Wireless › Module 1 › Lesson 2
RoE Written Scope
If it is not written, it is not in scope — draft YOUR wireless RoE for $LAB_SSID.
Visual · wireless_roe_written_scope
RoE = written who / what / when / stop. $LAB_SSID only. Original Cyberlium.
Opening
Curiosity is not authorization. A file you chmod 600 is.
Rules of Engagement for wireless answer: which AP ($LAB_SSID you control), which adapter ($LAB_IFACE), which operator (you on your hardware), which actions (observe/capture on lab SSID only), where notes live ($HOME/cyberlium-lab), and stop conditions (any SSID not $LAB_SSID, deauth on strangers, evil twins on public nets). Original Cyberlium. You draft RoE before monitor mode touches the air. You do not copy a bug-bounty scope and aim it at a school network. Next: Lab Radio Only.
1. Four RoE lines: who, what, where, stop
Who: the lab AP owner (you) on hardware you control. What: read/observe/capture on $LAB_SSID only per lab brief. Where: notes under $HOME/cyberlium-lab, mode 600. Stop: any SSID not $LAB_SSID, neighbor/café radios, deauth spam, evil twins on public nets, handshakes from stranger APs.
Written scope is how you refuse 'try my roommate's Wi-Fi' in Discord. Their AP needs their RoE — not your adapter.
Command guide
Try these commands — Four RoE lines: who, what, where, stop
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Linux wireless — https://wireless.wiki.kernel.org/ (iw literacy) NetworkManager — https://networkmanager.dev/docs/ (nmcli — YOUR adapter)
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install iw sudo apt install network-manager
macOS: Prefer Linux lab VM for iw Use airport / System Settings
Windows: Use Kali VM / WSL with iw Use netsh wlan (built-in)
═══ LINUX / macOS ═══
Command — copy this
iw dev nmcli -t -f DEVICE,TYPE,STATE device status nmcli device wifi list 2>/dev/null | head -15 || echo 'Wi-Fi list needs radio; YOUR lab laptop only'
Primary tools to practice this lesson: iw, nmcli. Reference sites: Linux wireless (https://wireless.wiki.kernel.org/); NetworkManager (https://networkmanager.dev/docs/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Authorization is not 'I have a USB Wi-Fi dongle'
Owning an adapter does not grant spectrum permission on networks you do not operate. Scope is SSID-level: $LAB_SSID is in; everything else is out until a signed engagement says otherwise — this course is not that engagement.
Professional tests attach RoE to tickets and contracts. Steal the habit (write scope, respect stop) and leave stranger radios alone.
3. Stop conditions you can say out loud
If the BSSID is not your lab AP, stop. If someone asks for deauth on a café, stop. If a tutorial clones a public hotspot SSID, stop and rewrite to $LAB_SSID.
Next lesson hardens the radio: YOUR lab AP only, not bridged stranger LANs.
4. What you ship: four written RoE lines for wireless
who/what/where/stop on disk. $LAB_SSID named. NEVER stranger SSIDs, deauth spam, public evil twins. chmod 600.
5. What you record before the next lesson
Date. Four RoE lines. $LAB_SSID named. File t15-m01-l02-roe-scope.txt chmod 600.
6. Wrong vs right: stranger SSIDs vs YOUR lab AP
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Keep RoE 'in your head.' Aim airodump at the dorm hallway SSID because it is 'strong signal.'
Right
Write four lines and stop conditions. Next: Lab Radio Only.
Mission: freeze wireless RoE before monitor mode
1) Write who/what/where/stop in $HOME/cyberlium-lab. 2) Name $LAB_SSID as the only in-scope SSID. 3) List stop conditions including stranger radios and deauth spam. Never capture visible neighbor SSIDs.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor for a RoE template shape — not for a list of neighbor SSIDs to capture.
Knowledge Check
APPLY: A classmate shares a dorm SSID and says 'practice wireless.' Your RoE lists only $LAB_SSID. You:
Multiple choice
Knowledge Check
APPLY: True or False: Owning a monitor-capable adapter authorizes capturing any visible network.
True or False
Knowledge Check
APPLY: RoE 'stop' should include:
Multiple choice