Restructure and modernize the Wi-Fi pentesting guide

[carlospolop]

Summary

• replace the monolithic Wi-Fi page with a protocol-oriented methodology and focused pages
• document current attacks, prerequisites, evidence, tooling, limitations, and protocol-specific mitigations
• add dedicated coverage for Passpoint/OpenRoaming, DPP, Wi-Fi Direct/Aware/AWDL, 802.11s/EasyMesh, TDLS, FILS, AFC, FTM, MLO, and current privacy/side-channel research
• update the tool map around maintained upstream projects and distinguish orchestrators, primitives, research artifacts, and legacy tools
• keep Evil Twin EAP-TLS nested under the broader Evil Twin/association family

Research reviewed

Includes current primary research through 2026: WCDCAnalyzer, AirSnitch, Secure TOFU and Enterprise certificate measurements, Fragile Frames, SAECRED, SSID Confusion, SAE-PK/What a Mesh, DPP analysis, AFC-system attacks, secure 802.11az/bk ranging, WILD, XR non-cooperative sensing, and modern mesh access-control work.

Important corrections

• normal SAE Commit/Confirm captures are not hashcat mode 22000 offline password hashes
• PMF residual attacks are documented as state/coverage/implementation issues, not a universal PMF bypass
• Wifite2 points to the maintained kimocoder repository and is scoped to its defensible WEP/WPS/WPA2 workflows
• mdk4 examples use current upstream syntax and bounded rates

Validation

• mdbook build
• git diff --check
• all local Markdown targets and explicit heading anchors resolve
• commands checked against current upstream help/source for Aircrack-ng, mdk4, Wifiphisher, Airgeddon, Wifite2, Reaver, hostapd-mana, and related focused tools

The mdBook build succeeds. Reported HTML warnings are pre-existing and outside the Wi-Fi section.

[carlospolop]

Added the shared sidebar/theme fixes in c4a90f3:

• desktop sponsor anchored at the bottom with an independently scrolling page TOC above it;
• one external-link icon instead of two;
• normalized deep-link matching and full ancestor expansion in the left navigation.

Validated with mdbook build, Node syntax and diff checks, and the Docker preview at localhost:3337. A headless Chrome test on the Wi-Fi reconnaissance URL with both query and fragment confirmed one active entry, all three ancestor levels expanded, a single external icon, a bottom-aligned loaded sponsor, a scrollable TOC, and no overlap. The desktop layout and external-link rendering were also reviewed from screenshots.