Skip to content

WPA2 Wi-Fi Password Attacks

Guides an agent through offensive WPA/WPA2-PSK Wi-Fi password capture and offline cracking methodology

Stars
10,230
Licence
MIT
Files
1 file

What it does

This is a security playbook that teaches an AI agent how to test the password of a WPA/WPA2 Wi-Fi network: capturing a PMKID or handshake from the air, converting it to a format hashcat understands, and then guessing the password offline with wordlists, masks and known vendor default-password generators. It is written as an offensive methodology, so the agent will produce concrete commands and step-by-step workflows for breaking into Wi-Fi networks. It does not itself run anything; the agent would need a Wi-Fi adapter and the named tools installed.

Great for

  • Authorized penetration testers assessing Wi-Fi security under a signed scope
  • Security students practising on their own lab access points
  • Red teams preparing wireless engagement reports on consumer or SMB networks

Skip it if

  • Attacking any Wi-Fi network you do not own or have written permission to test; unauthorized access is illegal in most jurisdictions
  • Neighbours' or public hotspots, where the risk and legal exposure is high and the skill gives no benefit to a defender
  • Beginners hoping for a one-click tool: it assumes working knowledge of monitor mode, aircrack-ng and hashcat

Try asking

  • “Walk me through a PMKID attack against the access point listed in my authorized targets file”
  • “Build a hashcat mask attack for 10-digit ISP default passwords on this in-scope router”
  • “Explain which WIDS signals a targeted deauth would trigger and how to minimise them during our engagement”
  • “Create an engagement cheatsheet for testing WPA2-PSK on the client's office network”
Step-by-step guide: how to use WPA2 Wi-Fi Password AttacksInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    offensive-wpa2-psk.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip offensive-wpa2-psk.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip offensive-wpa2-psk.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only use the targets list and scope you have written authorization for; the skill itself tells you to restrict hcxdumptool to authorized BSSIDs with --filtermode=2
  • Try the low-noise PMKID method before deauthentication, and deauth only a single client MAC rather than broadcasting
  • Pair the output with your own engagement log so every capture and crack attempt is traceable for the client report

What's inside

  • SKILL.md

Redistributed unmodified from SnailSploit/Claude-Red under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.