RoE Written Scope

If it is not written, it is not in scope — draft YOUR wireless RoE for $LAB_SSID.

RoE Written Scope• Audio Walkthrough

00:00/03:59

Visual · wireless_roe_written_scope

RoE = written who / what / when / stop. $LAB_SSID only. Original Cyberlium.

Curiosity is not authorization. A file you chmod 600 is.

Rules of Engagement for wireless answer: which AP ($LAB_SSID you control), which adapter ($LAB_IFACE), which operator (you on your hardware), which actions (observe/capture on lab SSID only), where notes live ($HOME/cyberlium-lab), and stop conditions (any SSID not $LAB_SSID, deauth on strangers, evil twins on public nets). Original Cyberlium. You draft RoE before monitor mode touches the air. You do not copy a bug-bounty scope and aim it at a school network. Next: Lab Radio Only.

1. Four RoE lines: who, what, where, stop

Who: the lab AP owner (you) on hardware you control. What: read/observe/capture on $LAB_SSID only per lab brief. Where: notes under $HOME/cyberlium-lab, mode 600. Stop: any SSID not $LAB_SSID, neighbor/café radios, deauth spam, evil twins on public nets, handshakes from stranger APs.

Written scope is how you refuse 'try my roommate's Wi-Fi' in Discord. Their AP needs their RoE — not your adapter.

Command guide

Try these commands — Four RoE lines: who, what, where, stop

═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)

Linux wireless — https://wireless.wiki.kernel.org/ (iw literacy) NetworkManager — https://networkmanager.dev/docs/ (nmcli — YOUR adapter)

═══ INSTALL ═══

Linux (Debian/Ubuntu):

Command — copy this

sudo apt install iw
sudo apt install network-manager

macOS: Prefer Linux lab VM for iw Use airport / System Settings

Windows: Use Kali VM / WSL with iw Use netsh wlan (built-in)

═══ LINUX / macOS ═══

Command — copy this

iw dev
nmcli -t -f DEVICE,TYPE,STATE device status
nmcli device wifi list 2>/dev/null | head -15 || echo 'Wi-Fi list needs radio; YOUR lab laptop only'

Primary tools to practice this lesson: iw, nmcli. Reference sites: Linux wireless (https://wireless.wiki.kernel.org/); NetworkManager (https://networkmanager.dev/docs/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.

2. Authorization is not 'I have a USB Wi-Fi dongle'

Owning an adapter does not grant spectrum permission on networks you do not operate. Scope is SSID-level: $LAB_SSID is in; everything else is out until a signed engagement says otherwise — this course is not that engagement.

Professional tests attach RoE to tickets and contracts. Steal the habit (write scope, respect stop) and leave stranger radios alone.

3. Stop conditions you can say out loud

If the BSSID is not your lab AP, stop. If someone asks for deauth on a café, stop. If a tutorial clones a public hotspot SSID, stop and rewrite to $LAB_SSID.

Next lesson hardens the radio: YOUR lab AP only, not bridged stranger LANs.

4. What you ship: four written RoE lines for wireless

who/what/where/stop on disk. $LAB_SSID named. NEVER stranger SSIDs, deauth spam, public evil twins. chmod 600.

5. What you record before the next lesson

Date. Four RoE lines. $LAB_SSID named. File t15-m01-l02-roe-scope.txt chmod 600.

6. Wrong vs right: stranger SSIDs vs YOUR lab AP

Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.

Wrong: Keep RoE 'in your head.' Aim airodump at the dorm hallway SSID because it is 'strong signal.'
Right: Write four lines and stop conditions. Next: Lab Radio Only.

Hands-on Exercise

Mission: freeze wireless RoE before monitor mode

1) Write who/what/where/stop in $HOME/cyberlium-lab. 2) Name $LAB_SSID as the only in-scope SSID. 3) List stop conditions including stranger radios and deauth spam. Never capture visible neighbor SSIDs.

Pro Tip

Stuck? Ask Cyberlium AI Mentor

Ask Mentor for a RoE template shape — not for a list of neighbor SSIDs to capture.

Practice QuizQuestion 1

Multiple choice

APPLY: A classmate shares a dorm SSID and says 'practice wireless.' Your RoE lists only $LAB_SSID. You:

Practice QuizQuestion 2

True or False

APPLY: True or False: Owning a monitor-capable adapter authorizes capturing any visible network.

Practice QuizQuestion 3

Multiple choice

APPLY: RoE 'stop' should include: