Wireless networks broadcast into the air, so anyone nearby can hear the signal, which makes their security entirely dependent on strong encryption and authentication. WPA2 and its successor WPA3 are the protocols that protect Wi-Fi, and understanding their differences reveals both historical weaknesses and modern defenses. Rogue access points add a separate threat: fake networks that impersonate legitimate ones. For a tester, the goal is usually verifying that a network uses strong protocols and resists impersonation.
Analogy🏏Cricket
🏏 Think of it like cricket: Active recon is the captain walking out to inspect the pitch on match morning, pressing the surface, checking the grass, watching how the ball behaves in the nets. Unlike studying old footage from afar, this inspection happens on the ground itself and is visible to everyone. Just as that inspection reveals conditions no video could, active scanning reveals live services no public record shows, and just as it happens with the ground's permission, scanning happens only within authorized scope.