As with penetration testing LANs or over the public internet, we need to perform reconnaissance to identify our target wireless network. As opposed to having a network connection, we also have to take care and ensure that we do not target a network that we are not authorized to test. This becomes a significant issue when discussing wireless penetration testing, as you will often find a number of wireless networks co-mingled with a target network. This is especially true in cases where our target organization and their associated networks are located in an office building or park.
Wireless network reconnaissance
Antennas
One key consideration when beginning wireless penetration testing is the selection of antennas. Virtual...