为什么值得关注

该课程结构清晰、动手实践性强，每种攻击都配有检测与缓解措施，涵盖现代WPA3及企业Wi-Fi攻击，并直接对应OSWP、CWSP等认证。

适合谁使用

道德黑客和渗透测试人员
红队操作员和无线安全分析师
备考无线安全认证（OSWP、CWSP、CEH）的学生
希望理解并加固无线网络的防御人员

典型使用场景

自主学习无线渗透测试技术
为认证考试进行动手实验室练习
构建可重复的无线评估方法论用于专业项目
培训蓝队识别和修复无线攻击

项目优势

14个模块循序渐进，覆盖基础到高级企业攻击
每种技术均配套检测与缓解策略，便于防御转换
仅使用Kali Linux上的免费开源工具（aircrack-ng、hashcat、hostapd、Kismet）
直接对应主流无线安全认证（OSWP、CWSP、CEH、Security+）

使用前须知

需要专用且支持注入的Wi-Fi适配器（Atheros AR9271或Ralink RT3070），普通笔记本电脑不常见
部分对时序敏感的攻击（如Chop-Chop、碎片攻击）在虚拟化环境中可靠性较低，可能需要裸机Kali
法律和道德限制仅允许在隔离的自有实验室硬件上练习；未经授权的测试属于违法行为

README 快速开始

Wireless Security & WiFi Penetration Testing

A one-month, lab-driven curriculum that takes a learner from wireless fundamentals to enterprise Wi-Fi penetration testing — 802.11 standards and encryption, monitor-mode capture, reconnaissance and traffic analysis, WEP/WPA/WPA2 cracking, WPA3 and TKIP attacks, rogue access points and wireless MITM, and enterprise (EAP/RADIUS) assessment with professional reporting.

Curriculum home: Vault Catalog

Course Information

Property	Value
Course Title	Wireless Security & WiFi Penetration Testing
Folder	`Wireless-Security-and-WiFi-Penetration-Testing/`
Tag	Wireless Security
Slug	`wifi-pentest`
Level	Advanced
Duration	1 Month (4 Weeks · ~30 Hours)
Focus	Wireless Penetration Testing
Reference Platform	Kali Linux · injection-capable adapters (Atheros AR9271 · Ralink RT3070)
Modules	14
Delivery	Self-paced notes + hands-on labs
Language	English

[!NOTE] What this course is A study-and-practice track built as an Obsidian knowledge base. Each module is a folder with its own Readme hub and a set of single-topic notes containing tagged, copy-ready command snippets. It is designed to be read in order but is fully cross-linked for reference use.

Course Description

Master wireless security testing and Wi-Fi penetration testing end to end: 802.11 standards and frame types, encryption and authentication (WEP, WPA/TKIP, WPA2/CCMP, WPA3), adapter setup for monitor mode and packet injection, reconnaissance and traffic analysis, security-control bypass, denial-of-service, WEP cracking, Chop-Chop and packet-replay attacks, the Caffe Latte client-side attack, WPA/WPA2 handshake and PMKID cracking, Cowpatty and precomputed-table attacks, advanced WPA-TKIP and WPA3 (KRACK/Dragonblood) attacks, rogue access points and wireless MITM — then apply those skills to enterprise WPA (EAP/RADIUS) assessment, wireless hardening, and penetration-test reporting.

The program is delivered through reproducible, hands-on labs against equipment you own and control, so every technique is paired with a working capture, attack, or configuration you can build, break, and defend.

[!WARNING] Authorized testing only Every technique here is documented for education, detection, and d

项目描述

Open, hands-on study notes on wireless security & Wi-Fi penetration testing (802.11, WEP/WPA/WPA2/WPA3, aircrack-ng). CC BY 4.0.

Wireless-Security-and-WiFi-Penetration-Testing