Lab SSID Only
Pin every radio exercise to $LAB_SSID on YOUR AP — written RoE before monitor mode.
Visual · t15_lab_ssid_only
Target SSID = $LAB_SSID you own. Original Cyberlium.
If the ESSID is not yours, the capture is not homework.
Before airodump or handshake work, write RoE: AP you own, $LAB_SSID exact string, $LAB_IFACE on host-only or isolated VLAN, time window, and stop conditions. Filter scans to your BSSID. Never aim deauth or capture tools at dorm, café, or city SSIDs — that is unauthorized interception. Defenders log probe and deauth anomalies; your lab should not create those signals outside your bench.
1. RoE pinning
Document $LAB_SSID, BSSID, channel, and AP firmware in RoE file.
Double-check --bssid filters before any capture command.
Command guide
Try these commands — RoE pinning
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Capture scope — https://www.aircrack-ng.org/doku.php?id=airodump-ng YOUR SSID only — https://www.wi-fi.org/discover-wi-fi/security
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install network-manager
macOS: Use airport / System Settings
Windows: Use netsh wlan (built-in)
═══ LINUX / macOS ═══
Command — copy this
grep LAB_SSID "$HOME/cyberlium-lab/t15-wifi/roe.txt" 2>/dev/null nmcli -f SSID,BSSID device wifi list 2>/dev/null | grep -i Cyberlium || nmcli device wifi list 2>/dev/null | head -10
Primary tools to practice this lesson: grep, nmcli. Reference sites: Capture scope (https://www.aircrack-ng.org/doku.php?id=airodump-ng); YOUR SSID only (https://www.wi-fi.org/discover-wi-fi/security). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Isolation
Lab AP on isolated segment — traffic does not reach roommate or public LAN.
Turn off lab AP when exercise ends; no overnight beacon spam.
3. Refusal list
NEVER: neighbor SSIDs, school Wi-Fi, municipal hotspots, 'interesting' open nets.
NEVER: deauth to 'help' capture on networks you do not own.
4. What you ship: lab SSID RoE line
$LAB_SSID + BSSID pinned. Isolation note. NEVER stranger ESSIDs.
5. What you record before the next lesson
RoE path with SSID/BSSID.
6. Wrong vs right: stranger SSIDs vs YOUR lab AP
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Scan all ESSIDs on channel 6 in the apartment building.
- Right: RoE pinned to $LAB_SSID. Next: handshake lab.
Mission: SSID scope sheet
1) Write $LAB_SSID and BSSID in RoE. 2) Name isolation method (VLAN/host-only AP). 3) Write five NEVER ESSIDs/targets.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “How to verify BSSID before capture?”
APPLY: Lab capture target:
APPLY: True or False: Deauth on stranger APs is practice.
APPLY: RoE must list: