analyze_wifi_security

Deep analysis of BLE security — GATT services, pairing methods, LE Secure Connections, characteristic encryption

Analyze captive portal security — bypass techniques, credential harvesting risks, network isolation, guest VLAN security

Analyze cellular network security — 2G/3G/4G/5G protocol weaknesses, IMSI catcher detection, fake base station analysis

Analyze deauthentication attack vectors — 802.11w PMF status, deauth detection, countermeasures, WIDS integration

Analyze drone RF security — control link hijacking, GPS spoofing, video downlink interception, counter-UAS techniques

Analyze Hotspot 2.0 (Passpoint) security — ANQP, OSU, automatic network selection risks, EAP method analysis

Analyze medical device wireless security — infusion pumps, pacemakers, patient monitors, FDA guidance, HIPAA requirements

Analyze Miracast/WiFi Display security — WFD session hijacking, screen capture, unauthorized display access

Analyze NFC/RFID security — card type identification, access control weaknesses, cloning feasibility, Proxmark3 methodology

Analyze PMKID-based attack vectors — clientless WPA/WPA2 cracking via hcxdumptool + hashcat mode 22000

Analyze RF signal security — frequency analysis, modulation identification, replay attack feasibility, SDR tool recommendations

Analyze Ultra-Wideband (UWB) security — ranging manipulation, relay attacks on car key fobs and AirTags, distance fraud

Analyze WiFi Channel State Information (CSI) security — passive sensing, activity recognition, keystroke inference risks

Analyze WiFi Direct (P2P) security — group owner negotiation attacks, WPS vulnerabilities in P2P, rogue group formation

Analyze Zigbee network security — trust center policy, network key management, KillerBee attack methodology

Audit WiFi 6 (802.11ax) and WiFi 7 (802.11be) specific security features — OWE, SAE, Enhanced Open, Multi-Link Operation

Audit wireless network against compliance frameworks — PCI-DSS 4.0, HIPAA, NIST 800-153, FedRAMP, ISO 27001 wireless controls

Audit WLAN controller configuration — Cisco WLC, Aruba, Meraki security settings, rogue AP policies, RF management

Analyze WPS cracking attack vectors — Pixie Dust, brute force, null PIN, default PIN generation, Reaver/Bully methodology

Analyze MAC address randomization — iOS/Android/Windows implementation differences, tracking resistance, fingerprinting bypasses

Detect wireless attacks in progress — deauth floods, evil twin, KARMA, rogue AP, BLE spoofing, RF jamming indicators

Export wireless security assessment report — findings, risk ratings, compliance status, remediation roadmap, executive summary

Find applicable Bluetooth attacks — BlueBorne, KNOB, BIAS, BLE relay, MITM, with tools and mitigations

Analyze MouseJack wireless keyboard/mouse vulnerabilities — keystroke injection, unencrypted HID, vendor-specific bypasses

Find applicable attacks for a WiFi target — returns attack methodology, required tools, MITRE ATT&CK mapping, mitigations

Look up wireless security hardware — WiFi adapters, Bluetooth sniffers, SDR devices, capabilities, chipset compatibility

Look up wireless-specific CVEs — WiFi chipset vulnerabilities, Bluetooth stack CVEs, driver exploits, firmware bugs

Map wireless attacks to MITRE ATT&CK framework — technique IDs, tactic categories, detection strategies

Scan and analyze Bluetooth devices — BR/EDR classic and BLE discovery, service enumeration, pairing analysis

Scan IoT wireless protocols — Zigbee, Z-Wave, MQTT, LoRaWAN, CoAP discovery and vulnerability analysis

Scan and analyze WiFi networks — discover SSIDs, channels, encryption types, signal strength, and security misconfigurations

Simulate and analyze evil twin AP attack scenarios — hostapd-mana configuration, captive portal, credential capture methodology