Skip to content

WPA3 / SAE Attack Methodology

Guides an agent through offensive WPA3/SAE Wi-Fi attack methodology for authorized testing

Stars
10,230
Licence
MIT
Files
1 file

What it does

This skill gives an AI agent a detailed playbook for attacking WPA3 Wi-Fi networks, the modern wireless security standard. It covers transition-mode downgrades (forcing older clients onto weaker WPA2), Dragonblood side-channel and downgrade weaknesses in older hostapd and wpa_supplicant versions, and SAE authentication flooding that can exhaust access point CPU. It also explains how Wi-Fi 6E (6 GHz) rules limit some of these attacks. The file is text guidance with example commands; it contains no scripts of its own.

Great for

  • Authorized wireless penetration testers assessing WPA3 or transition-mode networks
  • Security teams validating whether older access points are vulnerable to Dragonblood-class issues
  • Students learning how WPA3 SAE works and where its weaknesses have been found

Skip it if

  • Attacking networks you do not own or have written permission to test: unauthorized access is illegal in most jurisdictions
  • Running the SAE flood commands on production or consumer networks without authorization, since they can deny service to real users
  • Non-security users: the content assumes familiarity with Wi-Fi tools, radio hardware and command-line security testing

Try asking

  • “Check whether this office Wi-Fi network is in WPA2/WPA3 transition mode and explain the risk (with written authorization)”
  • “Summarize the Dragonblood CVEs and which router firmware versions are likely affected”
  • “Draft a test plan for evaluating SAE auth flooding resistance on our lab access point”
  • “Explain why WPA3-only networks and PMF block transition-mode downgrade attacks”
Step-by-step guide: how to use WPA3 / SAE Attack MethodologyInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    offensive-wpa3-sae.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip offensive-wpa3-sae.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip offensive-wpa3-sae.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only use this skill inside a documented, authorized engagement with defined scope and rules of engagement
  • Treat the agent's commands as suggestions and review every command before running it, especially flood and deauth-style tests
  • Verify the target's firmware version and WPA3 configuration with passive checks before attempting any active test

What's inside

  • SKILL.md

Redistributed unmodified from SnailSploit/Claude-Red under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.