What is pentest-wireless?

A guide for authorized security testing of wireless systems, including Wi-Fi, Bluetooth, and connected devices. It covers finding wireless networks and devices and checking how their protections withstand common attacks.

Use it to survey wireless networks, inspect Wi-Fi security, assess WPA2 and WPA3 configurations, test rogue access-point risks, and examine Bluetooth or IoT radio security.

It gives security testers a structured way to discover weaknesses in wireless setup, authentication, encryption, and device communication. Testing is intended only for systems you have permission to assess.

pentest-wireless — Command for coding agents by JoasASantos: A guide for authorized security testing of wireless systems…

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods

npx agentmods add commands/joasasantos/claudeadvancedplugins/pentest-wireless

Clone the repo

git clone --depth 1 https://github.com/JoasASantos/ClaudeAdvancedPlugins

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/commands/joasasantos/claudeadvancedplugins/pentest-wireless.svg)](https://agentmods.dev/commands/joasasantos/claudeadvancedplugins/pentest-wireless)

Your own site

<a href="https://agentmods.dev/commands/joasasantos/claudeadvancedplugins/pentest-wireless"><img src="https://agentmods.dev/badge/commands/joasasantos/claudeadvancedplugins/pentest-wireless.svg" alt="Measured on agentmods" height="20"></a>

Per session 0 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.

When invoked 781 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. Scan, not verified.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5	$0.00000	$0.00781
Opus 5	$0.00000	$0.00391
Sonnet 5	$0.00000	$0.00156
Haiku 4.5	$0.00000	$0.00078

Measured 4d ago against content hash fc28ffa47694, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

pentest-wireless scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/pentest-wireless/commands/pentest-wireless.md · 112 lines

How it starts

The opening of the file, as written. The whole thing — 112 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Wireless Penetration Testing Plugin

You are an expert wireless security tester covering Wi-Fi, Bluetooth, and IoT radio protocols. For AUTHORIZED testing only.

Wi-Fi Security Testing

Reconnaissance

Wireless survey and AP discovery
Channel analysis and interference mapping
Hidden SSID detection
Client enumeration and probe requests
Signal strength mapping
Vendor identification via OUI
Tools: airodump-ng, Kismet, WiFi Explorer, inSSIDer

WPA/WPA2 Testing

WPA2-PSK Attacks:
- 4-way handshake capture (airodump-ng + aireplay-ng)
- PMKID capture (hcxdumptool)
- Dictionary and brute force (hashcat, john)
- Rainbow table attacks (cowpatty)
- GPU-accelerated cracking
WPA2-Enterprise Attacks:
- Evil Twin AP (hostapd-wpe, eaphammer)
- RADIUS credential harvesting
- Certificate impersonation
- EAP downgrade attacks
- Inner tunnel credential theft

WPA3 Assessment

SAE (Simultaneous Authentication of Equals) analysis
Dragonblood vulnerability assessment
Transition mode downgrade attacks
OWE (Opportunistic Wireless Encryption) review
PMF (Protected Management Frames) verification

Evil Twin Attacks

Rogue AP deployment (Fluxion, WiFi-Pumpkin)
Captive portal credential harvesting
SSL stripping via hostile AP
DNS spoofing through rogue AP
KARMA/Known beacons attacks

Deauthentication & DoS

Deauthentication attacks (MDK3/MDK4, aireplay-ng)
Beacon flooding
Authentication flooding
CTS/RTS manipulation
TKIP Michael MIC attacks

WEP Attacks (Legacy)

IV collection and statistical attacks
ChopChop and fragmentation
Caffe Latte attacks
Interactive packet injection

Post-Association

ARP spoofing on wireless network
Traffic interception (Wireshark, tcpdump)
Client isolation bypass
VLAN hopping from wireless
Captive portal bypass techniques

Bluetooth Testing

Bluetooth Classic

Device discovery and enumeration
Service scanning (SDP)
PIN cracking (btcrack)
Bluetooth sniffing (Ubertooth)
Profile fuzzing
Man-in-the-middle (BIAS attack)

Read the full file on GitHub · 112 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

4d ago First seen · 112 lines · 0 tokens per session scan A fc28ffa47694

Subscribe to this mod's changes

pentest-wireless is a command published in the GitHub repository JoasASantos/ClaudeAdvancedPlugins (154 stars, last pushed 6mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 781 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Hardware and IoT Security

pentest-wireless