test; this is illegal interception and credential theft in most jurisdictions
  • Casual users hoping to pick up other people's logins, since the skill is built around capturing credentials and coercing victims
  • Defenders looking for a detection guide; the skill focuses on evading detection rather than explaining it in depth

Try asking

  • “Walk me through setting up a KARMA and Mana test access point for our authorized wireless assessment”
  • “Build a captive portal test page that mimics our corporate login to see if staff enter credentials”
  • “Explain how to use airgeddon's Evil Twin menu in our lab environment”
Step-by-step guide: how to use Evil Twin Wi-Fi AttacksInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    offensive-evil-twin.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip offensive-evil-twin.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip offensive-evil-twin.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only use this in a lab or under a signed authorization scope; keep records of the engagement and the test networks used
  • Ask the agent to explain the defensive counterpart (WIPS alerts, 802.11w PMF, certificate pinning) alongside each attack step so findings can be reported usefully
  • Use isolated test SSIDs and your own hardware rather than real third-party networks

What's inside

  • SKILL.md

Redistributed unmodified from SnailSploit/Claude-Red under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.