> For the complete documentation index, see [llms.txt](https://0xkourama.gitbook.io/blog/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://0xkourama.gitbook.io/blog/wi-fi-attacks/probe-requests-attack.md).
# Probe Requests Attack
A sniffing probe requests attack is a type of security threat where an attacker monitors or "sniffs" probe requests sent by Wi-Fi devices to discover nearby wireless networks they have previously connected to or are looking to connect to. Probe requests are frames sent by Wi-Fi devices when they are searching for available networks to join.
Here's how a sniffing probe requests attack typically works:
1. **Monitoring Probe Requests**: The attacker uses specialized software or hardware tools, such as Wi-Fi sniffers or network monitoring tools, to capture probe request frames transmitted over the air.
2. **Collecting Information**: By analyzing the captured probe requests, the attacker can gather information about the Wi-Fi networks that nearby devices are probing for. This information may include the **SSID (network name) of the network**, the **MAC address of the device sending the request**, and sometimes other details like **supported encryption methods**.
3. **Potential Exploitation**: Once the attacker has gathered information about nearby Wi-Fi networks, they may use this information for various malicious purposes. For example:
* They could use the collected SSIDs to create fake or rogue access points with the same names to trick devices into connecting to them (known as an evil twin attack).
* They could use the MAC addresses of devices to track or identify specific users' movements and behaviors.
* They could use the information to conduct further attacks, such as brute-force attacks against the encryption keys of Wi-Fi networks.
4. **Countermeasures**: To defend against sniffing probe request attacks, Wi-Fi network administrators can implement various security measures, including:
* Using strong encryption protocols like WPA2 or WPA3 to protect Wi-Fi network traffic.
* Disabling automatic connection to open or untrusted Wi-Fi networks on devices.
* Using intrusion detection systems (IDS) or intrusion prevention systems (IPS) to detect and block suspicious activity on the network.
* Employing Wi-Fi security solutions that can detect and mitigate rogue access points and other Wi-Fi threats.
Overall, sniffing probe requests attacks pose a significant risk to the privacy and security of Wi-Fi networks and the devices connected to them, highlighting the importance of implementing robust security measures to protect against such threats.
#### Example
