Network › Module 10 › Lesson 1
WPA2 vs WPA3 on YOUR Home AP
Read YOUR association — WPA3 is newer handshake hygiene, not a license to crack anyone's Wi-Fi.
Visual · wpa2_vs_wpa3_home
WPA2 vs WPA3 on a network YOU use. NEVER aircrack/PMKID.
Opening
The letters on the sticker are a handshake family. They are not a CTF against the café.
WPA2-Personal (often called WPA2-PSK) and WPA3-Personal are ways a station and an access point prove they share credentials and then encrypt unicast traffic. WPA3's SAE handshake is designed to resist the offline PSK guessing that made WPA2-PSK captures so famous in attack blogs. Cyberlium will say that sentence as defender literacy. It will not walk you through capturing a handshake, a PMKID, or running aircrack-ng. Original Cyberlium.
1. What the names actually promise
WPA2-PSK authenticity is “we both know the passphrase.” Captured handshake material from WPA2-PSK has been used offline to guess that passphrase. That is why password length and uniqueness still matter, and why WPA3-Personal's SAE is news: it is built to stop that offline guessing pattern.
WPA3 does not mean the AP vendor's cloud account is honest. It does not mean guest isolation is on. It does not mean you may crack the airport SSID “to compare.”
2. Read the mode YOUR station already uses
netsh wlan show interfaces on Windows, or nmcli on Linux, can show the SSID you are associated with and sometimes the authentication. That is YOUR session. It is not a dump of every PSK in the neighborhood, and you will not add key=clear.
If you are on Ethernet, write “not on Wi-Fi right now.” Do not drive to a mall to finish the screenshot.
Command guide
Read the mode YOUR station already uses
═══ COMMANDS ═══
Command — copy this
netsh wlan show interfaces || powershell.exe -NoProfile -Command "netsh wlan show interfaces" nmcli -t -f DEVICE,TYPE,STATE,CONNECTION device nmcli -t -f ACTIVE,SSID,SECURITY,SIGNAL dev wifi
3. Admin UI is not automatically in-scope
Changing WPA2 to WPA3 belongs on an AP you own, with a backup plan for old clients, after GATE did not stop you for treating 192.168.0.1 as the course demo. If GATE said you still do not log in “because this lesson mentioned WPA3.”
Write what YOUR interface reported. Leave cracking tools in the fiction folder.
Command guide
Admin UI is not automatically in-scope
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install python3
macOS:
Command — copy this
brew install python3
Windows: Download https://python.org/downloads/
═══ COMMANDS ═══
Command — copy this
python3 -c "print('WPA3 is handshake hygiene, not a CTF against strangers')"4. What you ship: a named WPA2 vs WPA3 sentence plus YOUR association read
Note WPA3-SAE vs WPA2-PSK offline-guess story without capturing anything. netsh/nmcli on THIS station. No key=clear. No aircrack. DEMO GATE holds.
5. What you record before the next lesson
t11-m10-l01-wpa.txt. Interface read or “not on wifi.” DEMO identified/STOP. NEVER handshake/PMKID. Next: Guest SSIDs and IoT Isolation.
6. Wrong vs right: stranger networks vs literacy on systems you own
Worked failure — same network word, opposite target. Right never needs a café or campus LAN.
Wrong
aircrack-ng a café handshake. netsh wlan show profile name=X key=clear dumped to Discord. hydra the AP. nmap the guest VLAN “to help.”
Right
Read YOUR interface. Write WPA2 vs WPA3 as literacy. Next: Guest SSIDs and IoT Isolation.
Mission: name WPA2 vs WPA3 from YOUR session, not a capture
1) / STOP if router. 2) netsh wlan show interfaces or nmcli on THIS host (or write not-on-wifi). 3) Write WPA2-PSK vs WPA3-SAE in cyberlium-lab without any crack tool. Never aircrack. Never PMKID. Never key=clear dumps.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor what SAE means in one sentence — not how to capture a handshake “in a lab VM against the café.”
Knowledge Check
APPLY: Why does this course mention WPA3-Personal?
Multiple choice
Knowledge Check
APPLY: True or False: netsh wlan show interfaces on YOUR PC is in-scope.
True or False
Knowledge Check
APPLY: GATE showed Router Admin at http://192.168.0.1/. WPA3 homework?
Multiple choice