OffSec Wireless Professional case studies
OffSec Wireless Professional · Put your knowledge to work in context.
The OffSec Wireless Professional (OSWP) is a hands-on certification that, per OffSec, "demonstrates the ability to identify and exploit vulnerabilities in 802.11 networks." It is earned by passing the exam that accompanies PEN-210: Wireless Network Attacks, a Level 200 course with 480 hours of content built from 16 modules, many including videos. The credential suits penetration testers and security professionals who want to extend their skill set into wireless security policies and assessments; OffSec lists no formal prerequisites but strongly recommends comfort with the Linux command line, solid TCP/IP networking knowledge, basic 802.11 and encryption concepts, and some familiarity with standard penetration testing skills. The OffSec Wireless Professional case studies are 5 cases and about 2,522 words.
180 MHz in DFS and a 40 MHz 2.4 GHz Legacy Trap
During a post-deployment audit of a three-floor office, you find 42 access points: 5 GHz radios are 802.11ax configured for 80 MHz channels 52, 56, 60, and 64; 2.4 GHz radios are 802.11n at 20 MHz except one AP on channel 6 set to 40 MHz. A spectrum analyzer shows intermittent radar-like energy in UNII-2 extended.
543 words, about 3 min2Missing EAPOL in a Multi-Adapter 5 GHz Capture
On a 5 GHz assessment, the target SSID CORP-IOT is beaconing on channel 100 (5500 MHz). You have two adapters: an Alfa AWUS036ACH (RTL8812AU) and a TP-Link TL-WN722N v1 (AR9271).
494 words, about 2 min3WPS Lockout and PMKID on a Retail AP
A retail store runs a single AP with WPA2-PSK (AES-CCMP) and WPS enabled in PIN mode. The passphrase is 14 characters, mixed case and digits.
498 words, about 2 min4Deauth and Rogue AP Against PMF-Capable Clients
A hospital wireless network uses WPA2-Enterprise with 802.11w (PMF) optional, and a separate WPA3-SAE guest SSID with PMF required. You are authorized to test client isolation and rogue-AP detection.
507 words, about 3 min5Adapter Injection Failure Under mac80211
You are preparing a Linux laptop for a wireless assessment. lsusb shows a Realtek RTL8812AU adapter (0bda:8812) and an Atheros AR9271 adapter (0cf3:9271).
480 words, about 2 min