B5: Mobile, Wireless & Hardware
Wireless Deep: BLE, NFC, RFID & SDR
Understand wireless attack surfaces, legal boundaries, signal capture, protocol analysis, and defensive hardening.
| Technology | What to test | Typical defense |
|---|---|---|
| Wi-Fi | Configuration, authentication, segmentation, rogue AP exposure. | WPA3/strong WPA2, enterprise auth, segmentation, monitoring. |
| BLE | Pairing, GATT permissions, device identity, update flows. | Secure pairing, authorization, privacy addresses, signed updates. |
| NFC/RFID | Card type, cloning resistance, reader behavior, backend validation. | Cryptographic cards, server-side checks, replay resistance. |
| SDR | Signal identification and protocol research in controlled spectrum/lab. | Encryption, authentication, replay protection, regulatory compliance. |