About

Imported from ranjithvettayan/method-red (agent-frameworks/Decepticon/packages/decepticon/decepticon/skills/standard/wireless/SKILL.md). Install upstream with npx skills add ranjithvettayan/method-red --skill wireless. Copyright stays with the author.

802.11 Wireless Attack Suite — Operator Index

Name: wireless-overview
Author: ranjithvettayan

Load your wireless workflow (loaded into your system prompt) first on every iteration (hardware mode check, phase progression, scope rules, KG node contract). This file is the routing layer on top of it.

Playbook table

Leaf skill	Crypto column / trigger	Primary MITRE	Status
wpa2-psk	`WPA2 PSK`, `WPA PSK`	T1040, T1110.001	shipped
wpa3-sae	`WPA3 SAE`, `WPA2 WPA3` transition mode	T1557, T1040	shipped
wpa-enterprise-eap	`MGT`, `WPA-Enterprise`, `802.1X`	T1557, T1110.001	shipped
wps-pixie-dust	WPS column non-empty, `WPS` flag in wash	T1110.001, T1040	shipped
evil-twin-karma	Open / PSK, PNL probe leakage, captive portal	T1557, T1556	shipped
deauth-pmf	Any target needing client reconnect or 802.11w posture finding	T1498, T1040	shipped
krack-fragattacks	Legacy / embedded supplicant, key-reinstallation / fragmentation test	T1557, T1040	shipped

BLE GATT, Zigbee Touchlink, Z-Wave, LoRaWAN, and sub-GHz attacks are scoped to standard/iot/. Cross-reference that suite when the objective targets non-802.11 RF.

Hardware mode pointer

Leaf skills inherit the mode check from the wireless workflow:

mode = plan/roe.json:machine_enforcement.wireless.mode
  "in_sandbox"  → USB passthrough, monitor mode inside Kali
  "dropbox"     → ssh <dropbox> -- '<cmd>' for every wireless op
  "none"        → refuse, return outcome=blocked

Crypto-mode decision tree

airodump-ng --write-interval 1 --output-format csv ...
Read the ENC/CIPHER/AUTH columns:

  ENC=WPA2, AUTH=PSK          → wpa2-psk
  ENC=WPA3, AUTH=SAE          → wpa3-sae
  ENC=WPA2+WPA3, AUTH=SAE+PSK → wpa3-sae (transition-mode downgrade path)
  AUTH=MGT / 802.1X            → wpa-enterprise-eap
  WPS column non-empty          → wps-pixie-dust (run in parallel with PSK path)
  Open / no credential needed  → evil-twin-karma (KARMA/portal capture)

After selecting the primary leaf, always check:
  - deauth-pmf: needed if Path B (four-way) is chosen OR as standalone PMF finding
  - krack-fragattacks: applicable when target is legacy/embedded/poor-patch-cadence

KG node contract

All wireless leaf skills write the same node types (mirrors the wireless workflow):

Node kind	Typical props
`Network`	ssid, bssid, channel, crypto, pmf_state
`Host`	mac, oui, last_seen_bssid
`Credential`	secret_type, ssid, bssid, psk/eap_identity/eap_challenge
`Finding`	title, cve_ids (if applicable), severity, remediation

OPSEC posture cross-reference

posture	techniques permitted
`stealth`	PMKID (wpa2-psk Path A), passive PMF detect (deauth-pmf), Pixie-Dust only
`standard`	+ targeted deauth (1 frame), EAP capture, WPS Pixie-Dust
`loud`	+ broadcast deauth, evil-twin, KARMA, beacon flood, online WPS brute

Evil-twin always requires explicit permitted_actions: evil_twin in plan/roe.json regardless of posture — see the wireless workflow scope rules in your system prompt.

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/ranjithvettayan-method-red-wireless/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

ranjithvettayan-method-red-wireless.ocm.jsonjson

{
  "ocm": "1",
  "id": "ranjithvettayan-method-red-wireless",
  "kind": "skill",
  "name": "wireless-overview",
  "description": "Top-level index for the Decepticon 802.11 wireless attack suite. Routes the WirelessOperator to the correct leaf skill based on the target AP's crypto column (PSK / SAE / MGT / WPS) and engagement posture. BLE, Zigbee, Z-Wave, LoRaWAN, and sub-GHz live under iot/ by design — link provided below to prevent duplication.",
  "publisher": "ranjithvettayan",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "general"
    ],
    "tags": [
      "skill-md",
      "wifi",
      "802-11",
      "wpa2",
      "wpa3",
      "eap",
      "evil-twin",
      "deauth",
      "wps",
      "github"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Top-level index for the Decepticon 802.11 wireless attack suite. Routes the WirelessOperator to the correct leaf skill based on the target AP's crypto column (PSK / SAE / MGT / WPS) and engagement posture. BLE, Zigbee, Z-Wave, LoRaWAN, and sub-GHz live under iot/ by design — link provided below to prevent duplication."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "github",
      "repository": "https://github.com/ranjithvettayan/method-red",
      "path": "agent-frameworks/Decepticon/packages/decepticon/decepticon/skills/standard/wireless/SKILL.md",
      "ref": "5f7f3a5622b29877fbd9c1dbde342c149b4e001b",
      "url": "https://github.com/ranjithvettayan/method-red/blob/5f7f3a5622b29877fbd9c1dbde342c149b4e001b/agent-frameworks/Decepticon/packages/decepticon/decepticon/skills/standard/wireless/SKILL.md",
      "key": "ranjithvettayan/method-red/agent-frameworks/Decepticon/packages/decepticon/decepticon/skills/standard/wireless/SKILL.md"
    },
    "allowed_tools": [
      "Bash",
      "Read",
      "Write"
    ]
  },
  "instructions": "# 802.11 Wireless Attack Suite — Operator Index\n\n> Load your wireless workflow (loaded into your system prompt) first on every iteration (hardware mode\n> check, phase progression, scope rules, KG node contract). This file\n> is the routing layer on top of it.\n\n## Playbook table\n\n| Leaf skill | Crypto column / trigger | Primary MITRE | Status |\n|---|---|---|---|\n| [wpa2-psk](wpa2-psk/SKILL.md) | `WPA2 PSK`, `WPA PSK` | T1040, T1110.001 | shipped |\n| [wpa3-sae](wpa3-sae/SKILL.md) | `WPA3 SAE`, `WPA2 WPA3` transition mode | T1557, T1040 | shipped |\n| [wpa-enterprise-eap](wpa-enterprise-eap/SKILL.m",
  "cost": {
    "context_tokens": 820
  }
}

Fetch it by URL: GET /api/v1/registry/ranjithvettayan-method-red-wireless/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.