2Wireless_Reconnaissance - amoskim318/Wireless_Security_Testing_And_Hardening GitHub Wiki

Wireless Reconnaissance

  1. Overview

Wireless reconnaissance is the initial stage of the assessment. It involves identifying wireless access points and observing their advertised characteristics to establish a baseline for further security testing.

  1. Wireless Interface Verification

The TP-Link wireless adapter was connected to the Kali Linux system. The interface was identified and checked to determine whether it supported monitor mode and the capabilities required for the planned assessment.

The interface information was examined before proceeding with wireless monitoring.

  1. Monitor Mode Verification

The wireless interface was examined to determine its current operating mode. Monitor mode was then enabled, where supported, to allow the adapter to observe wireless frames.

After changing the mode, the interface configuration was checked to verify the result.

  1. Access Point Discovery

Airodump-ng was used to observe wireless activity and identify the authorized access point.

The information examined included:

  • SSID: Service Set Identifier, the wireless network name.
  • BSSID: Basic Service Set Identifier, the access point's wireless identifier.
  • CH: Channel on which the access point operates.
  • Security: Advertised wireless security configuration.
  • Signal information: Observed signal strength.

This information helped distinguish the authorized access point from other networks visible during monitoring.

  1. Target Identification

The authorized test access point was identified as "Amos_Net". The wireless monitoring results were examined to identify the access point and observe the wireless device connected to the network.

Target identification established which access point was within the assessment scope.

  1. Reconnaissance Observations

SSID: Amos_Net

BSSID: 72:D8:E8:A0:B5:D1

Channel: 1

Advertised security: WPA2 RSN

  1. Conclusion

Wireless reconnaissance provided the initial information required for the assessment. The identified access point and its observed security configuration became the reference for the subsequent wireless security tests.