A spread spectrum technique that multiplies the original data signal with a pseudo-random noise-spreading code to protect signals from interference.

A wireless communications standard designed to provide multiple physical layer (PHY) and MAC options for broadband wireless access in metropolitan area networks.

A low-power wireless protocol that uses mesh networking to transmit long-distance data, ideal for IoT and sensor networks.

The IEEE standard that defines Quality of Service (QoS) enhancements for wireless networks, enabling prioritization of voice and video traffic.

The core protocol used by cellular networks to manage roaming, route calls between carriers, and handle SMS delivery.

Uses 802.1X/EAP with a RADIUS server for centralized authentication, supporting multiple methods like token cards, Kerberos, and certificates.

Uses TKIP for encryption with per-packet mixing functions, MICs, extended IVs, and re-keying mechanisms to fix WEP vulnerabilities.

Uses SAE (Simultaneous Authentication of Equals) or Dragonfly Key Exchange for password-based authentication resistant to offline dictionary attacks.

The latest Wi-Fi security standard using AES-GCMP-256 encryption, ECDH/ECDSA key management, and BIP-GMAC-256 integrity checks.

An attack where an attacker creates a soft AP on a laptop using a tool that makes the NIC appear as a legitimate AP.

Attacker learns the target SSID, creates a rogue AP with a spoofed SSID, and sends beacons to lure clients to connect.

Exploits WPA2's four-way handshake by forcing nonce reuse, allowing attackers to decrypt network traffic.

A denial-of-service attack that floods the wireless spectrum with noise or interference to disrupt communications.

Exploits client probing behavior when multiple WLANs coexist; the rogue AP responds to client probes for specific SSIDs.

Decrypts WEP/WPA/WPA2 capture files and strips wireless headers from Wi-Fi packets for analysis.

Enables/disables monitor mode on wireless interfaces and manages wireless driver conflicts.

Performs packet injection and deauthentication attacks on wireless networks.

Sending unsolicited, annoying messages to Bluetooth-enabled devices within range.

A denial-of-service attack that sends oversized packets to cause buffer overflow in Bluetooth devices.

Allows complete control of a Bluetooth device, including accessing calls, messages, and sensitive data.

A reconnaissance technique for gathering detailed information about Bluetooth devices (make, model, vulnerabilities).

Exploits Bluetooth's key negotiation process to force weak encryption keys, enabling eavesdropping.

Risks from failure to identify users, maintain identity, or weaknesses in session management.

Unnecessary code, comments, or data left in an application (e.g., passwords in comments).

Analyzing compiled binaries to determine source code, libraries, and application inner workings.

Gaining superuser (root) access on Android devices, bypassing security restrictions.

An attack that forces authenticated users to send unintended malicious requests to web applications.

Corporate data exposure through personal devices accessing organizational resources.

Insider threats where employees intentionally exfiltrate or misuse corporate data.

Storing personal and business data together, leading to accidental disclosure.

Transferring sensitive data over public Wi-Fi without encryption or VPN protection.

Android penetration testing toolkit for creating rogue APs, MITM attacks, and traffic sniffing.

Surveillance tool for tracking iOS/Android device activities without jailbreak.

Enterprise Mobility Management (EMM) platform for deploying and managing mobile devices.

Mobile intrusion prevention system providing comprehensive protection for iOS and Android devices.

Mobile security application with malware protection, anti-theft features, and privacy monitoring.

Mobile malware that replaces legitimate apps with malicious versions to display advertisements.