Skip to content

Offensive Wi-Fi Reconnaissance

Guides an agent through passive mapping of nearby Wi-Fi networks before any active wireless testing

Stars
10,230
Licence
MIT
Files
1 file

What it does

This skill teaches an AI agent a structured methodology for the first phase of a wireless security assessment: choosing a compatible Wi-Fi adapter, putting it into monitor mode, setting the legal regulatory domain, and passively sweeping 2.4, 5 and 6 GHz networks to build a target list. It covers identifying access points, their encryption and client devices, and vendor lookups, with commands for tools like airodump-ng and Kismet. It is written as offensive-security guidance, so it is aimed at people already doing authorized penetration testing rather than general Wi-Fi troubleshooting.

Great for

  • Security professionals running an authorized wireless penetration test who want a checklist-driven recon workflow
  • Students learning the wireless recon phase in a lab or with explicit permission
  • Red teamers preparing a target map before escalating to active attacks

Skip it if

  • Scanning or probing networks you do not own or have written authorization to test, since the skill's commands would be illegal and harmful in that case
  • Home network troubleshooting or ordinary Wi-Fi setup, which these tools and steps do not address
  • Users without suitable hardware, as monitor mode and injection need specific USB adapters and Linux drivers

Try asking

  • “Walk me through setting up a Alfa AWUS036ACH adapter for monitor mode and checking packet injection on Kali for my authorized lab test”
  • “Build a passive sweep plan across 2.4 and 5 GHz for our client's office Wi-Fi and list the fields to record per access point”
  • “Explain how to identify hidden SSIDs and vendor OUI for the access points in my capture file”
  • “Create an engagement cheatsheet with setup, sweep, and per-BSSID drill-down commands for our scoped wireless test”
Step-by-step guide: how to use Offensive Wi-Fi ReconnaissanceInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    offensive-wifi-recon.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip offensive-wifi-recon.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip offensive-wifi-recon.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Confirm written authorization and scope (ROE) before running any command, since the skill itself repeatedly warns about this
  • Stay in passive mode first; the skill notes active probes can be detected by wireless intrusion detection systems
  • Ask the agent to set the regulatory domain to your legal location so channel and power choices stay compliant

What's inside

  • SKILL.md

Redistributed unmodified from SnailSploit/Claude-Red under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.