Skip to content
SkillCheatSheet Sign in

offensive-wpa-enterprise

An AI agent skill from SnailSploit/Claude-Red, scored 72 out of 100 by code.

72/ 100B

Code score by group

  • Spec20/20
  • Description9/20
  • Procedure10/15
  • Done criteria8/15
  • Resources10/10
  • Scripts5/8
  • Safety7/7
  • Upkeep3/5

It loses the most points in Description (11), the group that checks whether the description says what the skill does and when to use it.

What the author says it does

WPA/WPA2/WPA3-Enterprise (802.1X / EAP) attack methodology — EAP method identification (PEAP-MSCHAPv2, EAP-TTLS, EAP-TLS, EAP-GTC, EAP-PWD, EAP-FAST), evil-twin RADIUS attacks with eaphammer for credential capture, MSCHAPv2 challenge-response cracking, EAP-TLS client certificate theft paths (DPAPI, NDES, AD CS auto-enrollment), supplicant validation bypass (missing server cert validation, missing CN pinning, BYOD misconfigurations), and post-capture pivots into AD via cracked domain credentials. Use for corporate Wi-Fi engagements where the network is 802.1X authenticated.

This is the description in the skill's own SKILL.md, written by its author, not by SkillCheatSheet.

Repository
SnailSploit/Claude-Red
Folder
Skills/wireless/offensive-wpa-enterprise
License
MIT
GitHub stars
10,645
SKILL.md lines
208
Other files
0

Add offensive-wpa-enterprise to your agent

npx skills add SnailSploit/Claude-Red --skill offensive-wpa-enterprise

The command uses the open skills CLI. A skill is instructions and scripts your agent will follow, so read it first: open the folder on GitHub at the commit that was scored.

Labelled for

More skills from SnailSploit/Claude-Red

  1. offensive-container-escape

    Container escape and breakout techniques targeting Docker, containerd, and Podman runtimes. Covers privileged container breakout via host filesystem mount and nsenter, Docker sock…

    68C
  2. offensive-deauth-disassoc

    Deauthentication and disassociation attacks against 802.11 networks — targeted single-client deauth for handshake capture, broadcast deauth for DoS (with authorization), action-fr…

    67C
  3. offensive-toctou

    Time-of-Check / Time-of-Use (TOCTOU) race condition exploitation methodology across binary, kernel, filesystem, web, and container layers. Covers symbolic-link races (open/access/…

    67C
  4. offensive-krack-fragattacks

    KRACK (CVE-2017-13077..082) and FragAttacks (CVE-2020-24586..588 + 26139-26147) — key reinstallation, fragmentation, and aggregation attacks against WPA2 supplicants. Covers Vanho…

    65C
  5. offensive-mobile

    Mobile (Android + iOS) application penetration testing methodology. Covers static analysis (apktool/jadx for Android, class-dump/Hopper/IDA for iOS), dynamic instrumentation with…

    65C
  6. offensive-bluetooth-ble

    Bluetooth Low Energy (BLE) attack methodology — GATT enumeration, characteristic read/write without auth, pairing downgrade (Just Works forced), LE Secure Connections bypass, MITM…

    64C
  7. offensive-data-exfiltration

    Dense methodology covering DNS exfiltration (dnscat2, iodine, dns2tcp), HTTPS tunneling (domain fronting, CDN abuse, legitimate service channels), ICMP tunneling (icmpsh, ptunnel-…

    64C
  8. offensive-network-attacks

    Dense description covering ARP spoofing, LLMNR/NBT-NS/mDNS poisoning, DNS poisoning, MITM attacks, VLAN hopping, DHCP attacks, 802.1X/NAC bypass, IPv6 attacks. Tools: Bettercap, R…

    64C

All skills in SnailSploit/Claude-Red

Scores come from a snapshot of 300 public GitHub repositories taken on 12 November 2026. Every score is the result of fixed checks run by code; no AI is involved. How scoring works.