Skip to content
Get packs

WPA-Enterprise Wi-Fi Attack Playbook

Guides an agent through attacking 802.1X/EAP corporate Wi-Fi: evil-twin credential capture, cracking, and AD pivots

Source Download skill
Repository
SnailSploit/Claude-Red
Stars
10,230
Licence
MIT
Files
1 file

What it does

This skill gives an AI agent a detailed offensive-security methodology for corporate Wi-Fi that uses WPA-Enterprise (802.1X/EAP) login with a RADIUS server, rather than a shared password. It walks through identifying the EAP method, setting up a rogue access point (eaphammer) to capture username and challenge-response pairs, cracking them offline (asleap, hashcat), targeting client certificates, and pivoting into Active Directory with credential tools. It also includes defender mitigations and detection signals.

Great for

  • Authorized penetration testers running a sanctioned wireless engagement against 802.1X networks
  • Red team operators who want a checklist of EAP attack paths and tool commands
  • Blue teams wanting to understand how evil-twin RADIUS attacks work so they can harden supplicant validation

Skip it if

  • Attacking Wi-Fi networks you do not own or lack written authorization to test: capturing credentials from others is illegal and causes real harm
  • Home or WPA2-PSK networks, since the skill explicitly targets enterprise 802.1X setups, so it is the wrong tool and the wrong scope
  • Beginners without wireless hardware and a lab, since the steps assume monitor mode, root access, and familiarity with AD tooling

Try asking

  • “Map the EAP methods used by our corporate Wi-Fi during an authorized wireless pentest”
  • “Walk me through the evil-twin RADIUS workflow with eaphammer for our client's CorpWiFi network”
  • “Explain how to check whether a Windows wireless profile enforces server certificate validation”
  • “Plan the post-crack AD enumeration steps after capturing MSCHAPv2 credentials in our test”
Step-by-step guide: how to use WPA-Enterprise Wi-Fi Attack PlaybookInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    offensive-wpa-enterprise.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip offensive-wpa-enterprise.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip offensive-wpa-enterprise.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only use this skill with a signed scope-of-work and explicit permission covering the wireless network and in-scope targets
  • Ask the agent to explain each step's purpose and risk, and to confirm the scope before running any command against a live network
  • Treat the included commands as reference material to review, since the skill itself contains no scripts and the agent will run whatever tools you approve

What's inside

  • SKILL.md

Redistributed unmodified from SnailSploit/Claude-Red under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.