Skill UI

This guide details the robust process of implementing VLAN-based (802.1Q) network segmentation on managed switches. It is crucial for isolating critical zones—such as DMZ, servers, and IoT—to meet strict compliance standards (PCI-DSS, HIPAA) and significantly limiting the blast radius during a security incident by controlling lateral movement. Includes port hardening and ACL configuration.

A comprehensive guide detailing the implementation of 802.1X port-based Network Access Control (NAC) using RADIUS authentication and platforms like PacketFence. This solution enforces identity-based access, performs endpoint posture assessment, and dynamically assigns VLANs. It is essential for establishing zero-trust networks, meeting stringent compliance standards (PCI-DSS, HIPAA), and automating the onboarding of BYOD devices.

This guide details the deployment of Cisco Identity Services Engine (ISE) for comprehensive Network Access Control (NAC). It utilizes 802.1X authentication, MAC Authentication Bypass (MAB), and posture assessment to enforce security policies. Key features include integrating with Active Directory, assigning dynamic VLANs, and applying TrustSec Security Group Tags (SGTs) for advanced network segmentation in enterprise environments.

This skill simulates advanced Layer 2 network attacks, including VLAN hopping, using techniques like switch spoofing (DTP) and 802.1Q double tagging. It is designed exclusively for authorized penetration testing environments to validate network segmentation, test trunk port hardening, and assess the risk of unauthorized VLAN access across the network infrastructure.

A comprehensive guide detailing how to conduct passive wireless security assessments using Kismet. This skill covers identifying rogue access points, detecting weak encryption (WEP, TKIP), mapping hidden SSIDs, and analyzing raw 802.11 frame types. It is essential for professional network auditing, incident response, and penetration testing in complex wireless environments.

A wireless 802.11 offensive testing methodology for red team and security assessments. It covers monitor-mode setup, handshake and PMKID capture, WPA3/Enterprise attacks, evil twin setups, WPS abuse, and related wireless intrusion techniques.

Techniques for attacking WPA/WPA2/WPA3-Enterprise 802.1X networks, including EAP method identification, evil-twin RADIUS credential capture, MSCHAPv2 cracking, and EAP-TLS certificate theft paths in corporate Wi-Fi environments.

Covers offensive workflows for Zigbee, Thread, and Matter mesh networks, including 802.15.4 sniffing, commissioning abuse, key capture, replay/injection, and control-command exploitation in smart-home deployments.

A comprehensive guide detailing various 802.11 management frame attacks, including deauthentication and disassociation. It covers targeted single-client deauth for handshake capture, broadcast DoS attacks, and advanced action-frame exploitation to bypass PMF (802.11w). Essential for professional penetration testing and wireless vulnerability assessment.