Red Team Wi-Fi: Modern Techniques

Part 1: Fingerprinting and observations

This part will introduce all the essential concepts of Wi-Fi. Indeed, starting with usages, topologies, and standards, attendees should have a well-condensed reminder to be able for the attacks later. Then we go through different techniques to identify the other network to focus on our target(s) and investigate for potential openings.

Assignment 1: Network enumeration

• Scanning networks
• Identifying our targets

Assignment 2: Frequency analysis

• Studying and analysing different frequencies from 2.4 GHz to 6 GHz

Assignment 3: Capturing traffic

• Use of promiscuous mode
• Switching to monitor mode
• Using dedicated tools for efficient Wardriving

Assignment 4: Playing with packets

• Analyzing packets
• Modifying and forging own packets with Scapy

Part 2: Attacks

After learning about monitoring, captures, and packet manipulations, we will see different cases and understand the opportunities an attacker can take when attacking a network. This part will go through old vulnerabilities that can still exist in some context to the newest attack opportunities, including existing tools.

Assignment 1: WEP

• Identifying the target
• Attacking it efficiently
• Capturing the secret

Assignment 2: WPA/WPA2 PSK

• Identifying the target
• Sniffing handshakes
• Attacking the target
• Capturing the secret

Assignment 3: WPA2 MGT

• Identifying the target
• Targeting a client
• Attacking the network
• Capturing the secret
• Going further inside the Active Directory

Further attacks

We finish by looking at different ways and other opportunities we can acquire during a penetration test or a Red Team test, including some good Red Team tricks when all these skills are implemented.

The content of private trainings can be arranged depending on your needs. We also provide additional content as follows:

• Fuzzing the Wi-Fi stacks
• Reversing FullMAC firmware
• etc.

• Knowledge of Linux administration
• Understanding of pentesting (network and applications) or Red teaming is also a plus

Training action within the meaning of article L. 6313-1 of the French Labour Code. Penthertz SAS is a training organisation registered under declaration number 11788588278 with the Île-de-France regional prefect; this registration does not constitute State approval.

Duration
14 hours over 2 days of 7 h. Indicative hours: 9:00–12:30 and 13:30–17:00.

Format
Live sessions, remote (virtual classroom) or on site, open enrolment or private group. Taught in English or French. 1 to 20 participants.

Audience
Pentesters, Red Team members, security auditors, network administrators and architects who want to understand offensive techniques to defend better.

Price
See the pricing table below: prices are shown excluding VAT (20 % in France), per participant for remote sessions; on-site and tailored content on quote.

Access time
Registration possible up to 10 working days before the session starts, subject to availability. The positioning questionnaire is sent to participants at least 15 days before the first day.

How to register
Contact us at [email protected] or through the contact form. A scoping call lets us collect your needs, check prerequisites and issue a quote. Registration is confirmed on receipt of the signed quote and training agreement.

Teaching methods
Short theory inputs followed by hands-on practice for most of the time, on targets and benches provided. Each participant works on their own workstation and equipment; kit, slides, scripts and captures are provided.

Assessment
Positioning questionnaire before the session; continuous assessment through observation of hands-on exercises and guided tasks; synthesis exercise at the end. Attendance is recorded on a half-day attendance sheet signed by participants and trainer.

Certificate
End-of-training certificate stating objectives, nature, duration and assessment results; completion certificate issued to the client. This course is not a certifying action (no RNCP or RS registration).

Accessibility
Our courses are accessible to people with disabilities. Contact our disability officer at [email protected] or +33 1 73 13 82 77, ideally 15 days before the session, to study adaptations. See our quality and accessibility page.

Documents
Training terms of sale (French original), training rules, privacy policy and results indicators. The detailed programme is the course content above; a PDF version is provided with the quote.

Complaints
Write to [email protected]: acknowledgement within five working days and a reasoned reply within fifteen working days. Individual customers may then refer an unresolved dispute free of charge to our consumer mediator, CM2C (details).

Information updated on 13 October 2026.