3Wireless_Security_Assessment - amoskim318/Wireless_Security_Testing_And_Hardening GitHub Wiki

Wireless Security Assessment

  1. Overview

This page documents the wireless security tests performed against the authorized "Amos_NET" access point. The assessment examines the configured security mode, relevant authentication traffic, management-frame behavior, and password-strength testing.

  1. Security Configuration

The wireless security configuration was examined to determine which security mode was being used by the access point.

WPA2-Personal commonly uses a pre-shared key, while WPA3-Personal uses Simultaneous Authentication of Equals (SAE). The assessment must distinguish between these modes because their authentication mechanisms and password-auditing properties differ.

Observed configuration:

  1. Authentication and Handshake Observation

The assessment examined authentication-related wireless traffic to understand the connection process between the access point and its client.

For WPA2-Personal, a suitable four-way handshake capture still support offline password auditing. The captured evidence was therefore examined to determine what authentication information was actually present.

  1. Active Wireless Testing

Active testing was considered to understand how wireless management frames can affect client connectivity.

Deauthentication frames can cause disconnection attempts under certain conditions. The outcome depends on the access point, client, and security protections, including Protected Management Frames.

Any observed disconnection should be documented as an observation rather than automatically classified as a vulnerability.

  1. Password-Strength Assessment

Aircrack-ng was used to evaluate captured authentication material against candidate passwords from a selected wordlist, where the protocol and capture supported the method.

The test was intended to determine whether the test password appeared in the selected candidate list.

  • Match found: A candidate matched under the applicable testing method.

A failed dictionary test does not prove that the password cannot be guessed.

  1. Security Interpretation

The security implications depend on the evidence collected. The advertised security mode alone does not prove that the network is secure or vulnerable. Tool like hashcat combined with other tool can crack WPA3 protocol.

Password strength, the authentication mechanism, firmware, configuration, and management-frame protections all contribute to wireless security.

  1. Conclusion

The assessment examined the security configuration and selected wireless attack surfaces of the authorized test network.