Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1016.002_wi-fi-discovery
Adversaries may search for information about Wi-Fi networks, such as network names and passwords, on compromised systems.
Passed 22 of 23 test cases with the skill, and 14 of 23 without it.
and 7 more in the full report
8 fixed14 passed either way1 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 8 test cases the skill fixed. Same model, same prompt, with and without the skill.
We want to run an Atomic Red Team simulation on Windows endpoints to test detections for wireless network enumeration. What single netsh command line string tests stored profile and password dump simultaneously?
| Checked | Without skill | With skill |
|---|---|---|
| Specifies netsh wlan show profile * key=clear as the atomic test command string. | Missed | Passed |
The instructions your model reads when the skill loads.
Sub-technique of: T1016
Adversaries may search for information about Wi-Fi networks, such as network names and passwords, on compromised systems. Adversaries may use Wi-Fi information as part of Account Discovery, Remote System Discovery, and other discovery or Credential Access activity to support both ongoing and future campaigns.
Adversaries may collect various types of information about Wi-Fi networks from hosts. For example, on Windows names and passwords of all Wi-Fi networks a device has previously connected to may be available through netsh wlan show profiles to enumerate Wi-Fi names and then netsh wlan show profile “Wi-Fi name” key=clear to show a Wi-Fi network’s corresponding password. Additionally, names and other details of locally reachable Wi-Fi networks can be discovered using calls to wlanAPI.dll Native API functions.
On Linux, names and passwords of all Wi-Fi-networks a device has previously connected to may be available in files under /etc/NetworkManager/system-connections/. On macOS, the password of a known Wi-Fi may be identified with security find-generic-password -wa wifiname (requires admin username/password).
Platforms: Linux, Windows, macOS
The following tests are from Atomic Red Team and provide actionable ways to test this technique:
Upon successful execution, information about previously connected Wi-Fi networks will be displayed with their corresponding key (if present).
Supported Platforms: windows
netsh wlan show profile * key=clear
test cases passed, vs 14 / 23 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.