Hi everyone, I’m starting a new series where I’ll be documenting and sharing the Wi-Fi pentesting methodology I’m currently learning.

For those new here, I usually write about the different types of security assessments I perform — covering areas like AI, APIs, cloud security, and more. This series is going to be a bit different, as it focuses on something I hadn’t explored much before: wireless security.

To be honest, I never really considered Wi-Fi pentesting as a separate domain. But after speaking with colleagues, I realized that it’s a critical part of on-site engagements. If your work doesn’t involve being physically present at client locations, there’s a good chance you may not have come across it yet.

Through this series, my goal is simple: document what I learn and make it easier for others to get started. So if you ever find yourself on a client site, these posts should give you a practical starting point for Wi-Fi pentesting.

Terminology

Before we begin, here are a few basic terms we’ll use throughout the series:

• Access Point (AP) → The router or device that provides the wireless network
• Client → Any device that connects to the access point (laptop, phone, etc.)

Wi-Fi Authentication…