Wireless (Wi-Fi) Penetration Testing
A wireless penetration test is an on-site assessment of corporate and guest Wi-Fi networks for encryption, authentication and segmentation. Nokta Guard tests scenarios such as unauthorised access from outside the building, moving from the guest network to the corporate network and harvesting credentials with a rogue access point, all under controlled conditions.
A wireless network does not stop at the building walls; it can be reached from the car park or a neighbouring office. A misconfigured guest network or a weak authentication method can let an attacker reach the internal network without ever walking in.
Testing is done on site, against your real access points and coverage area.
Control Scope
areas · PTES · NIST SP 800-153
Encryption and authentication
WPA2/WPA3 configuration, pre-shared key strength and 802.1X/EAP settings.
Guest network segmentation
Access from the guest network to the corporate network, management interfaces or other guests.
Rogue access point
Whether user credentials can be harvested with an access point impersonating your network.
Unauthorised access points
Wireless devices connected to your network without IT's knowledge.
Coverage
How far the signal leaks outside the building.
Wireless infrastructure management
Management interfaces and default settings of controllers and access points.
Work is carried out on site once the networks and locations to be tested are approved in writing. No action is taken against devices belonging to people outside your organisation, and rogue access point scenarios run only in approved time windows.
Duration depends on the number of locations and networks; a single office is usually tested in one or two days on site. Reporting is completed after the fieldwork.
List of networks and locations tested. Findings with evidence and CVSS score. Configuration and segmentation recommendations. Retest report.
Organisations that offer guest Wi-Fi, give access to corporate systems over wireless or operate several locations.