Community notes mention PMKID-class techniques against some WPA2-Personal networks. How should a city assessor treat PMKID at awareness level?
Select an answer to reveal the explanation.
Short Explanation
PMKID is an alternate doorway into offline guessing on some WPA2-Personal setups—sometimes without waiting on a full four-message dance. It is still offline candidate testing, not a cleartext password dump. Awareness beats treating the 4-way as the only possible path.
Full Explanation
In certain WPA2-Personal configurations and tooling paths, PMKID-related material can provide an offline attack surface without completing a classic four-message handshake capture. That does not mean the passphrase appears in cleartext, nor that PMKID is a WPA3-SAE-only concept, nor that captive-portal login is required. Assessors should recognize PMKID as an alternate Personal-mode awareness topic alongside handshake-centric workflows. Authorization and scope still govern any collection.