logo

Modern Wireless Tradecraft Pt II — MANA and Known Beacon Attacks

ID: b4bcd87c-69e0-5cae-b466-f884350edc98

STIX ID: report--b4bcd87c-69e0-5cae-b466-f884350edc98

Feed Name: SpecterOps Blog

Date Published: 2019-11-04

Date Updated: 2026-04-30

Author: Gabriel Ryan

...
...

This Part II technical writeup documents advanced rogue Wi‑Fi access point attack techniques — MANA (stateful PNL reconstruction), Loud Mode (union of seen ESSIDs), and Known Beacon (wordlist beacon brute‑forcing) — and details their implementation and usage in the EAPHammer tool (CLI flags, known‑beacons, forge‑beacons). It explains limitations of active probing, attack algorithms, operational tradeoffs, and includes examples and references; Part III will cover Management Frame ACLs to constrain attacks to specific targets.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.