Wireless › Module 3 › Lesson 4
Protocol Lab
Cipher and generation inventory for $LAB_SSID — WEP tombstone, WPA2/WPA3 status, no crack runs.
Visual · wireless_protocol_lab
Protocol inventory lab. $LAB_SSID only. Original Cyberlium.
Opening
Blue teams start with a cipher column — fill yours for $LAB_SSID before handshake modules.
Extend your dot11 inventory with cipher suite, WPA generation, PMF status, and PSK policy for $LAB_SSID. Mark WEP as N/A or simulated-in-isolation-only per brief. No aircrack, no neighbor captures. Next: Quiz — WEP WPA WPA2 WPA3.
1. Lab steps
Add columns: generation (WPA2/WPA3), cipher (CCMP), PMF (required/optional/off), PSK policy note for $LAB_SSID.
Command guide
Try these commands — Lab steps
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
WPA comparison — https://www.wi-fi.org/discover-wi-fi/security aircrack-ng docs — https://www.aircrack-ng.org/doku.php
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install network-manager
macOS: Use airport / System Settings
Windows: Use netsh wlan (built-in)
═══ LINUX / macOS ═══
Command — copy this
grep LAB_SSID "$HOME/cyberlium-lab/t15-wifi/roe.txt" 2>/dev/null nmcli -f SSID,BSSID,SECURITY,SIGNAL device wifi list 2>/dev/null | head -20
Primary tools to practice this lesson: nmcli, grep. Reference sites: WPA comparison (https://www.wi-fi.org/discover-wi-fi/security); aircrack-ng docs (https://www.aircrack-ng.org/doku.php). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. WEP simulation boundary
If brief allows isolated WEP sim, document SSID separate from production lab and teardown plan — default Cyberlium path is modern ciphers on $LAB_SSID only.
3. Close
chmod 600. Quiz next — then Adapter and Monitor Mode.
4. What you ship: protocol generation table for $LAB_SSID
Cipher/WPA gen/PMF/PSK policy for YOUR AP. WEP=tombstone. No crack commands. chmod 600.
5. What you record before the next lesson
Date. Protocol table for $LAB_SSID. File t15-m03-l04-protocol-lab.txt chmod 600.
6. Wrong vs right: stranger SSIDs vs YOUR lab AP
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Run crack on handshake from neighbor. Enable WEP on dorm router 'for history.'
Right
Protocol inventory for $LAB_SSID. Next: Quiz — WEP WPA WPA2 WPA3.
Mission: protocol lab inventory
1) Fill cipher/generation/PMF columns for $LAB_SSID. 2) Write PSK policy line. 3) chmod 600. No weaponized crack steps.
Stuck? Ask Cyberlium AI Mentor
This row pairs with handshake labs later — still $LAB_SSID only.
Knowledge Check
APPLY: Protocol lab forbids:
Multiple choice
Knowledge Check
APPLY: True or False: WEP may be attacked on neighbor APs because Module 3 mentions it.
True or False
Knowledge Check
APPLY: PMF status belongs in:
Multiple choice