Wireless › Module 1 › Lesson 1
What Wireless Is
802.11 is a radio protocol stack — literacy and defender awareness on YOUR lab AP only.
Visual · wireless_what_is
Wireless = 802.11 radio protocol. $LAB_SSID / $LAB_IFACE only. Original Cyberlium.
Opening
Wi-Fi is not magic in the air. It is framed packets on licensed-ish spectrum — and this course only touches YOUR lab radio.
Wireless security work starts with naming what you are studying: IEEE 802.11 frames moving between a station (STA) and an access point (AP) over 2.4 GHz and 5 GHz bands. Pen testers and defenders both need that vocabulary — testers to validate controls under written scope, defenders to spot misconfigurations and rogue behavior. Cyberlium Topic 15 teaches protocol literacy and hardening mindset, not café raids. Every practical dest is YOUR intentional lab AP named $LAB_SSID on hardware you control — interface placeholder $LAB_IFACE. You will NOT aim tools at neighbor SSIDs, dorm gateways, airport hotspots, or any radio you do not own. You will NOT treat deauth spam or evil twins on public nets as homework. Next: RoE Written Scope.
1. Frames, not vibes: name the stack
802.11 traffic is management, control, and data frames with addresses, sequence numbers, and information elements. Clients associate to an AP; the AP bridges to a wired segment. Knowing frame types helps you read captures and write detection rules — before any tool name enters the chat.
Defenders map anomalous management frames and rogue BSSIDs to alerts. Attackers misconfigure channels and SSIDs loudly. Your job in Module 1 is to name the pieces before monitor mode.
Command guide
Try these commands — Frames, not vibes: name the stack
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Wi-Fi Alliance — https://www.wi-fi.org/ (802.11 literacy) Wireshark wireless — https://www.wireshark.org/docs/wsug_html_chunked/ChWirelessWLANTraffic.html aircrack-ng ethics — https://www.aircrack-ng.org/ (authorized networks only)
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install iw sudo apt install network-manager
macOS: Prefer Linux lab VM for iw Use airport / System Settings
Windows: Use Kali VM / WSL with iw Use netsh wlan (built-in)
═══ LINUX / macOS ═══
Command — copy this
iw dev 2>/dev/null || nmcli device status nmcli -f DEVICE,TYPE,STATE device status 2>/dev/null | head -10 || echo 'List YOUR interfaces only'
═══ WINDOWS ═══
Command — copy this
netsh wlan show interfaces
Primary tools to practice this lesson: iw, nmcli. Reference sites: Wi-Fi Alliance (https://www.wi-fi.org/); Wireshark wireless (https://www.wireshark.org/docs/wsug_html_chunked/ChWirelessWLANTraffic.html); aircrack-ng ethics (https://www.aircrack-ng.org/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Research radio under authorization
Legitimate wireless work requires written Rules of Engagement: which AP ($LAB_SSID), which adapter ($LAB_IFACE), which time window, which actions are allowed, and when you stop. Curiosity about a neighbor's SSID is not authorization. A YouTube title saying 'crack any Wi-Fi' is not authorization.
Cyberlium labs assume you built or imported a disposable lab AP isolated from stranger LANs. If the SSID is not $LAB_SSID in your RoE file, wireless tools stay closed for that target.
3. What this topic will never call practice
Deauth floods on café Wi-Fi, evil twins on airport hotspots, capturing handshakes from dorm hall SSIDs, or 'wardriving' stranger networks for clout. Those harm strangers and violate law or policy — not homework.
Ship a sentence: wireless literacy here means reading 802.11 behavior on MY lab AP at $LAB_SSID under written RoE. Next lesson writes that RoE.
4. What you ship: wireless definition that excludes stranger radios
Write 802.11 = framed radio protocol (STA/AP, mgmt/data). Lab dest = $LAB_SSID on YOUR AP. NEVER neighbor SSIDs, café deauth, public evil twins. Notes chmod 600.
5. What you record before the next lesson
Date (UTC). 802.11 vs script-kiddie misuse. Lab = $LAB_SSID / $LAB_IFACE. NEVER stranger SSIDs, café Wi-Fi, deauth spam, public evil twins. Path: $HOME/cyberlium-lab/t15-m01-l01-what-wireless.txt chmod 600.
6. Wrong vs right: stranger SSIDs vs YOUR lab AP
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Run airodump on the apartment building SSID list 'to learn.' Deauth a café AP because capture is slow. Clone an airport hotspot name for 'realism.'
Right
Define 802.11 stack at a high level. Name $LAB_SSID as the only dest. Next: RoE Written Scope.
Mission: define wireless as a protocol you own
1) Write STA/AP and frame categories in one paragraph. 2) Write a NEVER list (neighbors, café deauth, public evil twins). 3) Name $LAB_SSID and $LAB_IFACE as your lab placeholders. Never capture stranger SSIDs.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: 'Hint only: what is a management frame vs data?' — not how to deauth a neighbor.
Knowledge Check
APPLY: 802.11 wireless is best described as:
Multiple choice
Knowledge Check
APPLY: True or False: Cyberlium wireless practice includes capturing neighbor or café SSIDs.
True or False
Knowledge Check
APPLY: A defender studies 802.11 frame types mainly to:
Multiple choice