A student on a city internship proposes capturing Enterprise Wi-Fi traffic and “just running aircrack like PSK.” What category error should the mentor correct?
Select an answer to reveal the explanation.
Short Explanation
You cannot treat Enterprise like a giant shared passphrase and feed random 802.1X traffic into a PSK cracker hoping for magic. Personal and Enterprise attack classes are different animals. Match the tool class to the auth model you actually saw.
Full Explanation
WPA Personal offline attacks against captured handshakes are not interchangeable with WPA Enterprise (802.1X/EAP) assessment classes. Feeding arbitrary Enterprise captures into PSK-oriented crackers is a category error: those tools do not magically extract 802.1X user passwords from any MGT-auth capture the way dictionary attacks target PSK material. Mentors should steer learners toward recon that identifies AUTH/MGT indicators and toward Enterprise-appropriate technique classes under authorization—not toward misapplied Personal tooling.