> For the complete documentation index, see [llms.txt](https://hackzzz.gitbook.io/welcome/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hackzzz.gitbook.io/welcome/everything-about-and-notes/wireless-pentesting/ssid-probing-and-bruteforcing.md).

# SSID Probing and Bruteforcing

## Intro

This is used in case we don't know the **ssid** of an AP.

### Concept

* Probes APs and checks for answer, useful for checking if SSID has been correctly decloaked and if AP is in your sending range. 
* **Bruteforcing of hidden SSIDs** with or without a wordlist is also available.
* However, hiding is not always the best option to prevent attacks from happening because even while hidden an attacker can capture encrypted frames in monitor mode and know the SSID.

```
# Here, we’d use the bruteforce technique against the target AP using mdk3.
mdk3 wlan0mon p -b l -c 6 -t '<BSSID>'
```