logo

Modern Wireless Tradecraft Pt III — Management Frame Access Control Lists (MFACLs)

ID: 3439f6c9-d445-5492-b1f0-8c5e8ace2689

STIX ID: report--3439f6c9-d445-5492-b1f0-8c5e8ace2689

Feed Name: SpecterOps Blog

Date Published: 2019-11-12

Date Updated: 2026-04-30

Author: Gabriel Ryan

...
...

This article explains how EAPHammer implements Management Frame ACLs (MAC- and SSID-based whitelists/blacklists) to precisely control client targeting during rogue AP techniques (Karma, MANA, known beacons), detailing configuration, hostapd integration, and performance trade-offs—especially how wildcards trigger linear searches versus optimized binary searches—and offers guidance to keep ACLs short to minimize runtime impact.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.