Skip to content
Get packs

KRACK & FragAttacks Wi-Fi Testing

Guides testing WPA2 Wi-Fi clients for KRACK and FragAttacks key-reinstall and frame-fragmentation flaws

Source Download skill
Repository
SnailSploit/Claude-Red
Stars
10,230
Licence
MIT
Files
1 file

What it does

This skill gives an AI agent a playbook for assessing whether Wi-Fi client devices are vulnerable to two published attack families against WPA2: KRACK (key reinstallation) and FragAttacks (fragmentation and aggregation flaws). It explains which devices are likely still exposed, such as old Android phones and embedded or IoT gear, and which are mitigated, such as modern patched operating systems. It also walks through the test tools, the CVE variants to check, and how to write up findings for remediation. It is an offensive security reference, so the agent is steered toward authorized penetration testing rather than general Wi-Fi usage.

Great for

  • Penetration testers with written authorization assessing embedded or legacy Wi-Fi clients
  • Security teams auditing IoT, point-of-sale, or industrial devices with poor patch cadence
  • Students learning how WPA2 client-side vulnerabilities were discovered and tested

Skip it if

  • Attacking networks or devices you do not own or lack written permission to test, since this may be illegal and causes real disruption
  • Home users trying to secure a router; the skill focuses on attack testing and mitigation is only a short note (WPA3 and PMF)
  • Quick fixes on modern devices, because the skill itself notes most current OSes are patched and the attacks are largely mitigated

Try asking

  • “Assess the embedded Wi-Fi client in our in-scope point-of-sale terminals for KRACK and FragAttacks variants and write a remediation report”
  • “Outline a controlled test setup for checking whether an old Android phone in our lab is vulnerable to the FragAttacks CVEs”
  • “Explain which CVE variants apply to a legacy IoT smart bulb and what impact each would have in our engagement”
Step-by-step guide: how to use KRACK & FragAttacks Wi-Fi TestingInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    offensive-krack-fragattacks.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip offensive-krack-fragattacks.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip offensive-krack-fragattacks.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only run the test scripts against devices you have explicit written permission to test, and keep the test AP isolated from production networks.
  • Ask the agent to report each CVE variant separately with client model and firmware version, as the skill's reporting section requires.
  • Verify the referenced tool repositories and their current code yourself before running anything, since the skill directs the agent to clone and execute external scripts.

What's inside

  • SKILL.md

Redistributed unmodified from SnailSploit/Claude-Red under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.